$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/fdb36b24-8275-309b-915f-3bc4e8156d2b.roa File: fdb36b24-8275-309b-915f-3bc4e8156d2b.roa (raw, json) Hash identifier: eu8L+bXn8k87kcE4EUfVTB4HYEnGm7bFCfIye8aJndw= Subject key identifier: E5:67:C4:25:F6:FC:E9:8A:C9:4C:27:2D:5C:C5:06:03:0D:81:07:39 Certificate issuer: /CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3 Certificate serial: 010D0C9F432858496695CD4AC7B878B26E73BD60 Authority key identifier: 9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/fdb36b24-8275-309b-915f-3bc4e8156d2b.roa Signing time: Thu 03 Apr 2025 06:48:07 +0000 ROA not before: Thu 03 Apr 2025 06:48:07 +0000 ROA not after: Wed 02 Jul 2025 06:48:07 +0000 asID: 4766 IP address blocks: 23.134.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:66:95:cd:4a:c7:b8:78:b2:6e:73:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3 Validity Not Before: Apr 3 06:48:07 2025 GMT Not After : Jul 2 06:48:07 2025 GMT Subject: CN=bd6852e6-7999-4dc8-b64e-e08fbd4beaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:c9:5e:f8:24:fc:18:9a:ba:37:87:b1:97: dd:c8:18:ae:a5:3f:c2:a1:15:6d:10:7e:15:b7:89: b4:2c:2c:df:a3:7e:3a:db:f9:21:44:93:10:0e:e6: 49:85:6c:23:53:2a:27:29:db:ec:8b:df:94:c9:8f: 78:2c:cc:de:11:07:fc:46:25:71:1d:1b:6d:1a:67: 95:72:e1:3d:eb:10:89:96:8b:f2:5f:58:91:d0:aa: 58:f1:1d:b7:35:3a:15:fe:02:97:52:60:2a:31:ad: cb:3d:f4:6e:e7:f7:fc:46:5c:80:90:f9:96:ba:13: b4:0d:26:c5:42:c8:e7:03:14:48:a0:29:18:47:f5: 95:4c:a8:03:57:16:57:3a:2f:87:c2:d8:bd:c6:6d: 42:7c:00:7f:d8:e7:80:53:aa:e1:a4:32:19:fd:0b: 07:5f:41:65:26:c2:c0:ea:7a:ed:63:b3:73:8a:9b: 1b:69:08:cd:b3:7f:88:d0:f9:6b:ab:7c:6a:7c:cd: a3:26:1f:0c:38:1d:04:f1:1d:96:a6:e4:2f:36:d8: 8a:33:58:be:d3:2c:17:81:5e:2e:9d:70:6e:cc:ea: 4b:98:13:53:27:1a:be:bd:9e:0a:e3:ab:d6:09:9e: 63:c3:bd:de:c5:65:03:7e:8e:55:b1:94:36:d2:76: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:67:C4:25:F6:FC:E9:8A:C9:4C:27:2D:5C:C5:06:03:0D:81:07:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/fdb36b24-8275-309b-915f-3bc4e8156d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl X509v3 Authority Key Identifier: keyid:9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer sbgp-ipAddrBlock: critical IPv4: 23.134.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:89:e6:04:c1:4b:7e:fc:9c:9a:91:0d:e9:35:54:2e:8b:fc: a3:2c:65:a5:61:e9:d7:2b:04:80:ad:0d:ee:1e:a7:25:2e:c7: 50:1a:58:d8:c8:24:23:db:e4:4e:f0:53:52:17:1c:7a:4b:fa: 09:7f:cd:91:f4:65:d2:94:03:c9:ac:58:66:f3:52:af:fc:02: 41:98:d3:70:35:ed:83:62:6a:60:2b:e2:19:23:2e:3c:fa:ae: 7d:f1:af:98:ae:e7:e2:cb:d8:ba:74:18:2d:af:ac:92:46:b7: 80:a8:de:23:d4:c3:4d:9d:c0:df:da:ac:f1:64:b7:0d:40:2f: fa:83:57:ca:5c:7c:b8:7e:9f:d4:9d:27:1c:d9:e0:7a:f7:8f: 17:97:af:92:df:a4:a1:26:92:3d:fa:78:66:99:ab:a4:5a:0d: 63:2c:fe:88:7c:25:93:cd:58:49:00:30:66:66:ca:d6:5b:ff: da:b7:46:6b:d5:ab:75:37:33:7d:61:ba:03:46:0a:39:e8:58: eb:04:eb:54:cc:6f:03:97:13:d5:90:bd:a8:d0:a5:94:04:7a: d3:b9:cd:f9:7f:17:7a:ab:78:c1:a3:91:a2:ec:62:95:8a:c6: 9b:58:f0:58:5e:08:82:63:d2:3a:31:86:e2:c9:33:d3:13:55: 53:a1:a2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElmlc1Kx7h4sm5zvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUyODAxODgtOGJiNy00Y2VlLTljOWMtNmFkOWI3ODVl MGMzMB4XDTI1MDQwMzA2NDgwN1oXDTI1MDcwMjA2NDgwN1owLzEtMCsGA1UEAxMk YmQ2ODUyZTYtNzk5OS00ZGM4LWI2NGUtZTA4ZmJkNGJlYWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTDJXvgk/BiaujeHsZfdyBiupT/CoRVtEH4V t4m0LCzfo3462/khRJMQDuZJhWwjUyonKdvsi9+UyY94LMzeEQf8RiVxHRttGmeV cuE96xCJlovyX1iR0KpY8R23NToV/gKXUmAqMa3LPfRu5/f8RlyAkPmWuhO0DSbF QsjnAxRIoCkYR/WVTKgDVxZXOi+Hwti9xm1CfAB/2OeAU6rhpDIZ/QsHX0FlJsLA 6nrtY7NzipsbaQjNs3+I0Plrq3xqfM2jJh8MOB0E8R2WpuQvNtiKM1i+0ywXgV4u nXBuzOpLmBNTJxq+vZ4K46vWCZ5jw73exWUDfo5VsZQ20nYyawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVnxCX2/OmKyUwnLVzFBgMNgQc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTI4 MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5Yjc4NWUwYzMvZmRiMzZiMjQtODI3NS0z MDliLTkxNWYtM2JjNGU4MTU2ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTUyODAxODgtOGJiNy00Y2VlLTlj OWMtNmFkOWI3ODVlMGMzLzk1MjgwMTg4LThiYjctNGNlZS05YzljLTZhZDliNzg1 ZTBjMy5jcmwwHwYDVR0jBBgwFoAUnLv01oiKRReyJxBXpHb+c+tjAwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTI4MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5 Yjc4NWUwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCJ5gTBS378nJqRDek1VC6L/KMsZaVh6dcrBICtDe4epyUux1AaWNjI JCPb5E7wU1IXHHpL+gl/zZH0ZdKUA8msWGbzUq/8AkGY03A17YNiamAr4hkjLjz6 rn3xr5iu5+LL2Lp0GC2vrJJGt4Co3iPUw02dwN/arPFktw1AL/qDV8pcfLh+n9Sd JxzZ4Hr3jxeXr5LfpKEmkj36eGaZq6RaDWMs/oh8JZPNWEkAMGZmytZb/9q3RmvV q3U3M31hugNGCjnoWOsE61TMbwOXE9WQvajQpZQEetO5zfl/F3qreMGjkaLsYpWK xptY8FheCIJj0joxhuLJM9MTVVOhomg= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:08 2025 by rpki-client