$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa File: 884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa (raw, json) Hash identifier: 9wZxkHXuv3JgKD4FFx3eJkZPaChp7gu/moQquhiIIS8= Subject key identifier: 67:97:BC:9A:98:41:B5:66:ED:46:A5:8E:04:C6:1A:6E:F1:D2:84:F8 Certificate issuer: /CN=1716e48f-a64c-4227-b984-34b75b5f7e97 Certificate serial: 010D0C9F4328584913AC1AF6EA7A387DF7ABEA00 Authority key identifier: 3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 396480 IP address blocks: 23.131.64.0/24 maxlen: 24 23.131.65.0/24 maxlen: 24 139.60.72.0/22 maxlen: 22 2604:4ec0::/36 maxlen: 36 2604:4ec0:1000::/36 maxlen: 36 2604:4ec0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1a:f6:ea:7a:38:7d:f7:ab:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1716e48f-a64c-4227-b984-34b75b5f7e97 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=f9aefb00-508e-45df-b3a5-3c7f0e097618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:5e:9d:c8:63:01:6f:6d:c1:96:7f:04:bc: 77:54:a5:6d:12:64:dd:45:57:dc:0e:64:e7:0d:1b: 3d:03:bb:c1:dc:a0:45:38:97:03:02:6b:5c:4e:b6: 8a:3e:19:e9:1f:d4:ac:0d:60:58:e5:83:bb:8c:f3: 00:d9:66:69:86:c6:d9:7f:b6:33:39:4a:b1:88:93: 69:2b:16:c3:49:2a:bc:72:e4:d5:98:fe:c6:29:cb: 1d:ef:08:f8:e8:c6:d3:b3:6c:c5:9e:2f:9f:77:90: 1d:0d:19:05:82:7e:3a:ea:ae:2d:7b:09:04:00:c4: 87:68:74:81:a7:69:ff:a6:c2:40:89:4c:60:63:b1: 58:24:13:82:e3:55:94:c5:75:c4:b0:2a:c4:d1:44: e0:a2:0d:b7:9a:33:f7:49:14:68:4c:6d:d5:22:78: c0:4e:37:70:e7:e5:9f:84:f2:da:74:45:b6:f0:03: e1:81:22:03:b5:39:d7:13:94:ba:44:a0:75:05:85: b2:14:6f:89:59:41:86:c3:41:24:e0:16:ad:a9:87: 68:b8:56:4c:01:63:c4:b5:f0:db:0d:86:5e:59:8c: b1:a0:60:c0:f1:f1:2d:1f:1d:61:be:2e:ec:3f:e6: 54:61:36:ba:b9:cd:cb:03:d2:4f:cd:6b:7f:f9:2a: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:BC:9A:98:41:B5:66:ED:46:A5:8E:04:C6:1A:6E:F1:D2:84:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl X509v3 Authority Key Identifier: keyid:3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer sbgp-ipAddrBlock: critical IPv4: 23.131.64.0/23 139.60.72.0/22 IPv6: 2604:4ec0::-2604:4ec0:2fff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bf:a7:b4:46:6a:82:84:f5:8c:be:6f:bc:55:6b:2b:b5:0f: e4:c7:1d:36:1c:40:d8:49:90:d7:35:97:4d:4f:25:a5:f7:2e: bc:4e:96:91:c9:ac:cc:67:e9:f8:2e:91:d8:db:be:11:4c:e1: 9a:83:75:b4:8c:3f:07:b2:4f:56:1d:64:95:30:f7:7a:b7:1a: 4f:f4:ea:1c:77:5b:f4:35:e9:d7:7a:77:f0:7a:76:27:9f:01: 7e:38:69:7c:c8:dc:be:ce:8c:86:07:87:d3:83:63:58:4c:2b: 91:35:f2:8c:24:8b:78:16:86:4b:60:bb:e0:2c:90:86:b4:0a: 75:c2:0a:99:9c:14:1c:d9:1d:c3:69:b7:3c:12:f2:52:52:c5: 1b:67:2f:c8:6e:ff:36:b6:0d:57:96:5a:87:4b:45:ad:8a:29: 64:71:37:b3:d2:c2:8f:ad:fa:62:16:cf:b9:05:97:10:a5:6a: 96:18:bb:37:c7:a8:04:22:fd:b0:b3:be:f8:53:4a:48:d5:d1: ae:7d:de:e4:fc:f1:2b:9c:fe:f3:d9:b1:46:72:b5:41:36:f9: d4:ca:30:e1:e5:74:6b:ad:07:34:01:b6:c1:ec:46:bc:a5:70: 79:22:dd:ae:3f:4b:46:a1:99:f9:90:ab:ab:1d:c1:6c:35:20: 7d:3a:82:8e -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEkTrBr26no4ffer6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxNmU0OGYtYTY0Yy00MjI3LWI5ODQtMzRiNzViNWY3 ZTk3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZjlhZWZiMDAtNTA4ZS00NWRmLWIzYTUtM2M3ZjBlMDk3NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aJenchjAW9twZZ/BLx3VKVtEmTdRVfcDmTn DRs9A7vB3KBFOJcDAmtcTraKPhnpH9SsDWBY5YO7jPMA2WZphsbZf7YzOUqxiJNp KxbDSSq8cuTVmP7GKcsd7wj46MbTs2zFni+fd5AdDRkFgn466q4tewkEAMSHaHSB p2n/psJAiUxgY7FYJBOC41WUxXXEsCrE0UTgog23mjP3SRRoTG3VInjATjdw5+Wf hPLadEW28APhgSIDtTnXE5S6RKB1BYWyFG+JWUGGw0Ek4BatqYdouFZMAWPEtfDb DYZeWYyxoGDA8fEtHx1hvi7sP+ZUYTa6uc3LA9JPzWt/+SpdwQIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFGeXvJqYQbVm7UaljgTGGm7x0oT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2 ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3NWI1ZjdlOTcvODg0Y2ZjMGQtYjAwOS0z MWJjLThjNjctNWQ3NzJiZGM3M2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxNmU0OGYtYTY0Yy00MjI3LWI5 ODQtMzRiNzViNWY3ZTk3LzE3MTZlNDhmLWE2NGMtNDIyNy1iOTg0LTM0Yjc1YjVm N2U5Ny5jcmwwHwYDVR0jBBgwFoAUPc928y0UTxGG8UgKLSVH0QYsiP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzE2ZTQ4Zi1hNjRjLTQyMjctYjk4NC0zNGI3 NWI1ZjdlOTcuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBF4NAAwQC izxIMBcEAgACMBEwDwMFBiYETsADBgQmBE7AIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZv6e0RmqChPWM vm+8VWsrtQ/kxx02HEDYSZDXNZdNTyWl9y68TpaRyazMZ+n4LpHY274RTOGag3W0 jD8Hsk9WHWSVMPd6txpP9Oocd1v0NenXenfwenYnnwF+OGl8yNy+zoyGB4fTg2NY TCuRNfKMJIt4FoZLYLvgLJCGtAp1wgqZnBQc2R3Dabc8EvJSUsUbZy/Ibv82tg1X llqHS0WtiilkcTez0sKPrfpiFs+5BZcQpWqWGLs3x6gEIv2ws774U0pI1dGufd7k /PErnP7z2bFGcrVBNvnUyjDh5XRrrQc0AbbB7Ea8pXB5It2uP0tGoZn5kKurHcFs NSB9OoKO -----END CERTIFICATE-----Generated at Mon Apr 7 03:38:45 2025 by rpki-client