$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa File: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (raw, json) Hash identifier: IxNo2HBBN+4Zj8M6NuztBvtFdyd8G3jVR06Y6LUek7s= Subject key identifier: EB:43:8A:6A:8C:BE:B8:70:EB:B5:D0:3E:DB:58:28:5C:0E:19:C2:27 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F43285849244E80E4639CAFDCD822B020 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 398328 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:80:e4:63:9c:af:dc:d8:22:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=fe0d4a2f-40a7-416d-8a4b-e6a8a8ef53b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:ab:e5:19:60:61:f9:ef:ea:18:57:1c:8e: f8:5d:00:d3:42:21:74:77:b6:3a:29:bb:22:ab:c9: 2a:ad:34:25:d3:ce:4c:8d:c9:48:5b:5b:9e:b1:c7: 3f:8c:d8:aa:19:1a:17:23:52:35:be:44:15:ad:6f: 2f:43:1f:a2:7e:57:81:16:31:6a:1d:64:69:51:d2: f8:be:5a:e2:a1:c1:6a:0d:5f:80:eb:2a:09:e5:b0: 56:12:3d:7b:77:90:86:5b:05:c1:cb:ca:e5:f3:0a: 87:f9:8c:68:af:94:43:d7:4b:05:c4:60:d8:62:43: 83:e8:ab:83:ec:c1:9e:8a:e1:42:da:bf:97:1e:e4: c8:34:54:40:1a:d9:f6:b8:22:26:58:e8:d7:bf:c5: 81:86:cb:63:6e:e6:02:fa:b4:27:cc:3c:8a:3a:fe: 7b:f4:05:a7:17:00:4f:99:f1:ed:80:08:2f:90:0e: 5d:88:ee:93:ae:96:10:50:6f:d4:82:1f:95:46:e9: b9:69:5b:3b:91:1f:2e:75:da:59:1a:f3:e2:eb:e5: 0d:40:64:f0:d5:cc:29:70:e4:5d:a5:5f:06:8e:7a: 2d:18:26:d3:8b:be:0a:2d:48:ce:e6:ae:31:17:c4: 83:4a:65:e1:ed:04:db:d9:b2:6e:7d:fa:1c:55:eb: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:8A:6A:8C:BE:B8:70:EB:B5:D0:3E:DB:58:28:5C:0E:19:C2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:85:c7:d4:b6:37:af:12:72:28:21:1c:b8:c2:82:8d:f5:1c: ae:c8:92:4b:b5:2a:d5:a5:0f:1e:f1:95:cc:f8:cc:18:79:39: 29:a2:39:c3:99:35:dd:ee:24:45:ff:32:10:d7:e7:83:36:f3: 59:7b:b3:bc:71:ce:73:83:88:57:b7:77:85:db:dc:6e:18:ac: 82:9c:c5:34:a4:d5:f5:5c:05:a9:88:bb:a2:ac:a7:bd:99:f3: fb:d9:5c:dc:de:d7:f6:4d:9e:48:9e:0b:b3:f9:79:21:c7:94: f0:93:9d:d7:c7:6a:44:df:e1:ee:12:dd:82:66:9a:cf:02:94: 63:fe:42:dd:57:6b:70:eb:c8:91:7f:b8:7c:c1:9d:55:c6:b3: 63:aa:c1:d2:07:cb:4a:c0:9a:0e:0d:86:45:68:43:c1:a4:5d: 7d:97:0c:5b:9f:9b:ea:ee:5e:89:36:27:52:67:a4:2e:1e:fd: 66:89:c3:dc:ac:f3:d2:71:c7:4d:24:09:ce:6f:4e:4f:c6:8a: 38:89:9d:a1:47:a6:c8:0a:c9:07:18:66:6e:c1:99:62:80:c6: 19:99:23:ba:1e:c8:76:ed:17:42:8d:60:64:b4:7b:68:7c:f3: 26:a7:2d:90:23:45:16:45:1e:c1:57:24:3d:95:d9:dd:3a:45: a8:9e:46:28 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEkkToDkY5yv3NgisCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZmUwZDRhMmYtNDBhNy00MTZkLThhNGItZTZhOGE4ZWY1M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxCr5RlgYfnv6hhXHI74XQDTQiF0d7Y6Kbsi q8kqrTQl085MjclIW1uescc/jNiqGRoXI1I1vkQVrW8vQx+ifleBFjFqHWRpUdL4 vlriocFqDV+A6yoJ5bBWEj17d5CGWwXBy8rl8wqH+Yxor5RD10sFxGDYYkOD6KuD 7MGeiuFC2r+XHuTINFRAGtn2uCImWOjXv8WBhstjbuYC+rQnzDyKOv579AWnFwBP mfHtgAgvkA5diO6TrpYQUG/Ugh+VRum5aVs7kR8uddpZGvPi6+UNQGTw1cwpcORd pV8GjnotGCbTi74KLUjO5q4xF8SDSmXh7QTb2bJuffocVesnOwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFOtDimqMvrhw67XQPttYKFwOGcInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvM2JkZmViZDMtMTkxYy0z MGU5LWIyMGItNjdiNmYwMGMwMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBshcfUtjevEnIoIRy4woKN9Ryu yJJLtSrVpQ8e8ZXM+MwYeTkpojnDmTXd7iRF/zIQ1+eDNvNZe7O8cc5zg4hXt3eF 29xuGKyCnMU0pNX1XAWpiLuirKe9mfP72Vzc3tf2TZ5Inguz+Xkhx5Twk53Xx2pE 3+HuEt2CZprPApRj/kLdV2tw68iRf7h8wZ1VxrNjqsHSB8tKwJoODYZFaEPBpF19 lwxbn5vq7l6JNidSZ6QuHv1micPcrPPSccdNJAnOb05Pxoo4iZ2hR6bICskHGGZu wZligMYZmSO6Hsh27RdCjWBktHtofPMmpy2QI0UWRR7BVyQ9ldndOkWonkYo -----END CERTIFICATE-----Generated at Tue Apr 29 20:36:33 2025 by rpki-client