$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa File: d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa (raw, json) Hash identifier: VCqIFqRxdGBWIdOE4eWCtfiMfLR4EqPAdNRgruLS3Ys= Subject key identifier: 8B:8F:AF:D1:7A:6A:62:89:B6:9D:7B:B8:1D:E7:10:F0:48:49:1F:4A Certificate issuer: /CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7 Certificate serial: 010D0C9F432858490459EF9494F5E7CBD9CF4DC0 Authority key identifier: 6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa Signing time: Thu 27 Feb 2025 02:18:16 +0000 ROA not before: Thu 27 Feb 2025 02:18:16 +0000 ROA not after: Wed 28 May 2025 01:18:16 +0000 asID: 14691 IP address blocks: 23.135.100.0/24 maxlen: 24 2620:d4:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:59:ef:94:94:f5:e7:cb:d9:cf:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7 Validity Not Before: Feb 27 02:18:16 2025 GMT Not After : May 28 01:18:16 2025 GMT Subject: CN=fa433b7f-f72d-42d2-9a38-f931e53388c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:3c:bb:a3:96:41:c0:94:6b:81:97:35:ef: 51:d1:5f:4c:95:1f:58:e9:d5:9a:87:d2:6d:48:10: 35:21:18:e9:bd:a9:b8:ff:18:e3:8c:d8:be:3a:85: 17:7d:3d:f0:10:8c:6b:ff:3c:ba:8d:b9:be:7a:88: d7:cf:f3:b9:2a:46:70:af:a7:d0:97:d2:3f:f0:bb: 29:01:19:ea:89:30:73:d2:5f:d0:42:1e:4f:fd:12: 79:22:4e:b6:81:4e:08:99:eb:ad:ae:6b:06:d2:4a: bc:01:9c:b6:52:51:ce:29:f2:21:e6:b5:b6:fe:fe: fa:3b:24:c8:75:c7:0e:73:53:64:1a:72:8f:ec:75: 7f:73:62:8c:e1:be:b5:85:32:83:26:7f:83:bb:b3: 44:c8:17:a5:da:b0:a1:b8:50:98:2e:f2:45:cc:08: 17:4f:9a:d5:84:63:98:b6:cd:0b:19:bd:d7:8e:56: 98:ec:63:a5:65:3c:e6:0a:ff:8f:09:b8:7e:c8:b6: a9:86:2f:d6:00:b4:e8:be:3c:e1:9c:68:d2:19:ad: 9c:e4:42:88:e3:4b:47:46:14:45:b6:df:3b:67:d7: 2f:77:2d:75:20:ac:cc:3c:a4:9f:25:4f:f3:9a:e7: 70:4d:64:12:b7:01:e4:18:58:5b:20:5c:01:39:b6: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8F:AF:D1:7A:6A:62:89:B6:9D:7B:B8:1D:E7:10:F0:48:49:1F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl X509v3 Authority Key Identifier: keyid:6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer sbgp-ipAddrBlock: critical IPv4: 23.135.100.0/24 IPv6: 2620:d4:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:56:f7:c7:3f:d0:55:87:51:ba:cb:4b:66:e6:1d:e9:77: 99:15:fe:a7:1b:2d:30:c6:49:cd:5d:5a:4c:e2:4c:0b:bf:55: 46:67:bb:67:5e:f7:76:9e:d8:1c:5a:51:1b:c3:af:84:63:2f: 14:48:14:0a:7d:52:93:8f:63:b5:59:c3:c1:42:79:65:d3:03: d5:67:38:6e:33:54:6a:34:87:1c:1d:f6:90:1a:be:6a:13:d0: bb:63:8e:ab:3c:41:c2:a9:98:bf:d5:09:89:9d:e3:f3:2c:8c: 30:fe:70:e7:ac:5d:a0:d1:bd:77:dc:1f:6d:02:25:f1:3c:e1: d9:07:ca:c8:73:3e:ae:5a:3b:7c:03:43:1f:5b:d9:48:d6:fb: 9d:d8:f6:72:f9:6c:92:f1:d6:81:86:6a:fa:ca:9c:41:9e:d5: 42:31:e5:a0:73:1a:2c:5d:b2:63:88:b9:ca:ae:c6:71:99:d2: 13:ce:48:0a:f7:7f:6a:36:07:39:88:6b:97:c5:c3:b2:ce:78: 41:44:f0:0c:e5:2f:1f:07:e5:58:36:fc:b4:2d:22:a3:df:e9: aa:49:62:b6:9f:36:ff:ce:f4:e3:74:79:92:fe:6d:e3:9e:31: 1a:a0:0d:11:d8:de:1f:92:07:dd:9e:27:24:7e:1f:1b:ef:4e: 14:82:cb:1b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkEWe+UlPXny9nPTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkxZjY3ZWItNGJmOS00NWJiLWE1OTEtNmIyMmFjZmQz MGM3MB4XDTI1MDIyNzAyMTgxNloXDTI1MDUyODAxMTgxNlowLzEtMCsGA1UEAxMk ZmE0MzNiN2YtZjcyZC00MmQyLTlhMzgtZjkzMWU1MzM4OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm688u6OWQcCUa4GXNe9R0V9MlR9Y6dWah9Jt SBA1IRjpvam4/xjjjNi+OoUXfT3wEIxr/zy6jbm+eojXz/O5KkZwr6fQl9I/8Lsp ARnqiTBz0l/QQh5P/RJ5Ik62gU4ImeutrmsG0kq8AZy2UlHOKfIh5rW2/v76OyTI dccOc1NkGnKP7HV/c2KM4b61hTKDJn+Du7NEyBel2rChuFCYLvJFzAgXT5rVhGOY ts0LGb3XjlaY7GOlZTzmCv+PCbh+yLaphi/WALTovjzhnGjSGa2c5EKI40tHRhRF tt87Z9cvdy11IKzMPKSfJU/zmudwTWQStwHkGFhbIFwBOba1TQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIuPr9F6amKJtp17uB3nEPBISR9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTFm NjdlYi00YmY5LTQ1YmItYTU5MS02YjIyYWNmZDMwYzcvZDJiMWEzYTAtM2Q3OC0z OTE2LWJiMjAtNTY1MWRjZWM3OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjkxZjY3ZWItNGJmOS00NWJiLWE1 OTEtNmIyMmFjZmQzMGM3L2I5MWY2N2ViLTRiZjktNDViYi1hNTkxLTZiMjJhY2Zk MzBjNy5jcmwwHwYDVR0jBBgwFoAUbHRYNrqh7dHKxIpJmCU7X5B1XYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTFmNjdlYi00YmY5LTQ1YmItYTU5MS02YjIy YWNmZDMwYzcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4dkMA8E AgACMAkDBwAmIADUIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZFhW98c/0FWHUbrLS2bmHel3mRX+pxst MMZJzV1aTOJMC79VRme7Z173dp7YHFpRG8OvhGMvFEgUCn1Sk49jtVnDwUJ5ZdMD 1Wc4bjNUajSHHB32kBq+ahPQu2OOqzxBwqmYv9UJiZ3j8yyMMP5w56xdoNG9d9wf bQIl8Tzh2QfKyHM+rlo7fANDH1vZSNb7ndj2cvlskvHWgYZq+sqcQZ7VQjHloHMa LF2yY4i5yq7GcZnSE85ICvd/ajYHOYhrl8XDss54QUTwDOUvHwflWDb8tC0io9/p qklitp82/87043R5kv5t454xGqANEdjeH5IH3Z4nJH4fG+9OFILLGw== -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:55 2025 by rpki-client