$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json) Hash identifier: vaKOr13AX7WnCEDueB3/D+yMx0Ts+g+YX525jvhd1aw= Subject key identifier: DD:D6:69:E4:FD:84:2D:04:13:2E:C2:40:CD:A0:F5:88:AE:42:CB:1F Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F43285849780F0B7EF7E4ED2FFF549400 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 62516 IP address blocks: 23.140.104.0/24 maxlen: 32 2604:4940::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0b:7e:f7:e4:ed:2f:ff:54:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=70ea4747-ec8a-4d58-b2cf-7bf4c4c85c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:fd:da:0b:05:66:99:9a:da:ed:c4:c1:1d: 7f:06:92:d8:bf:18:e5:18:fd:44:af:2a:11:b2:3a: 69:98:34:17:70:7e:70:c1:38:bf:ae:ca:ea:ba:da: f0:a3:24:5a:fd:fb:3e:39:06:e2:de:51:fe:35:c8: 04:d8:20:0e:1b:e7:8d:09:e0:1b:6d:59:9d:ed:b5: d9:bc:bd:6f:92:0e:93:8d:cc:0f:65:ac:dd:36:f1: d9:b9:57:3b:f8:60:81:00:6c:8f:97:ab:12:65:df: 4f:53:ad:a7:c6:a4:f2:8a:02:b2:54:fa:9e:07:ab: 85:5a:42:45:37:e3:87:e1:e5:2e:e0:53:18:31:95: a8:4b:66:7b:08:29:82:76:5f:96:1a:4a:55:d3:3b: f4:98:66:31:c5:f2:2b:3c:de:73:6d:be:bd:b2:3d: b4:98:27:51:08:6e:ed:7e:f9:0d:23:32:da:d6:82: fe:e2:7f:a6:59:ed:ad:51:d5:af:21:94:0e:94:c2: 54:9f:4e:b7:bd:8f:e9:b8:60:9e:cc:1a:e9:ed:bb: 45:9b:fc:cc:88:07:cd:1c:8b:a3:50:a8:ac:46:59: 79:48:f4:e8:79:68:41:2f:84:3d:04:fa:10:94:f8: f6:6f:f0:16:46:8f:ba:8b:64:41:0e:96:ec:53:b1: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D6:69:E4:FD:84:2D:04:13:2E:C2:40:CD:A0:F5:88:AE:42:CB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: 23.140.104.0/24 IPv6: 2604:4940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5e:c7:06:e5:13:88:6a:0c:79:a8:e2:f6:a0:f1:b7:14:ce: cf:f8:ff:ab:9d:e9:08:4f:c7:9b:90:e7:dd:e1:fb:cf:1d:ee: c3:d2:27:9f:cb:61:7a:5f:00:a2:d7:a5:5a:e4:63:d8:d3:b1: b0:f0:9c:76:5c:3f:1d:61:f2:a4:57:ca:cc:55:89:79:a8:97: d8:42:21:65:3c:cc:2e:0c:8f:1a:b5:4f:ff:7c:fb:29:77:76: b7:e2:9f:77:ea:0b:36:b4:cb:eb:55:80:f6:df:6b:86:20:c4: 6f:10:9e:fb:0e:c3:3e:bb:49:c0:c6:9f:1f:95:5f:64:d7:69: 8c:40:c7:13:d6:10:43:9d:cc:c5:25:64:c2:54:01:e7:cd:00: ed:e9:1b:bf:ac:b4:4e:1b:21:70:d8:9c:db:7c:5a:7d:f2:45: 30:6a:81:9d:05:02:5f:a5:bb:d2:66:5f:a9:2d:77:89:e7:f3: 8f:7a:ce:ff:1d:f7:f0:3d:15:48:40:2a:76:fe:51:84:77:d5: 0f:53:2d:d0:b6:56:c0:c4:79:07:2f:78:65:ec:12:d0:45:c7: 40:57:2b:3b:6f:41:49:3d:e6:8c:bd:e5:34:f1:90:a2:a0:61: f4:62:61:e9:2f:54:af:ac:0e:19:41:ad:ae:5b:fe:6d:e8:1a: b3:05:d0:84 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEl4Dwt+9+TtL/9UlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NzBlYTQ3NDctZWM4YS00ZDU4LWIyY2YtN2JmNGM0Yzg1YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXX92gsFZpma2u3EwR1/BpLYvxjlGP1EryoR sjppmDQXcH5wwTi/rsrqutrwoyRa/fs+OQbi3lH+NcgE2CAOG+eNCeAbbVmd7bXZ vL1vkg6TjcwPZazdNvHZuVc7+GCBAGyPl6sSZd9PU62nxqTyigKyVPqeB6uFWkJF N+OH4eUu4FMYMZWoS2Z7CCmCdl+WGkpV0zv0mGYxxfIrPN5zbb69sj20mCdRCG7t fvkNIzLa1oL+4n+mWe2tUdWvIZQOlMJUn063vY/puGCezBrp7btFm/zMiAfNHIuj UKisRll5SPToeWhBL4Q9BPoQlPj2b/AWRo+6i2RBDpbsU7GovQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFN3WaeT9hC0EEy7CQM2g9YiuQssfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4xoMA0E AgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIFexwblE4hqDHmo4vag8bcUzs/4/6ud6QhP x5uQ593h+88d7sPSJ5/LYXpfAKLXpVrkY9jTsbDwnHZcPx1h8qRXysxViXmol9hC IWU8zC4Mjxq1T/98+yl3drfin3fqCza0y+tVgPbfa4YgxG8QnvsOwz67ScDGnx+V X2TXaYxAxxPWEEOdzMUlZMJUAefNAO3pG7+stE4bIXDYnNt8Wn3yRTBqgZ0FAl+l u9JmX6ktd4nn8496zv8d9/A9FUhAKnb+UYR31Q9TLdC2VsDEeQcveGXsEtBFx0BX KztvQUk95oy95TTxkKKgYfRiYekvVK+sDhlBra5b/m3oGrMF0IQ= -----END CERTIFICATE-----Generated at Tue Apr 29 09:19:21 2025 by rpki-client