$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa File: a4696e90-da7b-3ac8-b1cf-2351e43df747.roa (raw, json) Hash identifier: gH5qVSC6OluCswol0Ad7spnpau8jeBYGCt1+pS2JbHw= Subject key identifier: EF:11:C0:44:0E:76:CF:D3:31:9E:8D:0D:4D:29:5C:4C:ED:A8:54:1E Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584A30503702531865796F7E3D80 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 46432 IP address blocks: 23.139.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:37:02:53:18:65:79:6f:7e:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=43eee3d3-1f12-41d5-96bd-08550d81bd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:3e:d5:d1:ce:e9:62:c3:33:9a:2f:8b:f5: 2f:6e:84:6a:76:17:1f:b5:03:7b:ca:fa:17:aa:d2: 81:0d:bd:de:61:07:78:16:43:dc:e2:33:27:e0:0c: b8:e8:dd:df:ee:c6:7a:01:67:30:02:37:47:93:89: 8f:71:cb:99:01:39:7b:36:fb:b2:74:1c:84:a1:e5: 65:5b:f4:a1:a5:3e:09:1b:8c:73:75:e1:5b:84:59: d8:5c:40:25:ca:11:a1:04:77:5e:a7:7b:a4:25:39: 0f:6b:f9:f9:d0:24:47:1c:47:87:cd:e6:37:11:e9: b1:0f:1f:9c:90:40:35:7c:d9:cb:b2:6e:06:66:a2: 98:38:1d:79:15:c4:fc:41:65:70:90:b2:74:fb:90: af:8b:38:e4:a1:9e:0d:4c:e4:d7:e7:da:dc:53:4d: 72:96:b3:8d:88:59:f9:12:e9:42:0b:3c:af:5e:f0: 9e:0e:c4:1a:71:71:05:d3:42:ff:e1:e8:0a:8c:5e: 2c:3f:3b:aa:e5:38:98:57:e6:c4:84:13:78:5d:1c: 93:e1:2d:97:c3:dd:06:2c:0b:2f:3c:fa:83:86:ea: d9:d1:25:2c:96:1c:30:09:de:56:cc:03:dd:c2:23: b6:61:a0:11:ca:4c:3e:d9:ad:e3:9f:1c:29:98:eb: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:C0:44:0E:76:CF:D3:31:9E:8D:0D:4D:29:5C:4C:ED:A8:54:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 23.139.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:72:5b:05:8e:47:45:6f:1b:3b:3c:48:db:38:04:6c:ef:2b: ae:56:6c:86:36:b4:3e:20:fe:70:50:da:3d:b8:c9:06:e6:89: ca:21:78:5a:87:da:4a:b2:51:ba:e1:0a:ff:db:c0:e3:b9:99: 12:80:4b:87:b0:0e:68:3b:64:59:17:a4:e0:44:9d:51:6c:29: bb:29:cc:ac:d4:89:d3:0a:6f:11:66:08:1b:a8:eb:e4:f2:69: 59:42:50:48:a9:81:e3:8d:61:fc:a6:7d:05:d3:9b:e3:1b:da: c6:85:c4:38:e6:f8:ef:37:84:2a:f4:1d:69:13:56:84:19:e7: 83:5b:19:11:1e:e1:83:91:6a:f5:2d:28:8e:86:5d:8b:af:7d: 84:3c:e0:c9:1a:62:33:0d:2f:e6:72:94:0d:ab:ae:00:e2:12: 05:87:19:cd:bd:0c:82:8d:2f:32:4c:92:fd:c1:18:bb:44:33: 5c:cc:b6:fd:f6:6e:80:89:e7:de:07:9f:2c:c2:0c:6f:9d:bf: 61:22:a8:6f:ac:95:8c:1b:38:14:b7:b2:2d:ed:61:9c:ad:e9: c1:6a:28:4c:93:a9:a4:ee:d7:49:93:4c:9b:63:10:49:1f:3e: bb:14:a0:eb:1e:5b:c8:d9:f9:2a:bb:e6:7a:ae:a2:95:75:bb: 38:b2:49:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDcCUxhleW9+PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDNlZWUzZDMtMWYxMi00MWQ1LTk2YmQtMDg1NTBkODFiZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSk+1dHO6WLDM5ovi/UvboRqdhcftQN7yvoX qtKBDb3eYQd4FkPc4jMn4Ay46N3f7sZ6AWcwAjdHk4mPccuZATl7NvuydByEoeVl W/ShpT4JG4xzdeFbhFnYXEAlyhGhBHdep3ukJTkPa/n50CRHHEeHzeY3EemxDx+c kEA1fNnLsm4GZqKYOB15FcT8QWVwkLJ0+5CvizjkoZ4NTOTX59rcU01ylrONiFn5 EulCCzyvXvCeDsQacXEF00L/4egKjF4sPzuq5TiYV+bEhBN4XRyT4S2Xw90GLAsv PPqDhurZ0SUslhwwCd5WzAPdwiO2YaARykw+2a3jnxwpmOuUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8RwEQOds/TMZ6NDU0pXEztqFQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTQ2OTZlOTAtZGE3Yi0z YWM4LWIxY2YtMjM1MWU0M2RmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNyWwWOR0VvGzs8SNs4BGzvK65WbIY2tD4g/nBQ2j24yQbmicoheFqH 2kqyUbrhCv/bwOO5mRKAS4ewDmg7ZFkXpOBEnVFsKbspzKzUidMKbxFmCBuo6+Ty aVlCUEipgeONYfymfQXTm+Mb2saFxDjm+O83hCr0HWkTVoQZ54NbGREe4YORavUt KI6GXYuvfYQ84MkaYjMNL+ZylA2rrgDiEgWHGc29DIKNLzJMkv3BGLtEM1zMtv32 boCJ594HnyzCDG+dv2EiqG+slYwbOBS3si3tYZyt6cFqKEyTqaTu10mTTJtjEEkf PrsUoOseW8jZ+Sq75nquopV1uziySTE= -----END CERTIFICATE-----Generated at Mon Jun 16 16:50:40 2025 by rpki-client