$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa File: 71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa (raw, json) Hash identifier: VtNH77QiO5wqhvlgWwC9V/xft+S+sIiNaUzT0ePwBfg= Subject key identifier: A2:D3:69:89:89:15:21:C8:6F:20:59:35:EA:69:F7:2C:CF:A7:0D:E1 Certificate issuer: /CN=a28c0165-b200-4b04-831e-e344861ac9ad Certificate serial: 010D0C9F43285849EBEA4750027844D372C86F80 Authority key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 399870 IP address blocks: 23.134.212.0/24 maxlen: 24 2602:f6e0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:47:50:02:78:44:d3:72:c8:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a28c0165-b200-4b04-831e-e344861ac9ad Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=34d6571e-29f2-4c5d-89bd-a8c9bfa79a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:82:3f:c4:cd:c1:31:f2:7d:c8:4f:70:36: a7:4c:2b:ea:a2:31:c0:b2:56:98:d8:ab:86:ce:4f: b5:a4:b1:09:ea:da:e8:88:55:0d:eb:89:6c:81:0d: af:c5:5f:62:0b:bf:25:08:f3:ba:d8:c3:fd:6d:a3: ea:94:b4:0d:a8:6e:f5:ca:c5:90:62:c8:fb:de:45: 52:30:2e:81:f6:d0:1a:01:de:92:05:ec:91:16:3b: d0:98:fe:e9:ae:bc:a8:17:ab:55:10:95:76:6e:ea: 4e:cd:b9:77:22:88:9d:98:93:37:67:5a:a7:bc:07: f6:9c:40:7a:15:1a:34:8e:59:d1:57:0c:82:bb:ca: 0a:32:bc:54:83:c2:79:df:bb:0e:00:1a:f7:b1:87: 45:05:ce:2b:06:07:1a:4d:51:40:d0:61:35:2c:f0: 99:18:8d:33:60:3b:a2:20:83:a2:73:df:c0:30:91: e9:a0:05:35:42:81:26:dd:38:f7:e9:0e:c2:0c:63: 0e:54:21:28:f4:54:b2:c6:d9:b1:30:72:bb:bd:49: bc:cc:ef:52:e8:d9:a3:83:07:51:fe:99:7e:a0:87: e5:7c:e8:e3:3a:df:ca:26:06:1a:91:7a:4e:2a:59: 97:a8:c8:a9:15:91:64:68:bd:31:c5:29:a0:04:19: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D3:69:89:89:15:21:C8:6F:20:59:35:EA:69:F7:2C:CF:A7:0D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl X509v3 Authority Key Identifier: keyid:C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer sbgp-ipAddrBlock: critical IPv4: 23.134.212.0/24 IPv6: 2602:f6e0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:02:48:a6:4d:13:83:47:9b:ca:c3:e7:4a:4d:06:2b:93:e3: 89:b3:f6:92:3a:5f:81:36:c9:96:26:a8:0b:64:87:65:a5:e5: d1:80:87:01:9a:c6:be:51:d1:ce:5c:f1:c3:15:8b:97:13:b4: 2c:49:58:3c:75:ab:cd:37:8c:98:6c:b7:07:1d:3b:1b:5b:07: 31:6e:2b:91:8a:1f:f0:23:57:0d:73:14:f3:d0:35:ed:de:de: 01:39:af:26:a0:39:f5:9f:2b:15:53:33:43:1e:e3:87:8d:d3: 8f:c8:2a:ac:cd:10:6a:c2:67:1e:63:52:2a:79:8e:a5:54:b3: 16:a9:ed:83:1f:06:2b:08:ec:41:7c:1d:d7:86:5f:94:f4:79: b2:a0:76:4a:96:65:f5:7d:f0:5e:4a:a2:88:2c:93:81:ea:c7: 5b:d8:a6:67:7f:49:0d:66:fb:d2:35:17:02:da:da:6d:51:4a: 62:1e:6d:52:80:76:86:b2:ec:1f:f6:dd:b8:ee:c9:99:8d:26: 80:5b:15:50:2b:75:7f:a3:4d:2d:bb:09:44:34:eb:24:64:a4: e1:3b:63:3f:6a:43:b1:a3:0a:d1:b6:3d:9b:04:45:58:65:99: 85:54:31:e6:c4:e3:2d:a6:05:58:b2:60:6d:2e:f8:66:0a:4d: c9:a2:c4:af -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnr6kdQAnhE03LIb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4YzAxNjUtYjIwMC00YjA0LTgzMWUtZTM0NDg2MWFj OWFkMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MzRkNjU3MWUtMjlmMi00YzVkLTg5YmQtYThjOWJmYTc5YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW6CP8TNwTHyfchPcDanTCvqojHAslaY2KuG zk+1pLEJ6troiFUN64lsgQ2vxV9iC78lCPO62MP9baPqlLQNqG71ysWQYsj73kVS MC6B9tAaAd6SBeyRFjvQmP7prryoF6tVEJV2bupOzbl3IoidmJM3Z1qnvAf2nEB6 FRo0jlnRVwyCu8oKMrxUg8J537sOABr3sYdFBc4rBgcaTVFA0GE1LPCZGI0zYDui IIOic9/AMJHpoAU1QoEm3Tj36Q7CDGMOVCEo9FSyxtmxMHK7vUm8zO9S6NmjgwdR /pl+oIflfOjjOt/KJgYakXpOKlmXqMipFZFkaL0xxSmgBBmtRQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKLTaYmJFSHIbyBZNepp9yzPpw3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjhj MDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0ODYxYWM5YWQvNzFiZDZkNzItMTFiNS0z ZDkyLWJjZmYtMGYzYTc3ZDVjZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI4YzAxNjUtYjIwMC00YjA0LTgz MWUtZTM0NDg2MWFjOWFkL2EyOGMwMTY1LWIyMDAtNGIwNC04MzFlLWUzNDQ4NjFh YzlhZC5jcmwwHwYDVR0jBBgwFoAUxXxQB2upKTX0kUoX2k8eJIPteUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjhjMDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0 ODYxYWM5YWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4bUMA4E AgACMAgDBgAmAvbgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQAkimTRODR5vKw+dKTQYrk+OJs/aSOl+B NsmWJqgLZIdlpeXRgIcBmsa+UdHOXPHDFYuXE7QsSVg8davNN4yYbLcHHTsbWwcx biuRih/wI1cNcxTz0DXt3t4BOa8moDn1nysVUzNDHuOHjdOPyCqszRBqwmceY1Iq eY6lVLMWqe2DHwYrCOxBfB3Xhl+U9HmyoHZKlmX1ffBeSqKILJOB6sdb2KZnf0kN ZvvSNRcC2tptUUpiHm1SgHaGsuwf9t247smZjSaAWxVQK3V/o00tuwlENOskZKTh O2M/akOxowrRtj2bBEVYZZmFVDHmxOMtpgVYsmBtLvhmCk3JosSv -----END CERTIFICATE-----Generated at Mon Jun 16 15:25:50 2025 by rpki-client