$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa File: 7dc9f381-556f-3234-ab22-8ad7b4242933.roa (raw, json) Hash identifier: jXBE5akpEQSMY2FGDpY0z+5SlQJ7ivYyHZeQ7qVWxws= Subject key identifier: 5D:5F:3E:9E:0A:AD:20:4E:B6:A5:B3:50:34:5B:F7:AB:E9:C6:58:06 Certificate issuer: /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Certificate serial: 010D0C9F432858496CE45B2348FCA76ADC3E8F00 Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 27602 IP address blocks: 23.249.171.0/24 maxlen: 24 63.246.134.0/24 maxlen: 24 209.209.96.0/22 maxlen: 24 2604:f3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5b:23:48:fc:a7:6a:dc:3e:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=52ac7d68-eb79-46c6-9880-3d45ca6b66e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:79:dd:70:84:5b:ab:f9:e1:d9:7d:52:ac: 3f:b3:15:07:af:eb:62:7a:b4:aa:d0:7f:32:d1:ef: 31:b0:18:f0:30:23:e1:9d:32:9b:48:be:c7:19:46: 23:0e:8a:d8:4c:9e:5c:f9:19:21:eb:b4:61:fc:2f: 3d:e8:7e:90:4c:35:d7:9b:ae:59:a0:68:38:85:f7: a7:06:33:87:8c:cf:85:ec:ee:bb:5c:9e:27:7f:0b: c3:ad:44:63:74:ac:17:c3:ee:a9:00:2d:36:ec:77: 07:05:d3:33:53:7d:f6:aa:f7:03:2b:bf:16:01:ab: 0e:39:ff:9c:c8:10:93:b0:24:7a:2d:08:41:47:dc: f2:0d:06:a1:58:3a:92:95:69:8e:a8:34:67:5b:6d: fc:20:60:01:e4:c8:91:c4:72:fd:1b:8d:ca:7a:74: aa:c7:e1:fa:b2:5d:b0:00:65:9a:fb:84:47:87:84: c4:37:e9:d1:2b:fa:8b:78:72:b8:20:35:eb:9a:e2: 24:24:8a:96:83:bd:f6:df:a2:02:86:8f:54:e7:1f: fb:06:ef:ce:c0:62:65:98:a5:02:82:90:78:d5:a4: b7:39:c3:5a:d4:4c:a8:62:52:55:aa:1e:6b:85:a7: ea:74:60:bd:50:56:b0:cb:8e:ba:f7:43:5e:57:0e: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:3E:9E:0A:AD:20:4E:B6:A5:B3:50:34:5B:F7:AB:E9:C6:58:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl X509v3 Authority Key Identifier: keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer sbgp-ipAddrBlock: critical IPv4: 23.249.171.0/24 63.246.134.0/24 209.209.96.0/22 IPv6: 2604:f3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d4:4d:d2:7b:9e:8a:7d:29:d6:46:6e:47:d3:4b:98:f9:3e: 9c:d9:9e:69:06:3b:c4:55:e4:a5:41:f3:d0:9b:19:83:74:8b: 99:57:58:6e:7d:c3:18:40:36:30:58:a6:a6:af:23:e4:3a:3f: 3e:5f:f9:0d:09:c5:ae:d0:1e:d2:b2:57:90:f4:65:3d:a0:30: 5a:14:15:c3:91:97:76:9c:ae:98:fb:b7:82:cb:96:49:ef:55: 2b:af:36:16:61:fb:ca:7e:2c:0e:98:5d:bb:88:93:0c:bb:a9: 6c:9b:9b:d2:60:14:a1:bb:70:b5:95:0e:22:4b:0e:c8:48:df: ab:27:8f:4b:f4:17:2c:8d:82:88:46:37:3e:27:b2:ec:28:57: 2a:ed:5d:00:c4:00:99:9a:f2:19:b1:7b:82:a5:9e:4e:fd:e3: f3:ad:d1:0c:7a:4b:39:b1:05:57:8a:4e:d1:34:db:c5:ab:10: 07:01:7d:a2:a3:45:92:1b:93:79:3c:7f:a2:5e:54:49:68:96: 33:ba:be:87:8b:96:b0:7f:b3:7e:11:a9:e2:13:5f:7c:38:76: 6f:8e:ca:18:fa:2a:ef:e5:8d:f7:02:a9:c3:54:58:15:5b:a9: 4f:6e:73:29:bd:e6:1d:0a:fa:aa:7f:52:dd:a4:9e:1f:cf:12: 26:92:f9:02 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEls5FsjSPynatw+jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFjZDljOTctNWIwOC00ZTdkLWFlZDYtMWY1OTlhMzVi ZDRhMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NTJhYzdkNjgtZWI3OS00NmM2LTk4ODAtM2Q0NWNhNmI2NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dt53XCEW6v54dl9Uqw/sxUHr+tierSq0H8y 0e8xsBjwMCPhnTKbSL7HGUYjDorYTJ5c+Rkh67Rh/C896H6QTDXXm65ZoGg4hfen BjOHjM+F7O67XJ4nfwvDrURjdKwXw+6pAC027HcHBdMzU332qvcDK78WAasOOf+c yBCTsCR6LQhBR9zyDQahWDqSlWmOqDRnW238IGAB5MiRxHL9G43KenSqx+H6sl2w AGWa+4RHh4TEN+nRK/qLeHK4IDXrmuIkJIqWg73236ICho9U5x/7Bu/OwGJlmKUC gpB41aS3OcNa1EyoYlJVqh5rhafqdGC9UFawy46690NeVw67TwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFF1fPp4KrSBOtqWzUDRb96vpxlgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNk OWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEzNWJkNGEvN2RjOWYzODEtNTU2Zi0z MjM0LWFiMjItOGFkN2I0MjQyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFjZDljOTctNWIwOC00ZTdkLWFl ZDYtMWY1OTlhMzViZDRhLzgxY2Q5Yzk3LTViMDgtNGU3ZC1hZWQ2LTFmNTk5YTM1 YmQ0YS5jcmwwHwYDVR0jBBgwFoAUP8S2EhEUE8gIcSKKrnEYVpKc20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5 OWEzNWJkNGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF/mrAwQA P/aGAwQC0dFgMA0EAgACMAcDBQAmBPPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA/UTdJ7nop9KdZGbkfT S5j5PpzZnmkGO8RV5KVB89CbGYN0i5lXWG59wxhANjBYpqavI+Q6Pz5f+Q0Jxa7Q HtKyV5D0ZT2gMFoUFcORl3acrpj7t4LLlknvVSuvNhZh+8p+LA6YXbuIkwy7qWyb m9JgFKG7cLWVDiJLDshI36snj0v0FyyNgohGNz4nsuwoVyrtXQDEAJma8hmxe4Kl nk794/Ot0Qx6SzmxBVeKTtE028WrEAcBfaKjRZIbk3k8f6JeVEloljO6voeLlrB/ s34RqeITX3w4dm+Oyhj6Ku/ljfcCqcNUWBVbqU9ucym95h0K+qp/Ut2knh/PEiaS +QI= -----END CERTIFICATE-----Generated at Mon Apr 28 21:38:35 2025 by rpki-client