$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa File: 3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa (raw, json) Hash identifier: DjvsERxl6R0azohUdA9N4hrbNfVX5yhAzTzn5RFdlHM= Subject key identifier: 55:62:69:AF:5B:A3:0C:D7:64:77:04:AF:2D:EE:71:FB:D3:D7:F1:46 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584913AC20822672682358247180 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 6977 IP address blocks: 23.188.16.0/24 maxlen: 24 2602:fc4b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:20:82:26:72:68:23:58:24:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=8a1a39c2-899a-45fd-9736-93d1e149fe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:7a:88:73:e4:f8:fc:ed:ab:97:a5:b1:42: a5:2b:87:e3:93:ac:2a:da:36:88:0b:f0:06:68:84: 26:ea:43:59:d5:59:60:48:77:3d:12:ff:cd:38:4b: fc:95:99:58:67:43:55:26:f0:f0:aa:a2:a1:e4:88: 70:ca:f1:c3:3e:7b:da:a2:dd:d2:ef:4c:02:5c:82: 5c:c2:47:72:b6:41:bf:82:4a:71:7a:0f:da:81:e1: 69:46:ea:72:1d:0e:19:03:aa:35:ec:96:eb:ca:d4: 4c:e6:4f:3e:03:0b:90:f5:cd:b1:0e:56:77:43:be: 57:e5:2e:eb:3b:57:2e:84:f2:98:ad:a8:a1:7d:a6: d6:bb:95:49:0c:26:69:31:89:3e:69:34:3e:05:cd: 70:a2:a9:8a:a9:7d:66:87:44:f0:1f:3e:3b:a7:40: 0f:03:ca:e0:07:06:dd:34:02:de:5c:34:6b:d2:6e: e0:95:36:98:f1:f7:85:11:09:59:44:6d:f3:42:54: 80:ff:61:d2:ab:20:1d:23:aa:55:32:ff:07:95:61: d7:72:b5:5a:7e:c9:cb:71:23:fb:1c:9c:f4:2f:e3: 93:a6:24:d2:81:46:31:9d:1d:32:03:54:55:1b:69: 68:b7:73:d6:b1:25:07:34:df:23:6c:b8:ae:38:df: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:62:69:AF:5B:A3:0C:D7:64:77:04:AF:2D:EE:71:FB:D3:D7:F1:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/24 IPv6: 2602:fc4b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a1:cf:66:a2:f6:c9:28:fa:e7:27:a7:29:63:80:13:ae:7c: 58:10:49:ce:03:8d:e1:f7:40:82:ac:b4:62:95:2e:ab:1b:ff: ac:f1:02:fd:be:c6:89:e2:77:25:2a:7d:0d:3e:d2:c1:e3:04: a8:15:c3:3a:a8:6a:7e:ba:b2:ea:2c:72:ad:42:d2:4c:26:9a: 45:fa:e1:c2:9a:3f:29:d2:df:50:60:14:4a:79:71:2e:18:cc: c0:0d:4d:ef:11:4d:2e:4e:a5:11:d9:cf:98:c0:30:b0:1e:32: 3c:5c:25:f3:c9:33:36:dc:a0:c4:92:83:d4:b2:2c:a6:3f:3f: f9:ca:90:80:8f:39:64:a2:45:b8:1a:80:eb:90:3f:24:97:6b: b1:01:d0:83:c4:99:29:71:21:b2:23:72:01:cc:20:ab:7b:8e: 24:f9:96:c8:c3:68:dd:03:8c:fd:65:0f:ed:21:44:02:c6:31: 43:8e:70:d0:c4:5a:37:78:4d:b7:b6:89:76:c6:94:b0:f1:8a: b0:9c:fe:3d:03:af:1b:a3:4d:36:7b:77:6d:fa:f1:0f:54:f3: 86:82:f0:7c:f5:dc:58:54:d3:e9:24:93:9c:a1:20:84:35:36: 1b:86:ba:fb:e9:62:e9:0a:7a:08:4c:c2:e4:ce:43:1d:b3:69: 72:0d:9b:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkTrCCCJnJoI1gkcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OGExYTM5YzItODk5YS00NWZkLTk3MzYtOTNkMWUxNDlmZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJ6iHPk+Pztq5elsUKlK4fjk6wq2jaIC/AG aIQm6kNZ1VlgSHc9Ev/NOEv8lZlYZ0NVJvDwqqKh5IhwyvHDPnvaot3S70wCXIJc wkdytkG/gkpxeg/ageFpRupyHQ4ZA6o17JbrytRM5k8+AwuQ9c2xDlZ3Q75X5S7r O1cuhPKYraihfabWu5VJDCZpMYk+aTQ+Bc1woqmKqX1mh0TwHz47p0APA8rgBwbd NALeXDRr0m7glTaY8feFEQlZRG3zQlSA/2HSqyAdI6pVMv8HlWHXcrVafsnLcSP7 HJz0L+OTpiTSgUYxnR0yA1RVG2lot3PWsSUHNN8jbLiuON+aGQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFViaa9bowzXZHcEry3ucfvT1/FGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvM2VjZDA4OWQtZDc4YS0z YjBiLWFlMGYtOTM3YjI4ZjRlOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7wQMA4E AgACMAgDBgQmAvxLADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhoc9movbJKPrnJ6cpY4ATrnxYEEnOA43h 90CCrLRilS6rG/+s8QL9vsaJ4nclKn0NPtLB4wSoFcM6qGp+urLqLHKtQtJMJppF +uHCmj8p0t9QYBRKeXEuGMzADU3vEU0uTqUR2c+YwDCwHjI8XCXzyTM23KDEkoPU siymPz/5ypCAjzlkokW4GoDrkD8kl2uxAdCDxJkpcSGyI3IBzCCre44k+ZbIw2jd A4z9ZQ/tIUQCxjFDjnDQxFo3eE23tol2xpSw8YqwnP49A68bo002e3dt+vEPVPOG gvB89dxYVNPpJJOcoSCENTYbhrr76WLpCnoITMLkzkMds2lyDZty -----END CERTIFICATE-----Generated at Sun Apr 27 19:46:22 2025 by rpki-client