$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa File: c4f1131d-3203-3b87-9282-48a9051598c8.roa (raw, json) Hash identifier: OTmuCACrqAYQ+g0VlbMUbo9xQlLUq1QGXf4+vIAi+Pw= Subject key identifier: E4:97:75:79:7D:A8:64:14:BA:D8:04:0F:40:2F:FB:C6:3D:B2:AF:34 Certificate issuer: /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Certificate serial: 010D0C9F43285849955F1147F34869E88AE72F00 Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 401474 IP address blocks: 23.133.100.0/24 maxlen: 24 2602:f724::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:11:47:f3:48:69:e8:8a:e7:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=e0340e0e-e5ba-48fc-bd57-37b7d655aab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:c6:9e:d7:52:4d:00:3c:31:e4:45:82:dd: 4d:f4:b2:01:d5:b6:0c:e4:2f:21:f9:21:c7:28:b0: f6:d9:3b:3e:90:f4:7f:7a:b9:ec:61:3d:39:bf:5d: 79:4f:d6:57:24:01:a7:b2:1c:ac:49:d1:46:6f:84: 14:3f:ca:3b:dd:de:03:7e:b6:14:50:de:93:a9:ea: d0:2f:e7:e6:1e:af:24:c2:a9:b6:b3:fd:3e:14:e3: 9c:5e:bf:a5:93:2f:41:77:26:cc:26:81:82:84:ac: 18:fa:42:9a:1a:36:70:f1:73:a7:1a:58:09:4c:f2: 44:6e:ab:f9:e7:ea:96:1f:72:73:b6:ff:23:d6:c8: 64:f6:ef:2a:90:31:77:b1:66:d0:2e:78:dc:e3:b9: c1:20:b9:f7:91:3b:2e:fc:cc:41:57:5d:63:b7:f9: 36:e5:33:e3:c9:5f:b3:43:ae:83:ea:da:da:cc:c7: af:57:7c:e8:5d:e0:fc:88:11:69:c5:4c:9b:cf:ae: b3:9e:b5:05:e8:16:23:6e:f0:3f:cf:10:cb:ad:f0: 7c:1b:c9:4a:06:50:75:7e:03:64:6a:bb:bd:62:44: 65:b1:21:c9:cb:70:53:9c:61:da:dc:16:f9:dd:15: ce:f2:38:a0:76:a8:ec:25:76:ce:4d:ae:e6:11:da: 0d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:75:79:7D:A8:64:14:BA:D8:04:0F:40:2F:FB:C6:3D:B2:AF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl X509v3 Authority Key Identifier: keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer sbgp-ipAddrBlock: critical IPv4: 23.133.100.0/24 IPv6: 2602:f724::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:47:ba:82:91:11:a4:28:92:7d:1c:3e:c2:52:4e:dc:2b:06: a9:6b:a4:2e:ed:c9:7c:66:4f:2f:4b:fd:17:36:8a:19:97:e2: 08:d4:24:d6:2e:1d:8e:e1:c3:8f:54:89:f3:67:cd:f6:86:8d: 44:9e:7b:26:e7:9f:bf:da:73:02:28:74:77:de:71:10:88:08: 0d:21:1e:73:91:38:53:ba:9a:a0:03:54:2b:bb:75:69:be:82: 96:1c:f2:d6:0a:6b:a2:f1:fe:bb:dc:a6:ff:cd:e8:98:15:40: a8:59:3c:05:7b:7c:db:8a:8a:23:9f:5b:2d:ad:54:50:47:9a: 82:29:7c:09:00:a1:27:80:8d:ac:32:89:15:f0:50:e0:d0:82: 6a:b8:7e:bd:70:fa:72:14:f4:73:44:01:4c:29:38:35:c6:ee: c8:a2:74:18:b5:37:d2:92:03:9a:89:49:94:d3:4b:cf:82:f9: 19:cc:4b:9f:e8:e4:73:2f:6a:aa:04:1e:28:a3:ca:cc:64:0d: 8e:bc:b6:c9:cc:5b:bb:f3:d4:f7:bc:70:ad:31:81:e6:d7:41: eb:6c:38:c4:dd:ac:fb:c2:d7:0d:a6:78:06:74:c7:23:af:95: ee:91:68:b9:a6:b6:45:97:4a:50:49:97:c3:fd:b9:18:ca:cd: 0d:68:0b:7e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmVXxFH80hp6IrnLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5MDAyZDItOGZkNC00NDZmLTk4N2MtZTYzNDg1Y2Yx YTVhMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTAzNDBlMGUtZTViYS00OGZjLWJkNTctMzdiN2Q2NTVhYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/fGntdSTQA8MeRFgt1N9LIB1bYM5C8h+SHH KLD22Ts+kPR/ernsYT05v115T9ZXJAGnshysSdFGb4QUP8o73d4DfrYUUN6TqerQ L+fmHq8kwqm2s/0+FOOcXr+lky9BdybMJoGChKwY+kKaGjZw8XOnGlgJTPJEbqv5 5+qWH3Jztv8j1shk9u8qkDF3sWbQLnjc47nBILn3kTsu/MxBV11jt/k25TPjyV+z Q66D6trazMevV3zoXeD8iBFpxUybz66znrUF6BYjbvA/zxDLrfB8G8lKBlB1fgNk aru9YkRlsSHJy3BTnGHa3Bb53RXO8jigdqjsJXbOTa7mEdoNaQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOSXdXl9qGQUutgED0Av+8Y9sq80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTkw MDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0ODVjZjFhNWEvYzRmMTEzMWQtMzIwMy0z Yjg3LTkyODItNDhhOTA1MTU5OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjU5MDAyZDItOGZkNC00NDZmLTk4 N2MtZTYzNDg1Y2YxYTVhL2I1OTAwMmQyLThmZDQtNDQ2Zi05ODdjLWU2MzQ4NWNm MWE1YS5jcmwwHwYDVR0jBBgwFoAU/+LGVpY+PHvaE/LxAWasVBvyCrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTkwMDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0 ODVjZjFhNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VkMA4E AgACMAgDBgQmAvckADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCER7qCkRGkKJJ9HD7CUk7cKwapa6Qu7cl8 Zk8vS/0XNooZl+II1CTWLh2O4cOPVInzZ832ho1Ennsm55+/2nMCKHR33nEQiAgN IR5zkThTupqgA1Qru3VpvoKWHPLWCmui8f673Kb/zeiYFUCoWTwFe3zbioojn1st rVRQR5qCKXwJAKEngI2sMokV8FDg0IJquH69cPpyFPRzRAFMKTg1xu7IonQYtTfS kgOaiUmU00vPgvkZzEuf6ORzL2qqBB4oo8rMZA2OvLbJzFu789T3vHCtMYHm10Hr bDjE3az7wtcNpngGdMcjr5XukWi5prZFl0pQSZfD/bkYys0NaAt+ -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:20 2025 by rpki-client