$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: 8mI1mAFvRjR7sgTriloSwnt7WlUx2giXk2PQpU+WO7E= Subject key identifier: 24:3B:5E:E3:A7:4D:99:1C:81:C4:DF:60:8A:70:C4:B9:4B:3B:35:D4 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F432858492E13BF7DB7EE29522DC24170 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bf:7d:b7:ee:29:52:2d:c2:41:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=0a756c83-e316-457c-9fb3-a3d3e9f21a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:d9:8b:e6:ba:0c:8e:50:fe:9d:d8:ab:7a: b6:03:3f:ee:04:f8:21:8f:bf:7d:41:0c:53:57:75: 8c:0d:8a:df:2a:bd:8b:e9:22:38:60:17:75:10:20: a6:96:02:4b:30:ce:25:ca:ff:aa:97:36:99:b8:6b: c5:c0:c6:58:5f:ed:55:6a:5a:d4:8c:2a:81:a3:09: cc:54:d4:50:14:27:4c:9e:61:f3:7a:36:44:c6:02: f5:55:72:90:55:31:d4:65:ac:ce:a6:a8:45:36:97: e5:f1:48:28:f9:26:15:9e:7c:f7:ae:64:51:46:32: 33:90:2f:4c:ca:0c:ff:54:09:ec:e9:77:c0:a4:b2: 67:83:ff:36:16:97:4c:1c:81:ce:4b:10:bc:2c:14: aa:f6:09:13:3d:a4:25:7e:ca:ec:59:0d:b3:fd:b5: 1f:d4:c8:f3:7a:b7:8b:95:01:45:d0:4d:69:3c:39: f3:cd:41:a6:c1:98:60:c3:5a:f8:0c:34:47:0a:8a: 34:50:35:d8:52:9f:95:b2:1c:7c:fe:a6:32:02:e8: 7e:10:b0:c7:6c:a4:0e:c9:94:57:7b:8f:44:b5:3c: a8:27:48:5e:07:35:3c:14:9a:93:b7:cb:a2:6f:d2: 54:df:50:42:00:d6:05:34:8c:30:9d:8a:9f:24:2b: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:5E:E3:A7:4D:99:1C:81:C4:DF:60:8A:70:C4:B9:4B:3B:35:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3a:0d:4a:0b:8a:d4:75:c8:c5:45:95:6e:02:6c:b0:2e:fd: ff:2e:3d:64:27:a4:a3:2e:8d:07:bd:d1:30:6c:f3:c1:07:b0: 1d:36:13:9b:85:26:f7:35:29:c6:0b:ee:f1:76:78:43:3d:7b: fa:44:97:44:3d:e8:d2:9a:6a:9d:33:ca:29:34:a0:74:4b:1e: 23:6c:39:b6:df:36:48:8d:d6:45:32:5a:78:c5:83:d0:e6:e0: 5b:b6:6e:f1:9b:e7:d9:73:14:e0:d2:d5:b5:70:7c:9a:dd:fe: d7:3c:d8:10:60:58:3a:0b:d2:7a:f6:e4:4c:53:01:ff:a0:84: d2:ae:06:a4:e7:05:c7:c0:01:02:6f:3d:45:0f:e3:d7:5f:1a: df:78:77:6c:56:2f:44:f2:21:d0:38:2f:29:be:5a:2d:b3:d7: 27:80:70:0c:c0:2a:37:90:98:81:fa:0a:9a:ed:c2:b4:9b:3c: ca:87:77:04:88:01:dc:bd:3c:9c:40:23:a3:16:7e:ad:68:91: 37:2c:5b:15:a7:ce:c7:c6:fb:34:76:08:5e:a2:f2:d2:46:43: 76:9c:fa:63:56:22:84:b8:5c:d6:5e:ec:19:1f:16:cd:e0:7f: 77:9f:c4:00:23:47:d9:45:22:36:e5:72:86:f4:7d:10:c8:53: 84:c3:bc:43 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkuE799t+4pUi3CQXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk MGE3NTZjODMtZTMxNi00NTdjLTlmYjMtYTNkM2U5ZjIxYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc3Zi+a6DI5Q/p3Yq3q2Az/uBPghj799QQxT V3WMDYrfKr2L6SI4YBd1ECCmlgJLMM4lyv+qlzaZuGvFwMZYX+1ValrUjCqBownM VNRQFCdMnmHzejZExgL1VXKQVTHUZazOpqhFNpfl8Ugo+SYVnnz3rmRRRjIzkC9M ygz/VAns6XfApLJng/82FpdMHIHOSxC8LBSq9gkTPaQlfsrsWQ2z/bUf1MjzereL lQFF0E1pPDnzzUGmwZhgw1r4DDRHCoo0UDXYUp+Vshx8/qYyAuh+ELDHbKQOyZRX e49EtTyoJ0heBzU8FJqTt8uib9JU31BCANYFNIwwnYqfJCtumwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCQ7XuOnTZkcgcTfYIpwxLlLOzXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUOg1KC4rUdcjFRZVuAmywLv3/Lj1kJ6Sj Lo0HvdEwbPPBB7AdNhObhSb3NSnGC+7xdnhDPXv6RJdEPejSmmqdM8opNKB0Sx4j bDm23zZIjdZFMlp4xYPQ5uBbtm7xm+fZcxTg0tW1cHya3f7XPNgQYFg6C9J69uRM UwH/oITSrgak5wXHwAECbz1FD+PXXxrfeHdsVi9E8iHQOC8pvlots9cngHAMwCo3 kJiB+gqa7cK0mzzKh3cEiAHcvTycQCOjFn6taJE3LFsVp87Hxvs0dgheovLSRkN2 nPpjViKEuFzWXuwZHxbN4H93n8QAI0fZRSI25XKG9H0QyFOEw7xD -----END CERTIFICATE-----Generated at Tue Apr 29 07:53:11 2025 by rpki-client