$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa File: f83748be-c604-38fd-9db7-acbbef995831.roa (raw, json) Hash identifier: cEQLfZ4AN7cf6YJvcXxMlfoluVUIraP7mQtYp4QX5hg= Subject key identifier: 08:2E:50:44:FC:00:EF:01:DD:9C:C6:4B:B7:26:B1:56:92:96:06:AA Certificate issuer: /CN=caec0bfa-1434-4606-b19a-4a911d16534d Certificate serial: 010D0C9F4328584955294FC7AC20AE0E1C4C7740 Authority key identifier: 91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 401566 IP address blocks: 23.131.236.0/24 maxlen: 24 2602:f745::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:4f:c7:ac:20:ae:0e:1c:4c:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caec0bfa-1434-4606-b19a-4a911d16534d Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=13111712-f947-4479-9adb-89d8aeacc70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:e8:25:64:9a:b0:b0:8d:2f:00:2c:d3:8e: 1f:8b:2d:ed:a4:6a:d2:fb:1d:3f:bc:91:d3:20:fb: 77:0c:cc:a0:3f:1b:75:8e:c9:db:59:a0:04:f2:c4: 46:68:c5:4c:ce:c8:42:00:fb:dc:f6:47:69:1e:f4: 41:35:22:ad:90:e0:77:58:5a:fc:4f:30:88:c9:ee: de:5a:60:4e:c3:fe:a2:26:f0:5b:0a:1c:aa:dd:69: 6c:51:55:50:88:7d:86:03:97:27:5c:89:9f:df:4e: ee:8e:7c:b4:f8:f7:9a:6c:e7:65:d2:f3:13:ba:d1: 24:67:e8:d9:2d:c4:fa:d6:c8:5e:c4:16:12:c4:d1: af:da:e7:33:dd:73:87:ac:b8:e9:76:54:2e:3b:d3: 66:e3:59:01:8e:3d:21:30:36:28:1c:c1:5b:0f:c8: 5f:14:76:70:32:05:a6:9f:09:22:85:81:e5:df:95: a1:79:a2:f0:e2:c6:3f:be:d8:43:e2:3b:54:ea:31: 6c:8a:3d:e9:18:cb:d4:c1:33:e1:48:9e:d2:27:d1: 87:1d:18:e4:4b:a8:14:4c:63:ab:a2:ca:0b:eb:0e: 22:a2:9f:be:f6:f3:ab:76:82:87:6b:f7:df:67:c6: cf:1e:b7:31:10:fa:d1:69:fe:ac:3f:82:0b:a9:5f: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2E:50:44:FC:00:EF:01:DD:9C:C6:4B:B7:26:B1:56:92:96:06:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl X509v3 Authority Key Identifier: keyid:91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.236.0/24 IPv6: 2602:f745::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:66:8d:08:6a:36:63:76:30:ee:b2:14:7c:34:9d:55:a0:92: 5b:ea:4d:62:05:06:5c:1c:ff:ae:26:4f:79:9b:a9:40:46:0d: 5f:85:70:5e:c5:61:ac:f1:49:5e:e7:61:a4:8f:56:9b:71:75: 2a:ad:3b:6b:0b:95:de:29:7f:06:7a:68:db:1f:3b:4a:9b:38: 2a:f2:34:32:c0:b7:68:7d:bf:ec:7c:de:4c:07:c1:e0:7f:0d: f0:5d:bb:34:12:fa:bc:af:eb:8c:8b:ea:67:8c:64:45:74:a1: b6:83:ad:b7:46:38:d7:62:63:f6:78:de:56:61:fb:6a:a0:08: 70:b4:89:fa:0b:92:83:54:9b:48:65:6c:62:85:69:0a:5b:65: 7d:80:ba:9b:34:a6:3a:da:39:2d:7a:d7:df:a6:a3:cc:d7:d8: b1:6d:ef:09:49:f9:9f:9a:56:1e:e9:ff:69:69:bf:f7:a6:7c: 68:41:54:a5:04:74:e4:95:8f:52:77:c9:3b:6b:b9:8a:6e:40: ed:30:d8:99:5c:9a:2f:03:d5:04:4d:5d:a3:d2:63:b8:36:77: 68:71:a4:0a:e0:da:60:6a:b4:44:5a:b8:e4:f7:5e:e2:36:44: b7:c1:f6:da:11:19:7a:f4:43:92:34:42:fa:e6:d3:77:44:c7: d8:a6:e5:a6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElVKU/HrCCuDhxMd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FlYzBiZmEtMTQzNC00NjA2LWIxOWEtNGE5MTFkMTY1 MzRkMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk MTMxMTE3MTItZjk0Ny00NDc5LTlhZGItODlkOGFlYWNjNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLLoJWSasLCNLwAs044fiy3tpGrS+x0/vJHT IPt3DMygPxt1jsnbWaAE8sRGaMVMzshCAPvc9kdpHvRBNSKtkOB3WFr8TzCIye7e WmBOw/6iJvBbChyq3WlsUVVQiH2GA5cnXImf307ujny0+PeabOdl0vMTutEkZ+jZ LcT61shexBYSxNGv2ucz3XOHrLjpdlQuO9Nm41kBjj0hMDYoHMFbD8hfFHZwMgWm nwkihYHl35WheaLw4sY/vthD4jtU6jFsij3pGMvUwTPhSJ7SJ9GHHRjkS6gUTGOr osoL6w4iop++9vOrdoKHa/ffZ8bPHrcxEPrRaf6sP4ILqV/M5QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAguUET8AO8B3ZzGS7cmsVaSlgaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYWVj MGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQxNjUzNGQvZjgzNzQ4YmUtYzYwNC0z OGZkLTlkYjctYWNiYmVmOTk1ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2FlYzBiZmEtMTQzNC00NjA2LWIx OWEtNGE5MTFkMTY1MzRkL2NhZWMwYmZhLTE0MzQtNDYwNi1iMTlhLTRhOTExZDE2 NTM0ZC5jcmwwHwYDVR0jBBgwFoAUkYnvpwqd6EFrUXI50DOBr0BEl74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkx MWQxNjUzNGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PsMA4E AgACMAgDBgQmAvdFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiZo0IajZjdjDushR8NJ1VoJJb6k1iBQZc HP+uJk95m6lARg1fhXBexWGs8Ule52Gkj1abcXUqrTtrC5XeKX8GemjbHztKmzgq 8jQywLdofb/sfN5MB8Hgfw3wXbs0Evq8r+uMi+pnjGRFdKG2g623RjjXYmP2eN5W YftqoAhwtIn6C5KDVJtIZWxihWkKW2V9gLqbNKY62jktetffpqPM19ixbe8JSfmf mlYe6f9pab/3pnxoQVSlBHTklY9Sd8k7a7mKbkDtMNiZXJovA9UETV2j0mO4Nndo caQK4NpgarREWrjk917iNkS3wfbaERl69EOSNEL65tN3RMfYpuWm -----END CERTIFICATE-----Generated at Sun Apr 6 23:58:55 2025 by rpki-client