$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa File: a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa (raw, json) Hash identifier: 4KL+2utSOfR/ijivzaJfsqKdZ+dt1A9IKCAhPYuEAcA= Subject key identifier: 11:5E:E2:FF:84:4B:85:03:88:7F:1C:80:A1:43:FF:97:14:B8:A1:26 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F432858497279AD3EE803AD5C8DAE4C80 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 22659 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ad:3e:e8:03:ad:5c:8d:ae:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=4ce2ec86-bf74-414d-953a-fcc7a2ec7812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:a9:f6:24:dd:30:05:9f:38:75:22:09:2b: 6b:8a:d4:c3:6d:8d:e5:b6:ed:3f:26:d3:d1:b2:f7: 3e:36:7c:c0:bc:fa:a2:aa:e6:ce:9a:08:d1:a3:4e: 15:03:71:42:b7:3e:7e:ed:fd:bd:6d:d9:0b:85:c3: e6:26:c6:24:38:7a:fc:a1:6a:af:8c:5c:a0:b1:c5: 3a:11:51:8c:2e:38:5f:55:54:b0:32:23:e6:b5:df: 00:0b:e1:c0:70:d1:7c:39:da:a6:59:5a:1f:dd:04: 46:a9:a5:98:df:ff:d5:cc:de:af:45:0e:94:e7:46: e7:fa:df:5c:5a:4d:22:ba:ce:6e:8d:ea:37:a4:a3: 6a:65:0c:5a:dc:eb:a9:33:60:1d:42:f6:b7:a1:27: ac:aa:45:0f:7d:90:76:d7:36:f6:23:4e:2f:cc:f4: d3:21:92:e5:8a:50:36:2d:bf:06:f4:08:54:a5:d6: 8d:58:05:c9:7c:24:74:e8:90:1f:b7:9e:f9:84:25: d3:b5:aa:b1:b9:3c:66:8d:b3:1c:a0:91:e0:13:bc: ba:bb:38:f1:03:45:30:47:c9:59:5f:4f:fb:ee:c4: 45:e1:e0:e7:3f:ea:e9:9e:4c:46:07:e4:67:8e:33: 25:18:55:68:b3:a3:1e:18:af:36:51:8c:b8:72:03: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:E2:FF:84:4B:85:03:88:7F:1C:80:A1:43:FF:97:14:B8:A1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e4:f9:4f:46:a1:f4:a8:f9:0a:22:ce:a8:1e:1b:ca:33:65: 4e:fc:46:1e:19:5c:d7:70:0b:a6:0f:c6:1b:d9:41:c5:a2:7a: b1:da:1e:46:20:34:4a:75:c4:6e:f3:34:a3:bb:bf:45:61:1a: c4:f1:ce:92:88:9d:d9:21:c7:2a:c1:64:bd:2e:66:4a:b8:4a: a8:38:88:89:3b:30:7f:b7:c0:4a:9a:05:a1:cd:57:1c:1b:27: 4f:05:3f:dc:d4:bb:28:4c:67:76:bb:20:66:46:23:b5:ac:28: b4:be:6c:ed:98:4e:6c:ff:aa:93:d3:75:89:3c:2d:13:63:83: f4:e3:f2:e0:96:9e:cb:0c:dd:da:91:e2:82:5f:6e:1e:b1:90: 74:57:4b:7a:26:6a:44:c9:22:a6:b4:c6:1a:98:66:67:ab:3e: 5c:96:fc:6f:32:66:a7:0a:4b:f9:56:ae:36:e1:e6:9b:2f:44: 22:97:d2:6a:bd:92:d7:70:52:f6:40:d5:34:63:34:18:52:3e: 04:b3:2a:43:35:7b:04:c0:1a:64:e1:bc:ae:fd:1b:c2:ad:08: 1f:1c:54:8a:1a:86:ed:5c:27:2b:e4:36:5c:e9:05:26:4f:e5: ec:b1:48:24:da:8f:31:54:f7:6c:9b:cc:1b:58:92:01:45:9a: 01:f6:e6:6c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElyea0+6AOtXI2uTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NGNlMmVjODYtYmY3NC00MTRkLTk1M2EtZmNjN2EyZWM3ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqGp9iTdMAWfOHUiCStritTDbY3ltu0/JtPR svc+NnzAvPqiqubOmgjRo04VA3FCtz5+7f29bdkLhcPmJsYkOHr8oWqvjFygscU6 EVGMLjhfVVSwMiPmtd8AC+HAcNF8OdqmWVof3QRGqaWY3//VzN6vRQ6U50bn+t9c Wk0ius5ujeo3pKNqZQxa3OupM2AdQva3oSesqkUPfZB21zb2I04vzPTTIZLlilA2 Lb8G9AhUpdaNWAXJfCR06JAft575hCXTtaqxuTxmjbMcoJHgE7y6uzjxA0UwR8lZ X0/77sRF4eDnP+rpnkxGB+RnjjMlGFVos6MeGK82UYy4cgNclwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBFe4v+ES4UDiH8cgKFD/5cUuKEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvYTEyNzZhOWMtMmQxYi0z ZTFhLWI4YTItZTA5MjQ5NzA5NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe5PlPRqH0qPkKIs6oHhvKM2VO/EYeGVzX cAumD8Yb2UHFonqx2h5GIDRKdcRu8zSju79FYRrE8c6SiJ3ZIccqwWS9LmZKuEqo OIiJOzB/t8BKmgWhzVccGydPBT/c1LsoTGd2uyBmRiO1rCi0vmztmE5s/6qT03WJ PC0TY4P04/Lglp7LDN3akeKCX24esZB0V0t6JmpEySKmtMYamGZnqz5clvxvMman Ckv5Vq424eabL0Qil9JqvZLXcFL2QNU0YzQYUj4EsypDNXsEwBpk4byu/RvCrQgf HFSKGobtXCcr5DZc6QUmT+XssUgk2o8xVPdsm8wbWJIBRZoB9uZs -----END CERTIFICATE-----Generated at Sun Apr 27 23:53:59 2025 by rpki-client