$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa File: 77ef46b3-b307-3643-91ed-99067bdd1762.roa (raw, json) Hash identifier: 6uty2aNptvKt14sRzZF36rYYnYxzDAbqw4AXYpqRzXg= Subject key identifier: 94:8A:6E:23:62:F0:45:56:E5:45:E5:9F:9C:41:12:C6:98:7D:1B:45 Certificate issuer: /CN=29dba61f-e904-40c2-8cfb-7736efc12d29 Certificate serial: 010D0C9F4328584A1465598ED2BC60CDF930A600 Authority key identifier: 64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 40278 IP address blocks: 23.184.128.0/24 maxlen: 24 2602:fed7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:59:8e:d2:bc:60:cd:f9:30:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29dba61f-e904-40c2-8cfb-7736efc12d29 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=f0394518-3d60-42c2-85a5-5fdb418c8045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:46:95:b2:a2:57:f2:19:cb:9a:74:b1:cb: 24:fc:64:51:87:a8:de:4b:36:11:cb:20:e6:a0:41: 7e:2c:0d:15:0e:89:88:d5:19:84:22:38:d2:76:da: b7:ae:f9:cf:ce:01:de:31:54:2b:3a:6f:15:b5:04: 89:0d:81:5f:2f:9a:75:94:9a:bc:d2:72:ca:3c:8e: c6:69:1d:6a:2f:2c:ca:9c:18:6c:8d:32:6d:85:35: 6d:39:70:a9:fc:a4:95:e2:3e:50:02:26:e0:80:40: af:fe:c3:57:70:39:f2:2a:59:2d:f1:e2:59:7b:52: 1a:fa:42:f8:33:34:71:6b:9c:ff:5b:24:85:ca:3a: 79:dc:2e:d5:51:7e:92:7b:2b:00:35:ef:c8:cf:92: 3c:c4:b6:d9:2e:46:c5:63:d1:30:4e:83:f9:a8:a9: 66:22:48:15:26:4c:43:84:7b:3c:4b:79:b7:c7:34: 35:6d:7f:7c:1e:f9:55:a2:aa:55:45:3b:3a:41:90: b6:d0:cc:fb:9e:31:01:17:ab:14:72:86:ac:c6:ef: 51:e2:46:91:62:f3:07:a9:9f:9e:ec:92:15:67:f3: 6e:e4:a4:79:c9:df:e9:07:54:80:96:66:1d:36:38: 3e:d8:97:cf:e0:c7:fb:dd:23:82:c4:78:9f:22:71: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8A:6E:23:62:F0:45:56:E5:45:E5:9F:9C:41:12:C6:98:7D:1B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl X509v3 Authority Key Identifier: keyid:64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer sbgp-ipAddrBlock: critical IPv4: 23.184.128.0/24 IPv6: 2602:fed7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:21:15:3c:9f:32:f6:40:90:1d:d7:7f:8b:aa:91:9e:11: 89:3b:bc:d0:be:ba:63:12:b6:dc:2b:31:bb:ef:c9:90:84:2a: 40:7a:b6:67:c3:b9:ab:1d:39:31:93:36:85:39:a3:a9:9b:e8: 7e:9f:97:5d:b8:60:92:2e:f9:5e:97:76:ce:e5:e8:78:7a:54: b8:23:85:8c:c8:c7:f7:31:b6:11:9e:6c:67:95:b0:ed:d4:0d: d3:d1:e0:1d:a2:a9:c9:d9:b3:8b:7e:f8:1f:96:62:48:ea:31: 2e:c8:8e:a3:7d:4d:72:a9:5e:3f:ea:13:69:87:39:a1:70:a3: a0:f2:41:fa:78:e6:55:eb:30:32:f9:fb:25:3b:0c:14:f1:61: 27:fa:87:1c:4d:a2:f1:4b:1c:dc:9e:13:25:9a:bb:23:22:5d: be:49:82:09:44:95:15:46:af:81:c0:2c:f4:65:0b:8a:b4:05: 4a:69:94:4d:55:45:96:bf:4f:fc:41:e4:d5:10:0f:e1:e4:14: 4a:ab:35:f7:ea:5e:3c:d7:02:42:99:81:81:93:c5:ac:74:53: 06:d0:4a:1c:01:1d:39:23:11:28:b1:a6:d7:2d:25:6d:48:cb: a7:37:58:d8:a5:93:be:9e:6d:d7:ff:a3:c9:9f:c2:49:92:dd: 10:b9:24:65 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoUZVmO0rxgzfkwpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkYmE2MWYtZTkwNC00MGMyLThjZmItNzczNmVmYzEy ZDI5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjAzOTQ1MTgtM2Q2MC00MmMyLTg1YTUtNWZkYjQxOGM4MDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvdGlbKiV/IZy5p0scsk/GRRh6jeSzYRyyDm oEF+LA0VDomI1RmEIjjSdtq3rvnPzgHeMVQrOm8VtQSJDYFfL5p1lJq80nLKPI7G aR1qLyzKnBhsjTJthTVtOXCp/KSV4j5QAibggECv/sNXcDnyKlkt8eJZe1Ia+kL4 MzRxa5z/WySFyjp53C7VUX6SeysANe/Iz5I8xLbZLkbFY9EwToP5qKlmIkgVJkxD hHs8S3m3xzQ1bX98HvlVoqpVRTs6QZC20Mz7njEBF6sUcoasxu9R4kaRYvMHqZ+e 7JIVZ/Nu5KR5yd/pB1SAlmYdNjg+2JfP4Mf73SOCxHifInFpDwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJSKbiNi8EVW5UXln5xBEsaYfRtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRi YTYxZi1lOTA0LTQwYzItOGNmYi03NzM2ZWZjMTJkMjkvNzdlZjQ2YjMtYjMwNy0z NjQzLTkxZWQtOTkwNjdiZGQxNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjlkYmE2MWYtZTkwNC00MGMyLThj ZmItNzczNmVmYzEyZDI5LzI5ZGJhNjFmLWU5MDQtNDBjMi04Y2ZiLTc3MzZlZmMx MmQyOS5jcmwwHwYDVR0jBBgwFoAUZFPyHToUkXYVX6d5RD3wb7p+YxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRiYTYxZi1lOTA0LTQwYzItOGNmYi03NzM2 ZWZjMTJkMjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7iAMA4E AgACMAgDBgQmAv7XADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6jiEVPJ8y9kCQHdd/i6qRnhGJO7zQvrpj ErbcKzG778mQhCpAerZnw7mrHTkxkzaFOaOpm+h+n5dduGCSLvlel3bO5eh4elS4 I4WMyMf3MbYRnmxnlbDt1A3T0eAdoqnJ2bOLfvgflmJI6jEuyI6jfU1yqV4/6hNp hzmhcKOg8kH6eOZV6zAy+fslOwwU8WEn+occTaLxSxzcnhMlmrsjIl2+SYIJRJUV Rq+BwCz0ZQuKtAVKaZRNVUWWv0/8QeTVEA/h5BRKqzX36l481wJCmYGBk8WsdFMG 0EocAR05IxEosabXLSVtSMunN1jYpZO+nm3X/6PJn8JJkt0QuSRl -----END CERTIFICATE-----Generated at Tue Jun 17 21:51:37 2025 by rpki-client