$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa File: dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa (raw, json) Hash identifier: TiOQC/2KnhHVUxEgCcTMffVCJGWQY5KWJXwPWaOBRFs= Subject key identifier: CF:24:26:EF:82:71:2A:2A:9D:54:A8:CD:AD:EF:3C:FC:1B:DB:A1:91 Certificate issuer: /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Certificate serial: 010D0C9F43285849547E9A17EA83C3A81AE92D40 Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa Signing time: Thu 27 Mar 2025 19:16:49 +0000 ROA not before: Thu 27 Mar 2025 19:16:49 +0000 ROA not after: Wed 25 Jun 2025 19:16:49 +0000 asID: 11832 IP address blocks: 23.136.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:7e:9a:17:ea:83:c3:a8:1a:e9:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Validity Not Before: Mar 27 19:16:49 2025 GMT Not After : Jun 25 19:16:49 2025 GMT Subject: CN=d19f74af-b4f4-4022-8346-2be23051ff7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:4e:cc:97:df:ac:32:75:e7:9a:ac:b7:a0: 29:34:2c:8f:e5:90:b0:89:e8:c7:54:03:5e:39:c4: d6:61:2e:80:f2:b5:9a:f7:05:80:d6:2c:a6:98:c7: 1b:ca:d3:78:c9:e3:45:5b:64:f4:ac:75:18:a4:d1: 85:a0:1e:fe:a5:90:86:21:78:d6:6a:e1:ea:12:8a: 63:0a:8c:59:2e:99:a1:35:11:18:c9:ad:9a:ca:f6: 9d:6b:1a:3a:e8:ac:d1:dd:a4:85:54:aa:4d:91:c3: f0:a5:30:28:92:e5:48:fa:84:6f:7c:8c:a3:98:f2: 48:8c:d3:e1:76:f4:a2:a0:40:cc:77:d1:ea:d6:5e: 5e:36:a4:38:1d:ca:6c:81:3c:58:3f:27:e1:f6:8b: ab:bc:d7:a3:69:6a:cc:99:3b:42:2a:d7:f8:53:93: 21:da:40:86:a8:40:b3:10:d3:59:36:15:af:3b:8f: 6e:1c:1f:23:dd:77:84:64:27:16:ef:2b:fb:85:d5: b5:c1:27:bf:3a:47:a3:2f:48:cd:31:8b:be:eb:9a: 08:f2:bd:6c:b3:e5:56:1b:58:9b:53:34:c2:b4:c9: 37:71:42:a5:58:21:2a:56:d9:9f:f6:7e:36:c5:47: ec:93:e6:dd:98:6b:f5:f7:9a:39:1c:df:77:72:38: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:24:26:EF:82:71:2A:2A:9D:54:A8:CD:AD:EF:3C:FC:1B:DB:A1:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl X509v3 Authority Key Identifier: keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer sbgp-ipAddrBlock: critical IPv4: 23.136.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:68:8a:9e:78:13:74:77:03:52:ce:a8:f9:cf:11:16:09:54: 91:2e:b3:f9:46:0c:ab:c3:59:0b:64:75:a9:7b:fc:78:c5:8f: 71:30:d3:d9:f7:d2:d5:fd:93:30:28:c9:87:3e:56:9a:c5:22: 7b:24:ec:99:fb:4e:04:05:14:fa:9f:3c:5f:d5:5c:4e:05:00: 13:4e:72:13:9e:2f:24:14:0f:e1:cf:c6:20:40:64:07:27:26: fb:f0:c1:23:dd:eb:5a:64:a9:e7:97:40:1f:98:b2:4a:67:d3: 94:a4:6e:52:1d:c0:59:96:d1:3c:0d:fe:f1:83:00:32:83:b9: 80:16:e4:32:1d:76:7a:90:5e:14:f7:2b:cd:b8:3e:58:5a:b1: 30:f0:ed:4d:b8:d0:7a:21:3f:31:dd:1d:0c:29:e9:6f:09:6b: e4:8e:84:87:e3:5a:4e:2b:e4:c5:fe:f2:0f:a9:3c:8d:a2:a4: 6e:84:27:74:f0:98:0d:6f:50:16:8b:e9:7e:d0:8c:b1:c3:1e: d3:4c:65:0f:8e:2c:19:60:88:89:98:40:d4:ab:e1:8b:92:8e: 37:c2:9d:36:44:e2:fa:97:03:69:ea:bd:42:39:2b:f8:f6:bd: 0e:c6:48:dc:14:62:b2:5a:d9:6c:55:22:e2:d5:13:f6:35:6e: b3:8e:4c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUfpoX6oPDqBrpLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZiODc3NTktMzZjNC00ZTVhLTljMmItMzRlMDBjMGZi YzMwMB4XDTI1MDMyNzE5MTY0OVoXDTI1MDYyNTE5MTY0OVowLzEtMCsGA1UEAxMk ZDE5Zjc0YWYtYjRmNC00MDIyLTgzNDYtMmJlMjMwNTFmZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVxOzJffrDJ155qst6ApNCyP5ZCwiejHVANe OcTWYS6A8rWa9wWA1iymmMcbytN4yeNFW2T0rHUYpNGFoB7+pZCGIXjWauHqEopj CoxZLpmhNREYya2ayvadaxo66KzR3aSFVKpNkcPwpTAokuVI+oRvfIyjmPJIjNPh dvSioEDMd9Hq1l5eNqQ4HcpsgTxYPyfh9ourvNejaWrMmTtCKtf4U5Mh2kCGqECz ENNZNhWvO49uHB8j3XeEZCcW7yv7hdW1wSe/OkejL0jNMYu+65oI8r1ss+VWG1ib UzTCtMk3cUKlWCEqVtmf9n42xUfsk+bdmGv195o5HN93cjgYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8kJu+CcSoqnVSoza3vPPwb26GRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4 Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUwMGMwZmJjMzAvZGQ0NzQ5ZTYtNmYwMy0z OWVlLTg2OWYtYWIxMmQzY2I0M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZiODc3NTktMzZjNC00ZTVhLTlj MmItMzRlMDBjMGZiYzMwL2VmYjg3NzU5LTM2YzQtNGU1YS05YzJiLTM0ZTAwYzBm YmMzMC5jcmwwHwYDVR0jBBgwFoAUeLPdEjqK3NXQvmd/J/lBuR6hhiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUw MGMwZmJjMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4iMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEloip54E3R3A1LOqPnPERYJVJEus/lGDKvDWQtkdal7/HjFj3Ew09n3 0tX9kzAoyYc+VprFInsk7Jn7TgQFFPqfPF/VXE4FABNOchOeLyQUD+HPxiBAZAcn JvvwwSPd61pkqeeXQB+Yskpn05SkblIdwFmW0TwN/vGDADKDuYAW5DIddnqQXhT3 K824PlhasTDw7U240HohPzHdHQwp6W8Ja+SOhIfjWk4r5MX+8g+pPI2ipG6EJ3Tw mA1vUBaL6X7QjLHDHtNMZQ+OLBlgiImYQNSr4YuSjjfCnTZE4vqXA2nqvUI5K/j2 vQ7GSNwUYrJa2WxVIuLVE/Y1brOOTKE= -----END CERTIFICATE-----Generated at Sat Apr 12 01:54:11 2025 by rpki-client