$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/a26acd60-fd5f-3879-9c34-eb335ddec4b6.roa File: a26acd60-fd5f-3879-9c34-eb335ddec4b6.roa (raw, json) Hash identifier: TxAcau7Fp18er18b3c3rCK6YtGmpUuqg/HIYElrf2Ys= Subject key identifier: A5:47:C2:2A:57:9A:05:75:08:51:DB:98:5C:22:0F:D7:22:B2:89:D0 Certificate issuer: /CN=acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5 Certificate serial: 010D0C9F4328584986A75D59C4A32A32C8300100 Authority key identifier: 5F:CD:C3:90:C6:13:68:8F:8C:80:D5:D5:53:0F:77:A5:77:C7:FA:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/a26acd60-fd5f-3879-9c34-eb335ddec4b6.roa Signing time: Mon 14 Apr 2025 18:29:22 +0000 ROA not before: Mon 14 Apr 2025 18:29:22 +0000 ROA not after: Sun 13 Jul 2025 18:29:22 +0000 asID: 401665 IP address blocks: 23.136.204.0/24 maxlen: 24 2602:f6c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:a7:5d:59:c4:a3:2a:32:c8:30:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5 Validity Not Before: Apr 14 18:29:22 2025 GMT Not After : Jul 13 18:29:22 2025 GMT Subject: CN=ca8c14a5-2126-449f-b9ce-4846faa50d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:08:e5:b4:09:d0:af:4e:92:51:48:9a:6b: f6:52:e0:06:29:16:97:33:35:d2:2c:93:d8:c5:b3: cc:bd:a2:45:11:85:87:fd:d0:4c:69:88:92:97:35: 42:79:6a:3d:94:24:3c:a4:1e:c8:75:ca:bb:9d:1d: 0b:91:71:a2:f3:72:5b:26:87:6d:ca:77:06:e6:fc: 26:2b:d6:ef:98:ad:85:84:27:a9:f7:47:af:d6:b3: 07:2e:d8:fc:7b:38:da:36:88:24:78:d3:eb:1a:fb: ef:fe:10:c2:26:7e:7f:72:10:b8:28:53:ee:cf:27: c8:1f:ac:fe:1f:e4:82:a6:d0:e6:e4:35:fe:01:7f: f6:71:c6:0d:57:03:c9:58:3a:3b:2d:ed:b7:84:1e: 8d:02:b8:d3:41:f5:28:53:65:36:95:9e:26:f0:5e: 24:44:b9:ac:b0:01:bf:80:71:f7:29:78:be:70:f4: 64:37:82:a0:f5:5e:cc:c5:1c:08:64:4f:a9:d5:96: 7e:53:d1:a4:f4:bb:a9:b4:e7:9e:64:3f:2e:a1:a5: 5e:29:c6:26:e4:fd:1e:cc:2f:ee:56:5a:a1:cc:e0: 14:e9:26:a5:18:f6:2f:bc:d5:4b:ad:96:b7:79:97: e0:c4:7a:ef:4e:4e:6d:ae:fa:55:ee:53:e2:64:a7: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:C2:2A:57:9A:05:75:08:51:DB:98:5C:22:0F:D7:22:B2:89:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/a26acd60-fd5f-3879-9c34-eb335ddec4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.crl X509v3 Authority Key Identifier: keyid:5F:CD:C3:90:C6:13:68:8F:8C:80:D5:D5:53:0F:77:A5:77:C7:FA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/acf3a3c7-03af-4cbd-9120-fca8ff9fb1c5.cer sbgp-ipAddrBlock: critical IPv4: 23.136.204.0/24 IPv6: 2602:f6c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:57:93:b2:71:85:26:aa:55:9e:88:49:ed:6b:d5:b7:9c:79: 5f:8e:d0:9a:9c:89:e1:cf:93:6e:67:6f:f3:1e:be:2d:41:3a: 6d:c2:d7:36:8c:24:b0:1a:39:ba:3e:2b:c7:37:e2:a0:1c:da: d1:13:11:8a:a0:31:97:7c:21:fb:62:d9:47:5a:2e:23:11:ed: ea:90:54:f6:42:d3:8e:08:87:91:2f:14:84:c7:85:95:c8:f8: 08:60:be:8d:d8:2a:32:72:ad:bc:cd:64:15:e9:84:81:a4:90: dd:da:5f:8e:cc:37:21:30:b2:1b:74:9e:38:ed:9a:74:79:40: 33:1d:ae:5c:b3:04:02:e5:31:4d:d7:a4:8f:40:3e:ac:c6:0c: 8a:81:26:66:cd:6e:c7:47:bf:51:97:47:dd:29:e1:bb:42:0c: 4f:d9:65:6b:aa:59:61:a9:de:22:c1:d4:05:60:d4:8a:b5:5c: 46:96:32:1d:b4:6a:56:a7:b4:c1:28:ed:51:a9:12:f8:12:62: 54:6d:a4:2c:95:8d:0d:44:64:57:94:9b:58:10:ef:a7:9f:1f: 84:cc:74:7f:33:d0:9a:47:b6:7e:81:f6:52:71:5a:18:86:cc: ff:81:e8:5d:38:68:6b:7a:c6:d3:b1:91:3f:56:6a:c6:94:45: 62:c5:a8:30 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmGp11ZxKMqMsgwAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmM2EzYzctMDNhZi00Y2JkLTkxMjAtZmNhOGZmOWZi MWM1MB4XDTI1MDQxNDE4MjkyMloXDTI1MDcxMzE4MjkyMlowLzEtMCsGA1UEAxMk Y2E4YzE0YTUtMjEyNi00NDlmLWI5Y2UtNDg0NmZhYTUwZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRMI5bQJ0K9OklFImmv2UuAGKRaXMzXSLJPY xbPMvaJFEYWH/dBMaYiSlzVCeWo9lCQ8pB7Idcq7nR0LkXGi83JbJodtyncG5vwm K9bvmK2FhCep90ev1rMHLtj8ezjaNogkeNPrGvvv/hDCJn5/chC4KFPuzyfIH6z+ H+SCptDm5DX+AX/2ccYNVwPJWDo7Le23hB6NArjTQfUoU2U2lZ4m8F4kRLmssAG/ gHH3KXi+cPRkN4Kg9V7MxRwIZE+p1ZZ+U9Gk9LuptOeeZD8uoaVeKcYm5P0ezC/u VlqhzOAU6SalGPYvvNVLrZa3eZfgxHrvTk5trvpV7lPiZKeKCwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKVHwipXmgV1CFHbmFwiD9cisonQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hY2Yz YTNjNy0wM2FmLTRjYmQtOTEyMC1mY2E4ZmY5ZmIxYzUvYTI2YWNkNjAtZmQ1Zi0z ODc5LTljMzQtZWIzMzVkZGVjNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWNmM2EzYzctMDNhZi00Y2JkLTkx MjAtZmNhOGZmOWZiMWM1L2FjZjNhM2M3LTAzYWYtNGNiZC05MTIwLWZjYThmZjlm YjFjNS5jcmwwHwYDVR0jBBgwFoAUX83DkMYTaI+MgNXVUw93pXfH+h0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hY2YzYTNjNy0wM2FmLTRjYmQtOTEyMC1mY2E4 ZmY5ZmIxYzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4jMMA8E AgACMAkDBwAmAvbBAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKFeTsnGFJqpVnohJ7WvVt5x5X47QmpyJ 4c+Tbmdv8x6+LUE6bcLXNowksBo5uj4rxzfioBza0RMRiqAxl3wh+2LZR1ouIxHt 6pBU9kLTjgiHkS8UhMeFlcj4CGC+jdgqMnKtvM1kFemEgaSQ3dpfjsw3ITCyG3Se OO2adHlAMx2uXLMEAuUxTdekj0A+rMYMioEmZs1ux0e/UZdH3Snhu0IMT9lla6pZ YaneIsHUBWDUirVcRpYyHbRqVqe0wSjtUakS+BJiVG2kLJWNDURkV5SbWBDvp58f hMx0fzPQmke2foH2UnFaGIbM/4HoXThoa3rG07GRP1ZqxpRFYsWoMA== -----END CERTIFICATE-----Generated at Mon Apr 28 15:48:18 2025 by rpki-client