$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa File: dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa (raw, json) Hash identifier: zUpdJZrDyzpdep9BECGvHQTdXGJJhVoD8GS9Tmbjic8= Subject key identifier: F6:6D:D9:3F:4D:27:65:C9:2E:11:AA:B6:FE:C8:7A:A4:06:0F:1E:3F Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584940397DC98B8B1F2EA57BBD80 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 60024 IP address blocks: 23.247.132.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7d:c9:8b:8b:1f:2e:a5:7b:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=ea6f97f5-f661-4e6d-8b16-7cfa9497361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:39:85:59:36:7d:69:66:ff:35:80:cd:51: f6:ba:5a:64:79:5e:f2:bf:98:60:90:b1:8c:a8:94: 26:71:09:fe:b0:f8:fc:76:8c:39:36:1d:e6:f3:77: 50:fe:e9:79:d4:23:42:e5:8d:7f:42:a0:13:42:50: f5:de:e8:79:96:91:84:3f:d0:6f:86:95:d9:d1:56: ef:9d:4f:1c:11:93:ea:b9:66:8c:54:93:22:f3:e5: b4:c0:70:d1:eb:14:80:4a:2b:fd:10:53:94:6d:8d: 8b:57:54:f8:31:ad:f8:e1:12:54:e3:26:4f:07:8e: aa:86:c6:3e:d0:a5:e0:a4:e5:25:4d:31:78:e9:15: c5:40:98:76:35:d8:42:e4:2f:38:18:83:83:f0:0f: 8c:48:0f:49:1a:7a:2c:02:1e:46:e5:14:54:47:ea: 93:94:f7:01:81:ec:8d:ab:dd:eb:dd:f5:c5:53:5f: d5:22:6d:e0:ca:bc:82:6a:d1:96:ef:1e:ca:f6:71: 98:c3:d7:3f:52:a7:66:2f:af:8f:54:6e:b1:e5:a1: e1:d0:96:f6:bf:e6:46:e6:47:6c:19:0f:fb:90:2e: f7:81:65:26:c2:92:df:88:48:c7:3a:2c:89:a3:65: 95:06:57:81:e7:27:24:48:2e:24:61:e1:29:3a:3a: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:D9:3F:4D:27:65:C9:2E:11:AA:B6:FE:C8:7A:A4:06:0F:1E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dc5d5998-8979-3597-9dd9-7dae8990f0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 23.247.132.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:16:38:cd:b5:1a:17:ba:43:24:5c:f1:33:40:38:c7:70:4a: af:e5:e0:59:2d:58:c3:58:a0:43:1c:27:99:5b:77:1b:56:ce: 2e:d0:e7:bf:6b:46:e5:02:d4:04:25:e9:b7:88:74:f4:bd:c9: 37:33:92:68:d8:52:a6:2e:a1:4b:8f:db:f2:f8:ea:b0:47:fe: b7:33:52:42:01:9d:66:e7:09:21:e1:2a:41:3c:5a:0c:03:28: 25:33:25:0a:b7:78:0f:2a:54:dd:71:fd:0b:5f:c5:9f:7d:38: 0f:55:d8:bd:c6:3d:78:b1:0b:24:6f:18:8c:fc:70:14:e3:76: 10:5d:c5:77:84:99:2f:d8:91:63:01:4f:7a:21:59:6e:c1:54: 88:c2:f0:6c:be:85:a5:4f:75:6e:00:9d:f0:28:1c:97:92:93: 41:4b:9c:08:a0:55:38:be:78:ac:50:48:da:31:08:5c:6d:3c: 2f:01:ec:ba:25:69:e4:11:99:f9:72:72:23:d8:43:60:a0:3c: d3:40:91:4d:b3:5f:2d:88:b9:dc:cc:31:52:46:10:31:3e:2b: 6a:ed:1d:36:ba:42:48:d2:74:b6:9f:b9:69:af:e4:c6:4d:b7: e2:93:80:a5:ec:bf:fe:ce:ae:31:5d:97:4a:d9:df:c7:83:46: be:39:94:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElAOX3Ji4sfLqV7vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZWE2Zjk3ZjUtZjY2MS00ZTZkLThiMTYtN2NmYTk0OTczNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qc5hVk2fWlm/zWAzVH2ulpkeV7yv5hgkLGM qJQmcQn+sPj8dow5Nh3m83dQ/ul51CNC5Y1/QqATQlD13uh5lpGEP9BvhpXZ0Vbv nU8cEZPquWaMVJMi8+W0wHDR6xSASiv9EFOUbY2LV1T4Ma344RJU4yZPB46qhsY+ 0KXgpOUlTTF46RXFQJh2NdhC5C84GIOD8A+MSA9JGnosAh5G5RRUR+qTlPcBgeyN q93r3fXFU1/VIm3gyryCatGW7x7K9nGYw9c/UqdmL6+PVG6x5aHh0Jb2v+ZG5kds GQ/7kC73gWUmwpLfiEjHOiyJo2WVBleB5yckSC4kYeEpOjqwuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPZt2T9NJ2XJLhGqtv7IeqQGDx4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZGM1ZDU5OTgtODk3OS0z NTk3LTlkZDktN2RhZTg5OTBmMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABEWOM21Ghe6QyRc8TNAOMdwSq/l4FktWMNYoEMcJ5lbdxtW zi7Q579rRuUC1AQl6beIdPS9yTczkmjYUqYuoUuP2/L46rBH/rczUkIBnWbnCSHh KkE8WgwDKCUzJQq3eA8qVN1x/QtfxZ99OA9V2L3GPXixCyRvGIz8cBTjdhBdxXeE mS/YkWMBT3ohWW7BVIjC8Gy+haVPdW4AnfAoHJeSk0FLnAigVTi+eKxQSNoxCFxt PC8B7LolaeQRmflyciPYQ2CgPNNAkU2zXy2IudzMMVJGEDE+K2rtHTa6QkjSdLaf uWmv5MZNt+KTgKXsv/7OrjFdl0rZ38eDRr45lIY= -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:43 2025 by rpki-client