$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa File: f83748be-c604-38fd-9db7-acbbef995831.roa (raw, json) Hash identifier: Sj7xJL/T8sMT+34Zu9E6gHHVgXaDU7E0U1txnCnGqEw= Subject key identifier: 97:F1:E3:AD:D1:F7:C6:5F:CF:88:36:93:84:4B:0C:6D:D0:8F:C5:8D Certificate issuer: /CN=caec0bfa-1434-4606-b19a-4a911d16534d Certificate serial: 010D0C9F43285849EE67EC8B352C5D2F7A425DD5 Authority key identifier: 91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 401566 IP address blocks: 23.131.236.0/24 maxlen: 24 2602:f745::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:67:ec:8b:35:2c:5d:2f:7a:42:5d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caec0bfa-1434-4606-b19a-4a911d16534d Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=e0cc9dfe-682f-4fe4-bc58-9a24011e6989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:fe:27:cd:ff:4b:95:9e:18:19:11:80:ea: bf:50:61:48:5a:1b:fc:f7:df:1c:70:b9:39:7b:e5: ff:a3:6b:88:3b:d6:81:cb:32:79:5c:58:76:c7:f3: 95:07:f3:f8:5e:61:3e:8b:13:aa:64:ac:fb:4d:ec: b1:11:74:3a:40:39:bc:ba:2d:a2:f4:1f:b4:1d:36: 8c:5f:94:7c:02:27:40:1d:42:be:b1:2c:1c:22:d9: cd:33:5b:a3:21:00:93:53:9f:95:74:88:da:c9:28: 3d:39:2f:0d:f0:83:a4:a8:63:49:30:07:b4:fc:b8: da:e8:53:8c:ed:0d:2d:ba:ca:43:9b:e3:ae:26:6c: f9:2b:79:0c:d5:7f:01:ac:49:25:86:1f:4a:76:65: 1d:7c:54:43:0f:80:2e:72:e5:a5:23:f9:13:64:6f: 27:2f:e8:14:17:1b:d2:27:10:e9:a1:63:e3:eb:6e: 25:e1:31:cd:5b:ce:62:98:db:47:e6:fb:88:f5:cb: c4:79:94:ea:b7:57:d3:ad:26:0e:61:95:a8:28:1a: 15:d6:30:09:81:e7:59:15:54:ba:8e:de:be:ec:cd: 54:ee:d2:7a:2c:56:b3:23:45:ab:32:62:5c:ab:0b: a9:a8:33:b2:fd:af:5b:23:70:04:01:9e:05:9d:d1: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F1:E3:AD:D1:F7:C6:5F:CF:88:36:93:84:4B:0C:6D:D0:8F:C5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl X509v3 Authority Key Identifier: keyid:91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.236.0/24 IPv6: 2602:f745::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6c:65:6e:a4:f5:4a:8c:56:9f:79:e2:4f:b9:df:a9:76:25: bc:ef:16:08:ee:cd:0c:fe:37:e7:70:5c:15:38:66:fe:48:e5: fd:4c:8d:30:58:d7:ec:0f:f4:00:d0:61:dd:d0:c9:53:02:85: f5:a7:b4:21:4e:b0:7d:a8:af:ec:f3:62:36:95:3e:c9:3f:a7: 26:90:29:05:16:fa:50:57:ec:1e:8b:62:0c:29:8c:65:0f:6f: 07:f5:13:6a:07:76:13:69:73:dd:b2:38:4b:0c:84:ac:70:52: de:0d:4f:bf:33:db:f4:f0:1f:a5:4a:41:81:1a:76:af:df:d0: 80:52:33:b2:37:ad:21:8a:5c:82:d5:d4:b5:d7:6d:7f:a2:d2: 6e:d6:e8:d5:8b:5b:76:d8:bb:73:2e:3c:b2:87:0e:cf:dc:db: 52:d2:1d:60:a2:a9:39:f7:ba:95:f1:93:f1:83:5c:87:8e:62: 2a:27:55:3c:5d:75:1b:4a:1c:90:f3:41:11:0a:70:1f:3f:ca: 9f:25:0f:fe:65:07:13:30:a1:67:1d:3d:9b:70:e7:90:76:58: e3:83:6c:53:f7:01:4b:b1:e9:4b:84:c5:26:bf:76:53:db:50: 87:98:02:ec:65:bd:cd:18:9f:22:2a:62:47:fb:2b:f6:b7:b9: b2:84:f2:78 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnuZ+yLNSxdL3pCXdUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FlYzBiZmEtMTQzNC00NjA2LWIxOWEtNGE5MTFkMTY1 MzRkMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk ZTBjYzlkZmUtNjgyZi00ZmU0LWJjNTgtOWEyNDAxMWU2OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iP+J83/S5WeGBkRgOq/UGFIWhv8998ccLk5 e+X/o2uIO9aByzJ5XFh2x/OVB/P4XmE+ixOqZKz7TeyxEXQ6QDm8ui2i9B+0HTaM X5R8AidAHUK+sSwcItnNM1ujIQCTU5+VdIjaySg9OS8N8IOkqGNJMAe0/Lja6FOM 7Q0tuspDm+OuJmz5K3kM1X8BrEklhh9KdmUdfFRDD4AucuWlI/kTZG8nL+gUFxvS JxDpoWPj624l4THNW85imNtH5vuI9cvEeZTqt1fTrSYOYZWoKBoV1jAJgedZFVS6 jt6+7M1U7tJ6LFazI0WrMmJcqwupqDOy/a9bI3AEAZ4FndEQQQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJfx463R98Zfz4g2k4RLDG3Qj8WNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYWVj MGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQxNjUzNGQvZjgzNzQ4YmUtYzYwNC0z OGZkLTlkYjctYWNiYmVmOTk1ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2FlYzBiZmEtMTQzNC00NjA2LWIx OWEtNGE5MTFkMTY1MzRkL2NhZWMwYmZhLTE0MzQtNDYwNi1iMTlhLTRhOTExZDE2 NTM0ZC5jcmwwHwYDVR0jBBgwFoAUkYnvpwqd6EFrUXI50DOBr0BEl74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkx MWQxNjUzNGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PsMA4E AgACMAgDBgQmAvdFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqbGVupPVKjFafeeJPud+pdiW87xYI7s0M /jfncFwVOGb+SOX9TI0wWNfsD/QA0GHd0MlTAoX1p7QhTrB9qK/s82I2lT7JP6cm kCkFFvpQV+wei2IMKYxlD28H9RNqB3YTaXPdsjhLDISscFLeDU+/M9v08B+lSkGB Gnav39CAUjOyN60hilyC1dS1121/otJu1ujVi1t22LtzLjyyhw7P3NtS0h1goqk5 97qV8ZPxg1yHjmIqJ1U8XXUbShyQ80ERCnAfP8qfJQ/+ZQcTMKFnHT2bcOeQdljj g2xT9wFLselLhMUmv3ZT21CHmALsZb3NGJ8iKmJH+yv2t7myhPJ4 -----END CERTIFICATE-----Generated at Sun Jun 15 23:52:52 2025 by rpki-client