$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/7e99e004-b7ad-3006-bdf6-3a918d6a8e82.roa File: 7e99e004-b7ad-3006-bdf6-3a918d6a8e82.roa (raw, json) Hash identifier: GpXyzwlbyHi7QI+DQqalIvd2nyFAg3IE/QQeqraalQM= Subject key identifier: 54:A4:85:CD:C6:C5:B7:0D:C5:BE:67:74:3F:72:BE:AD:76:36:4F:B7 Certificate issuer: /CN=e0803549-b2b8-455b-aa30-5e7d86b2fd59 Certificate serial: 010D0C9F4328584930307098C50C330EBD1CB300 Authority key identifier: CA:C2:DD:5B:2B:10:BE:EF:77:1C:3B:D3:92:23:32:A5:59:B7:C7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/7e99e004-b7ad-3006-bdf6-3a918d6a8e82.roa Signing time: Fri 14 Mar 2025 19:10:14 +0000 ROA not before: Fri 14 Mar 2025 19:10:14 +0000 ROA not after: Thu 12 Jun 2025 19:10:14 +0000 asID: 393772 IP address blocks: 23.136.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:30:70:98:c5:0c:33:0e:bd:1c:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0803549-b2b8-455b-aa30-5e7d86b2fd59 Validity Not Before: Mar 14 19:10:14 2025 GMT Not After : Jun 12 19:10:14 2025 GMT Subject: CN=3ddfd80b-00f4-4d94-a824-4628a19cb2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:d2:30:3f:85:aa:46:a7:cf:54:07:40:92: b2:b0:94:94:65:0f:df:6d:c5:11:79:c0:f5:46:8c: 21:0b:a1:7c:82:8e:d5:c1:b6:d1:07:e6:b9:19:b4: 50:55:3f:a0:36:68:ed:60:b1:94:b9:16:48:1b:2f: 50:55:7f:61:bf:fa:da:7a:f6:6c:5f:41:43:a8:77: c0:12:ac:40:b6:40:ca:57:08:6f:80:07:26:03:4b: b8:f4:8b:3f:ed:6a:85:d7:8d:32:65:b3:c0:fd:a9: 6e:95:52:99:8a:35:76:75:fd:88:05:43:d4:9f:19: ba:a0:21:d7:13:10:d9:f5:c1:4b:e9:eb:56:0d:d7: f1:ec:c8:55:2e:d9:93:b1:cd:c2:50:f4:55:08:6c: d7:40:9f:7c:23:f4:6c:2c:12:02:df:72:9a:b3:93: ce:75:c5:a9:3a:39:27:69:fb:9f:46:9b:13:b3:d2: 18:0e:8b:9e:04:01:44:e5:b2:45:ff:c4:a0:ab:ff: 3f:8a:04:7e:f3:f2:ff:9c:cc:13:6d:5c:c9:2d:42: 6d:20:d1:28:7b:67:c0:5d:8b:42:99:b4:50:23:40: 68:bf:2e:a6:61:16:39:38:b9:72:0d:2f:a6:f1:b4: 24:2b:61:d3:a7:82:ca:a0:d9:ba:ec:52:cc:f8:96: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:85:CD:C6:C5:B7:0D:C5:BE:67:74:3F:72:BE:AD:76:36:4F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/7e99e004-b7ad-3006-bdf6-3a918d6a8e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.crl X509v3 Authority Key Identifier: keyid:CA:C2:DD:5B:2B:10:BE:EF:77:1C:3B:D3:92:23:32:A5:59:B7:C7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer sbgp-ipAddrBlock: critical IPv4: 23.136.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c6:e3:b3:54:9d:35:84:b6:9c:70:fa:62:9b:d5:35:d8:b8: dc:d9:71:da:ee:fb:10:b3:fd:c8:bb:4e:3b:8b:4e:33:ce:62: 72:59:09:ba:d3:e6:15:9e:df:4b:70:4a:f5:12:bd:4b:1c:e2: ab:9a:19:f2:2d:3a:35:51:ac:31:42:47:4d:3a:0d:b2:bd:ae: 91:05:dc:31:d8:ec:e6:57:26:d5:94:2f:43:c7:c7:88:02:84: 47:11:85:be:0a:8d:b3:c3:19:4c:ca:1b:ee:c3:96:c6:4c:7c: 3c:8f:5a:a8:fd:cc:72:61:6f:18:c5:08:c3:d5:2f:04:9b:84: fa:82:23:4f:1a:89:5f:8c:57:02:15:b8:2a:77:94:16:a5:17: 59:e9:a9:19:70:e9:f5:68:ca:e9:78:03:5c:9c:7c:45:a8:6a: 01:f8:a0:9b:0b:bd:c2:01:b7:bf:86:97:d2:e6:52:fa:11:f7: e0:cb:87:b4:44:dd:6f:aa:35:be:58:7b:bf:de:84:43:21:13: c8:41:d6:e1:ad:01:16:6e:c4:36:0e:6f:d0:89:9e:b4:cb:46: f4:46:df:a3:82:28:68:46:4f:d6:43:04:c6:5e:42:d9:25:f9: 3e:66:66:a1:46:14:b3:a2:28:29:b1:c1:55:d8:2d:e3:5c:37: 2d:eb:bd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwMHCYxQwzDr0cswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA4MDM1NDktYjJiOC00NTViLWFhMzAtNWU3ZDg2YjJm ZDU5MB4XDTI1MDMxNDE5MTAxNFoXDTI1MDYxMjE5MTAxNFowLzEtMCsGA1UEAxMk M2RkZmQ4MGItMDBmNC00ZDk0LWE4MjQtNDYyOGExOWNiMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWnSMD+Fqkanz1QHQJKysJSUZQ/fbcURecD1 RowhC6F8go7VwbbRB+a5GbRQVT+gNmjtYLGUuRZIGy9QVX9hv/raevZsX0FDqHfA EqxAtkDKVwhvgAcmA0u49Is/7WqF140yZbPA/alulVKZijV2df2IBUPUnxm6oCHX ExDZ9cFL6etWDdfx7MhVLtmTsc3CUPRVCGzXQJ98I/RsLBIC33Kas5POdcWpOjkn afufRpsTs9IYDoueBAFE5bJF/8Sgq/8/igR+8/L/nMwTbVzJLUJtINEoe2fAXYtC mbRQI0Bovy6mYRY5OLlyDS+m8bQkK2HTp4LKoNm67FLM+JbHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSkhc3GxbcNxb5ndD9yvq12Nk+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMDgw MzU0OS1iMmI4LTQ1NWItYWEzMC01ZTdkODZiMmZkNTkvN2U5OWUwMDQtYjdhZC0z MDA2LWJkZjYtM2E5MThkNmE4ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTA4MDM1NDktYjJiOC00NTViLWFh MzAtNWU3ZDg2YjJmZDU5L2UwODAzNTQ5LWIyYjgtNDU1Yi1hYTMwLTVlN2Q4NmIy ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUysLdWysQvu93HDvTkiMypVm3x/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMDgwMzU0OS1iMmI4LTQ1NWItYWEzMC01ZTdk ODZiMmZkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4gMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDG47NUnTWEtpxw+mKb1TXYuNzZcdru+xCz/ci7TjuLTjPOYnJZCbrT 5hWe30twSvUSvUsc4quaGfItOjVRrDFCR006DbK9rpEF3DHY7OZXJtWUL0PHx4gC hEcRhb4KjbPDGUzKG+7DlsZMfDyPWqj9zHJhbxjFCMPVLwSbhPqCI08aiV+MVwIV uCp3lBalF1npqRlw6fVoyul4A1ycfEWoagH4oJsLvcIBt7+Gl9LmUvoR9+DLh7RE 3W+qNb5Ye7/ehEMhE8hB1uGtARZuxDYOb9CJnrTLRvRG36OCKGhGT9ZDBMZeQtkl +T5mZqFGFLOiKCmxwVXYLeNcNy3rvT8= -----END CERTIFICATE-----Generated at Sat Apr 12 18:44:30 2025 by rpki-client