$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa File: 6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa (raw, json) Hash identifier: O0Na98QsQDXxz8ZSH+jrhgLFnBmK2505wNJr44op8DQ= Subject key identifier: 66:96:D8:78:FE:E7:06:8E:22:CB:76:23:E0:96:34:E7:0A:90:32:D7 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F43285849A35481EB2FD6A9E2B6F5A580 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 62553 IP address blocks: 23.129.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:81:eb:2f:d6:a9:e2:b6:f5:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=9c3c78eb-d907-47fb-967c-ee61b79ea067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:4b:a8:d8:3d:6d:99:e2:68:7a:f8:52:b4: fd:ca:66:f6:01:e7:5b:5a:00:df:32:ad:db:fc:38: 23:80:46:b1:e2:76:4b:cb:99:16:02:be:9b:09:5e: e7:8b:8f:20:83:b4:51:3a:04:4b:bf:d9:0b:a9:25: af:96:39:70:fd:30:de:d8:3a:c0:85:d1:d4:1e:dd: 8e:7d:7c:ea:93:26:e0:9a:e7:2f:aa:d7:d4:c9:4e: 15:8b:bf:16:d1:a6:e0:95:90:3a:fc:9d:df:e6:20: 23:6f:31:76:4e:c6:13:30:97:c6:3c:7b:b0:b8:f8: 0e:c7:bf:c7:82:ca:ea:ef:1f:7c:c3:6d:91:84:b3: 32:6c:e8:86:da:02:e9:1d:28:09:f0:02:69:85:7b: b4:4f:58:58:82:a3:c3:8e:13:09:ff:5b:b6:1d:3e: 80:c7:41:b2:5e:1b:17:99:13:1e:90:21:e1:81:85: 60:33:ce:48:10:c4:ba:80:08:b0:0a:ef:00:98:64: 61:1c:b8:c5:e6:4a:89:34:c1:e5:a8:cd:c1:da:60: 0d:d2:5c:af:d4:c4:89:ff:d0:63:63:3f:76:53:1b: 35:07:21:5f:e6:d0:3a:b3:4a:20:3a:53:54:a7:40: cd:bc:3d:66:d7:ee:8d:74:3d:8c:16:2b:66:7c:d1: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:D8:78:FE:E7:06:8E:22:CB:76:23:E0:96:34:E7:0A:90:32:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv4: 23.129.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:57:b4:28:4a:e6:a0:35:7a:8f:e5:0f:e6:93:2e:8b:ad:21: d3:73:fe:8b:c6:d0:88:85:58:a2:d3:ba:08:fe:87:c4:d9:70: a1:cd:70:63:f7:92:74:1d:88:b9:bf:a6:e0:3f:ea:7d:9a:e0: d2:80:27:e8:ba:89:3b:e3:de:27:81:20:9f:97:2c:de:91:93: 33:7c:3b:9c:87:ad:5f:bb:83:9c:2e:8a:64:10:58:23:40:20: dc:dd:44:79:78:84:8d:60:3b:68:55:d8:db:b1:5a:c7:73:2c: 51:b7:90:1c:ff:80:eb:a0:01:9d:3e:0f:7d:c0:f4:fb:5a:ae: 40:c3:ce:61:cf:ce:10:20:e5:c7:a2:55:d9:4b:f9:ce:1d:fe: f2:f0:e9:90:f7:e2:f9:91:9c:df:c7:a3:4f:e6:e1:21:a2:0c: dc:33:92:50:a5:57:89:4f:e4:91:7d:b2:cd:1e:cb:58:d7:2e: c6:b7:1c:12:dc:06:75:91:43:70:4d:20:98:27:16:0d:13:60: d0:31:83:7c:3b:ae:3b:88:81:9d:d1:12:be:96:fa:9a:ad:de: 3a:3e:d6:3f:e8:b1:3e:74:91:59:a1:ec:5d:aa:d9:3a:20:aa: 03:a2:df:09:bc:f1:5b:4e:fe:5f:89:2a:af:56:00:73:f6:04: c5:b5:81:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIHrL9ap4rb1pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk OWMzYzc4ZWItZDkwNy00N2ZiLTk2N2MtZWU2MWI3OWVhMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFLqNg9bZniaHr4UrT9ymb2AedbWgDfMq3b /DgjgEax4nZLy5kWAr6bCV7ni48gg7RROgRLv9kLqSWvljlw/TDe2DrAhdHUHt2O fXzqkybgmucvqtfUyU4Vi78W0abglZA6/J3f5iAjbzF2TsYTMJfGPHuwuPgOx7/H gsrq7x98w22RhLMybOiG2gLpHSgJ8AJphXu0T1hYgqPDjhMJ/1u2HT6Ax0GyXhsX mRMekCHhgYVgM85IEMS6gAiwCu8AmGRhHLjF5kqJNMHlqM3B2mAN0lyv1MSJ/9Bj Yz92Uxs1ByFf5tA6s0ogOlNUp0DNvD1m1+6NdD2MFitmfNEJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaW2Hj+5waOIst2I+CWNOcKkDLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvNmEzYjZlNTMtZWUzOS0z ZmU4LTgyMjUtZDBkMWU2MTA2N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVXtChK5qA1eo/lD+aTLoutIdNz/ovG0IiFWKLTugj+h8TZcKHNcGP3 knQdiLm/puA/6n2a4NKAJ+i6iTvj3ieBIJ+XLN6RkzN8O5yHrV+7g5wuimQQWCNA INzdRHl4hI1gO2hV2NuxWsdzLFG3kBz/gOugAZ0+D33A9PtarkDDzmHPzhAg5cei VdlL+c4d/vLw6ZD34vmRnN/Ho0/m4SGiDNwzklClV4lP5JF9ss0ey1jXLsa3HBLc BnWRQ3BNIJgnFg0TYNAxg3w7rjuIgZ3REr6W+pqt3jo+1j/osT50kVmh7F2q2Tog qgOi3wm88VtO/l+JKq9WAHP2BMW1gXY= -----END CERTIFICATE-----Generated at Mon Apr 28 09:47:21 2025 by rpki-client