$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa File: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (raw, json) Hash identifier: q+WrY4vv2BgZmI9TjJGGtCUEw/tu3jsoPzwF7slGJJM= Subject key identifier: 92:4B:E6:08:AA:26:52:F2:C2:35:DA:96:53:C8:A3:98:7C:B8:5B:CD Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F432858492E13BE682A190CE1F4330000 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 400519 IP address blocks: 23.133.216.0/24 maxlen: 24 147.185.221.0/24 maxlen: 24 2602:fbaf::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:be:68:2a:19:0c:e1:f4:33:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=81127858-bd2d-436b-a993-7b3c3cfac6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:ba:9d:42:1b:ec:d7:e4:e2:d6:d9:62:ad: b7:ce:57:f6:d2:04:17:ac:9e:02:b3:b0:51:84:99: 5f:8d:8e:ee:6b:75:e4:81:27:e9:90:18:15:b0:a6: 0e:c2:58:5e:26:d3:8d:bc:78:e4:5c:f1:92:84:dc: e6:4a:b2:ee:dc:67:a1:b8:9d:3b:55:f2:1d:47:eb: 65:be:89:20:72:ff:1d:45:4c:e2:98:ac:21:fe:cc: 40:83:8a:4f:65:98:9f:a6:47:42:41:80:a5:fb:d4: 30:67:68:22:0a:8d:2e:e0:54:cb:97:42:c4:d1:31: 73:91:5b:18:5f:d0:dc:41:88:57:4b:66:e8:b7:01: a0:1d:0c:a6:74:1d:9a:c2:44:f8:ee:f8:9c:21:ad: 5b:a1:90:08:80:a9:60:54:7a:12:f3:7b:23:53:30: 06:1e:36:02:66:5c:3f:dc:aa:d4:73:21:42:c7:be: 3d:e2:a4:c7:d6:56:63:68:ad:71:8b:4f:a4:72:04: 1d:52:48:12:2d:07:d0:f6:ff:6c:e3:38:56:e4:f3: ca:c0:8a:73:74:af:3e:3c:c0:4b:10:6a:d9:a5:96: c3:27:4d:c3:f4:eb:c5:18:6c:e0:fa:bc:cb:97:30: c5:17:fe:c9:bc:97:10:76:88:44:94:2d:71:ad:d4: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:E6:08:AA:26:52:F2:C2:35:DA:96:53:C8:A3:98:7C:B8:5B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.216.0/24 147.185.221.0/24 IPv6: 2602:fbaf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ac:47:c1:20:7d:85:03:51:10:65:8c:8b:5b:21:42:9f:3d: d9:ab:d5:a2:ad:1f:ee:e7:b3:09:c4:01:b2:1e:af:96:2b:b8: 7d:dc:21:3e:21:6b:95:2c:38:37:b6:95:b1:b2:32:0e:75:3c: 72:20:78:7a:6b:f3:ca:72:ec:a0:46:d0:62:52:85:68:33:81: c9:e1:f5:86:62:17:73:5d:04:75:65:d1:d7:c7:c2:b5:5f:83: 32:27:bc:15:11:df:7e:d8:8b:88:bb:4b:9d:e1:01:fd:7f:43: 33:d2:00:0c:8e:7b:c9:9c:0b:aa:33:90:af:e7:56:67:8f:87: dd:ed:e0:0d:0a:08:49:63:41:ca:70:e4:7d:08:b3:eb:9d:04: ec:3f:24:70:a8:d9:e9:8b:ce:bd:cf:0c:aa:05:cf:38:a7:dc: 4b:c0:4a:0e:f6:21:80:73:b0:7b:04:2b:9c:45:15:53:1a:9b: 72:5a:fb:1e:99:03:dc:a4:8d:1f:7d:19:aa:eb:96:a2:7e:00: 4a:47:e5:99:f5:55:3a:09:e9:f1:3c:68:ef:b3:11:01:ac:c7: 1f:fd:d7:d7:33:73:7b:e3:34:59:f8:6e:66:b5:7e:15:62:0e: 71:97:17:db:bb:be:29:52:4e:ed:fa:43:7e:e7:ac:54:33:8b: 56:dd:74:3c -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkuE75oKhkM4fQzAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ODExMjc4NTgtYmQyZC00MzZiLWE5OTMtN2IzYzNjZmFjNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJK6nUIb7Nfk4tbZYq23zlf20gQXrJ4Cs7BR hJlfjY7ua3XkgSfpkBgVsKYOwlheJtONvHjkXPGShNzmSrLu3GehuJ07VfIdR+tl vokgcv8dRUzimKwh/sxAg4pPZZifpkdCQYCl+9QwZ2giCo0u4FTLl0LE0TFzkVsY X9DcQYhXS2botwGgHQymdB2awkT47vicIa1boZAIgKlgVHoS83sjUzAGHjYCZlw/ 3KrUcyFCx7494qTH1lZjaK1xi0+kcgQdUkgSLQfQ9v9s4zhW5PPKwIpzdK8+PMBL EGrZpZbDJ03D9OvFGGzg+rzLlzDFF/7JvJcQdohElC1xrdRvNQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJJL5giqJlLywjXallPIo5h8uFvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvZWJkMGU4NTYtZWM5My0z ZjFlLTkzMDktYzFmMDU0ZDlkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4XYAwQA k7ndMA4EAgACMAgDBgQmAvuvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVrEfBIH2FA1EQZYyLWyFCnz3Z q9WirR/u57MJxAGyHq+WK7h93CE+IWuVLDg3tpWxsjIOdTxyIHh6a/PKcuygRtBi UoVoM4HJ4fWGYhdzXQR1ZdHXx8K1X4MyJ7wVEd9+2IuIu0ud4QH9f0Mz0gAMjnvJ nAuqM5Cv51Znj4fd7eANCghJY0HKcOR9CLPrnQTsPyRwqNnpi869zwyqBc84p9xL wEoO9iGAc7B7BCucRRVTGptyWvsemQPcpI0ffRmq65aifgBKR+WZ9VU6CenxPGjv sxEBrMcf/dfXM3N74zRZ+G5mtX4VYg5xlxfbu74pUk7t+kN+56xUM4tW3XQ8 -----END CERTIFICATE-----Generated at Tue Apr 29 13:22:55 2025 by rpki-client