$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json) Hash identifier: 7P5LtKn5pXM8IjG8Kqy43nxA1SaUMFvKpCa1nw6gD7M= Subject key identifier: C4:01:C9:DB:1C:8C:DD:E5:24:E7:45:DE:AF:5C:A3:33:3A:25:C7:86 Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F43285849BF3F61E6815BE93C05842800 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 393524 IP address blocks: 23.134.16.0/24 maxlen: 24 23.134.17.0/24 maxlen: 24 23.135.18.0/24 maxlen: 24 104.192.96.0/22 maxlen: 22 104.245.136.0/22 maxlen: 22 2602:ff44::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:61:e6:81:5b:e9:3c:05:84:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2a6a0134-171f-459b-b43e-a8a4176b45ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:76:f7:86:4d:71:95:5d:83:1c:ac:c0:41: 73:f2:06:fe:4a:b8:62:98:2f:30:13:3d:8c:34:be: 5c:42:ae:36:08:2d:a1:23:a4:5e:68:9f:48:2b:a8: b8:56:6d:d7:cd:7b:63:81:4e:2d:c1:ad:6f:33:e6: e2:0a:70:77:bc:ae:21:87:e9:12:6d:20:61:57:74: 7f:ba:10:1f:29:89:5e:1f:aa:d8:f4:e8:6e:a9:88: ce:b4:67:12:e5:1b:45:a1:5d:05:61:40:30:29:9d: 41:21:d0:22:b5:ef:14:41:1c:26:52:50:08:bb:58: e2:15:33:95:7e:8d:06:3e:4c:ce:a4:62:00:52:1a: 93:f9:08:98:00:0b:b7:9c:fa:0c:21:96:8b:77:6e: 6e:4c:65:6c:bc:64:a5:49:c5:9c:70:d3:69:dc:a0: 6c:b0:4c:e9:c3:6c:5c:b3:b2:14:24:ab:59:09:87: 31:00:e1:2e:96:97:44:30:62:58:50:0c:d0:e9:c3: 76:91:e6:24:60:b8:99:6f:43:34:5b:b4:92:73:dc: a6:e5:3d:7e:31:51:27:6d:e8:95:84:3e:f1:50:8b: 74:f8:4f:c4:47:98:d0:0b:34:e9:27:5d:7f:64:fd: 1f:1b:27:4d:c1:17:b2:6d:59:b2:f7:b6:71:5e:91: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:01:C9:DB:1C:8C:DD:E5:24:E7:45:DE:AF:5C:A3:33:3A:25:C7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a1:c0:47:d4:0d:f7:e3:fb:ab:c0:2f:73:0f:bf:2f:3e:7d: ce:0a:0f:d9:d8:08:ca:3c:b5:56:92:e5:85:c5:8f:48:92:50: 81:4c:45:6f:e2:2c:2f:6d:53:bb:e7:5f:cf:3b:2e:cc:16:98: 08:c2:88:b2:ed:19:7b:15:1f:dd:d3:2e:fb:a4:6e:15:15:ca: 3c:64:42:7b:94:47:b2:3c:8c:f4:c4:64:cf:f0:6e:ef:43:a8: c0:7f:3a:2d:ee:22:04:46:db:1e:50:b6:a0:ff:c3:2d:08:f0: 8f:c0:84:9c:7b:0e:34:98:a7:f7:a0:ea:69:5b:ac:f5:13:f2: f3:ba:58:a0:31:0c:6b:ce:71:1a:1b:75:eb:01:d9:2e:aa:8d: 0e:06:8b:47:d4:b8:5a:2f:6c:a9:93:09:70:ce:29:e3:8d:ee: 4b:41:0b:73:4a:54:3a:91:94:4c:1e:b1:0b:d1:42:89:2f:2e: 51:ed:3b:8d:4a:d9:91:cb:15:75:ee:d4:77:15:16:35:cf:16: ac:85:a5:cd:83:d5:72:44:be:3a:3f:7a:b0:01:b3:34:9d:c7: ac:37:26:e5:b7:5c:4d:0f:4f:bb:70:22:ea:14:a2:8b:ad:a7: e4:d8:a9:23:26:58:6d:d5:e4:e5:b0:e4:3e:1d:b2:36:c3:e3: de:70:ad:2f -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEm/P2HmgVvpPAWEKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmE2YTAxMzQtMTcxZi00NTliLWI0M2UtYThhNDE3NmI0NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV1294ZNcZVdgxyswEFz8gb+SrhimC8wEz2M NL5cQq42CC2hI6ReaJ9IK6i4Vm3XzXtjgU4twa1vM+biCnB3vK4hh+kSbSBhV3R/ uhAfKYleH6rY9OhuqYjOtGcS5RtFoV0FYUAwKZ1BIdAite8UQRwmUlAIu1jiFTOV fo0GPkzOpGIAUhqT+QiYAAu3nPoMIZaLd25uTGVsvGSlScWccNNp3KBssEzpw2xc s7IUJKtZCYcxAOEulpdEMGJYUAzQ6cN2keYkYLiZb0M0W7SSc9ym5T1+MVEnbeiV hD7xUIt0+E/ER5jQCzTpJ11/ZP0fGydNwReybVmy97ZxXpGxLQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFMQBydscjN3lJOdF3q9cozM6JceGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMDdhZmRiNWItZjMzOS0z YTFmLTkwOGEtMmI1YzkyMDQ0ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQBF4YQAwQA F4cSAwQCaMBgAwQCaPWIMA4EAgACMAgDBgQmAv9EADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8ocBH1A33 4/urwC9zD78vPn3OCg/Z2AjKPLVWkuWFxY9IklCBTEVv4iwvbVO751/POy7MFpgI woiy7Rl7FR/d0y77pG4VFco8ZEJ7lEeyPIz0xGTP8G7vQ6jAfzot7iIERtseULag /8MtCPCPwIScew40mKf3oOppW6z1E/LzuligMQxrznEaG3XrAdkuqo0OBotH1Lha L2ypkwlwzinjje5LQQtzSlQ6kZRMHrEL0UKJLy5R7TuNStmRyxV17tR3FRY1zxas haXNg9VyRL46P3qwAbM0ncesNyblt1xND0+7cCLqFKKLrafk2KkjJlht1eTlsOQ+ HbI2w+PecK0v -----END CERTIFICATE-----Generated at Mon Jun 16 04:22:49 2025 by rpki-client