$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa File: ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json) Hash identifier: DDWlTm1yX2UEtu6dM/jHlZk5wlQODrCvR9kBKMIX1hM= Subject key identifier: EA:F5:FF:39:81:37:88:04:80:33:B9:09:F3:A1:0E:A8:F5:EE:F3:21 Certificate issuer: /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Certificate serial: 010D0C9F4328584988CF2B71E86E0C303E40BB58 Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 30114 IP address blocks: 23.146.88.0/24 maxlen: 24 2602:fab0:20::/44 maxlen: 48 2602:fab0:30::/44 maxlen: 48 2602:fab0:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2b:71:e8:6e:0c:30:3e:40:bb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7d57b445-4823-486d-b6c9-ad413c85ad2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:04:9d:d5:b6:29:51:91:97:94:65:42:16: 19:be:1d:e5:94:f1:76:57:cf:91:cb:76:e2:85:b7: ce:a9:46:e9:48:af:33:c0:96:ed:d0:be:25:3b:78: 07:6b:d6:ce:dd:d9:0e:d5:fc:c9:85:05:0c:45:d8: 78:8f:7c:ac:3e:d7:9c:77:76:40:38:65:f4:4e:17: 18:94:a4:35:0e:1b:e7:27:35:89:ee:45:70:46:c9: 4f:be:81:f5:2b:bd:01:07:96:a6:9f:e9:94:9d:8f: d7:7d:5b:35:b7:1d:bb:9d:c9:60:0a:11:6d:88:c1: e2:dc:b5:30:34:2e:dc:8c:f0:a2:1a:53:f2:d3:9e: 52:19:6c:f0:1c:39:18:fe:e5:7f:38:89:c8:b7:67: bc:45:5c:ab:c8:d6:50:eb:d9:df:76:1a:5f:28:f4: 17:27:52:f6:59:dc:07:4b:f9:ec:08:9e:3e:7b:43: c5:9b:33:7f:de:6f:c7:81:a8:dd:7d:ca:c6:07:60: 19:66:8b:31:45:6f:0a:36:a5:05:56:a6:18:74:21: 7b:6e:30:c8:9b:a5:d4:03:75:d8:3c:61:07:ce:bc: 06:ad:e3:ec:fe:0b:09:94:0c:ef:d6:69:ca:c7:fe: 7e:72:06:b5:c8:77:42:25:7d:c8:63:5c:cf:44:35: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F5:FF:39:81:37:88:04:80:33:B9:09:F3:A1:0E:A8:F5:EE:F3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl X509v3 Authority Key Identifier: keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer sbgp-ipAddrBlock: critical IPv4: 23.146.88.0/24 IPv6: 2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:dd:24:eb:bb:cf:6b:91:df:2b:f1:8c:8e:fd:30:00:7a:3b: d9:c7:fb:a1:93:af:31:af:25:51:b1:1a:d1:2f:81:5a:15:9f: c7:9b:75:30:80:f2:1a:40:44:60:1b:6e:a0:7b:b5:eb:3d:4a: f1:f8:93:da:15:fe:5e:13:eb:5e:ac:57:55:e4:21:0c:cd:1c: c0:8f:d3:68:98:86:53:f9:5c:71:f8:1a:65:87:10:bb:cd:8a: 97:f9:76:a4:f6:5b:d9:85:0b:f6:86:5d:47:22:2a:a9:ef:52: 84:06:03:3f:5c:a9:1e:0c:9f:68:23:7d:2a:41:9c:75:bf:9a: b8:02:77:73:7f:d5:99:99:e7:2e:4b:2f:4e:d0:c6:74:1c:bf: e4:1b:c5:86:1d:27:34:f0:74:bf:f8:3c:1d:bc:78:6c:18:27: dc:40:a8:5d:88:30:e7:64:99:d7:70:f6:67:95:d2:8b:2a:88: 93:d3:00:9e:ae:3a:b9:1d:74:e4:00:64:fc:27:aa:ab:47:c1: 8a:c3:69:60:e2:a6:6c:1e:4f:03:93:ac:ee:f8:25:95:e9:b3: 98:80:a8:98:70:2f:2d:00:a6:f2:d5:75:f9:95:48:06:db:31: a6:d9:33:bb:96:d1:d7:9c:17:e3:c3:24:7a:2f:de:06:4c:d3: ef:8e:99:11 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEmIzytx6G4MMD5Au1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh MjdlMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2Q1N2I0NDUtNDgyMy00ODZkLWI2YzktYWQ0MTNjODVhZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmScEndW2KVGRl5RlQhYZvh3llPF2V8+Ry3bi hbfOqUbpSK8zwJbt0L4lO3gHa9bO3dkO1fzJhQUMRdh4j3ysPtecd3ZAOGX0ThcY lKQ1DhvnJzWJ7kVwRslPvoH1K70BB5amn+mUnY/XfVs1tx27nclgChFtiMHi3LUw NC7cjPCiGlPy055SGWzwHDkY/uV/OInIt2e8RVyryNZQ69nfdhpfKPQXJ1L2WdwH S/nsCJ4+e0PFmzN/3m/HgajdfcrGB2AZZosxRW8KNqUFVqYYdCF7bjDIm6XUA3XY PGEHzrwGrePs/gsJlAzv1mnKx/5+cga1yHdCJX3IY1zPRDWnIwIDAQABo4IDcTCC A20wHQYDVR0OBBYEFOr1/zmBN4gEgDO5CfOhDqj17vMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvY2E2MmYxYTUtNWVjYi0z MDQwLTg1ZjMtMWY4YjZjY2FkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1 ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1 OWUxZmEyN2UuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAF5JYMBoE AgACMBQwEgMHBSYC+rAAIAMHBCYC+rAAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD3STru89rkd8r8YyO /TAAejvZx/uhk68xryVRsRrRL4FaFZ/Hm3UwgPIaQERgG26ge7XrPUrx+JPaFf5e E+terFdV5CEMzRzAj9NomIZT+Vxx+BplhxC7zYqX+Xak9lvZhQv2hl1HIiqp71KE BgM/XKkeDJ9oI30qQZx1v5q4Andzf9WZmecuSy9O0MZ0HL/kG8WGHSc08HS/+Dwd vHhsGCfcQKhdiDDnZJnXcPZnldKLKoiT0wCerjq5HXTkAGT8J6qrR8GKw2lg4qZs Hk8Dk6zu+CWV6bOYgKiYcC8tAKby1XX5lUgG2zGm2TO7ltHXnBfjwyR6L94GTNPv jpkR -----END CERTIFICATE-----Generated at Sun Jun 15 15:04:22 2025 by rpki-client