$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa File: 597f4a4b-40a9-3c25-9e38-fe485186c510.roa (raw, json) Hash identifier: JjgjeRfaNPg85f/R1El7/k4fbsankq/8qfCHFeqg55k= Subject key identifier: 27:31:E0:13:3C:C8:09:B2:3D:06:C3:4D:A1:92:BE:04:E1:3E:E1:5A Certificate issuer: /CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Certificate serial: 010D0C9F43285849E7BA86FC6149AA65B3E5EE40 Authority key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 400115 IP address blocks: 23.130.152.0/23 maxlen: 23 23.130.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:86:fc:61:49:aa:65:b3:e5:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=633ebacf-773a-484a-bdbd-97997267cdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:57:3a:e6:e8:36:47:5a:ef:88:a9:20:41: a6:2b:0a:b6:db:91:b7:29:e7:06:b3:77:cf:d4:0c: b2:21:67:04:41:86:a6:8e:2c:62:d4:67:b9:e8:ea: 89:39:96:df:b1:60:5c:cc:f3:dc:aa:7b:eb:d0:44: 61:41:53:83:dc:bf:1c:7c:c9:3f:e4:5e:a8:6a:31: 31:9f:e1:19:d2:4a:5d:05:fa:7d:68:52:9f:a1:f3: ed:f3:36:67:51:94:c4:41:8c:ce:c8:b4:2e:71:7a: f6:af:52:8d:0b:71:91:cd:6c:51:5b:60:2e:1a:a7: ff:66:90:b2:7a:7d:ef:ed:be:bc:ee:26:83:1f:e3: d2:be:54:ad:cb:58:14:3d:ce:b0:c3:48:93:67:a9: 93:84:cb:6f:71:80:06:26:bd:b8:32:07:e2:6f:79: 5e:13:7c:3d:70:e9:0f:ee:3a:f2:69:1a:9c:86:bd: 37:5e:82:a6:8a:46:77:bb:7c:1d:a4:bb:9a:5f:26: 2d:e2:c4:41:0a:51:c0:07:f4:3b:6d:58:24:fe:e5: 27:fc:f4:7f:aa:6c:bb:8d:c2:16:26:51:f3:88:1a: c4:14:cb:8a:b0:78:a1:72:76:fd:6c:00:ab:15:d9: b9:98:ed:3e:2e:48:ec:38:7e:13:92:08:b7:84:1c: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:E0:13:3C:C8:09:B2:3D:06:C3:4D:A1:92:BE:04:E1:3E:E1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl X509v3 Authority Key Identifier: keyid:A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer sbgp-ipAddrBlock: critical IPv4: 23.130.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:32:2a:a5:a8:61:63:59:9e:da:db:98:81:b7:f1:37:65:9d: b6:a9:35:8e:84:cb:60:aa:8e:5b:a5:dc:a2:ba:91:aa:4c:6e: 5f:6d:ba:56:05:17:34:a4:0a:7b:d4:a9:8c:b2:2e:86:e7:8f: 36:bd:a5:5c:98:5b:e3:97:60:7c:5d:e8:fe:29:e2:fc:e5:c5: 0e:7c:1f:83:b6:76:ee:6f:56:bf:e7:bd:00:1c:4b:4e:0f:bd: 00:ef:a8:c8:df:a6:12:58:28:b0:09:1f:8d:b3:48:38:c5:19: 9e:47:30:1b:fd:75:6d:1c:f6:09:c7:93:46:71:ac:c7:39:b4: 57:71:b1:7c:fd:8e:8a:1c:72:66:9f:b8:cf:11:4c:8b:58:5b: 1b:3a:16:d6:3c:b9:70:aa:73:6c:3b:b4:fb:dc:d2:30:2c:c0: 3c:cc:a0:55:4f:02:49:15:9e:68:fb:26:b3:d7:9c:a4:18:8e: 9b:f5:78:6b:19:5a:74:d3:1c:23:4e:2b:1f:6f:68:cd:d8:47: bf:5c:8a:ed:f9:61:13:61:aa:7d:19:a1:0e:7c:0a:47:af:ac: b7:17:bb:7a:70:e5:e2:33:e9:04:72:f4:67:91:fb:3d:65:2a: 0f:54:e5:71:ea:3c:e3:aa:15:fb:10:7f:0d:6c:cb:57:bc:06: 30:45:1d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuob8YUmqZbPl7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0NTk2ZjUtMWNmNy00ZDkyLTljNjgtZWNmYjI3MjA1 ZDY4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NjMzZWJhY2YtNzczYS00ODRhLWJkYmQtOTc5OTcyNjdjZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oZXOuboNkda74ipIEGmKwq225G3KecGs3fP 1AyyIWcEQYamjixi1Ge56OqJOZbfsWBczPPcqnvr0ERhQVOD3L8cfMk/5F6oajEx n+EZ0kpdBfp9aFKfofPt8zZnUZTEQYzOyLQucXr2r1KNC3GRzWxRW2AuGqf/ZpCy en3v7b687iaDH+PSvlSty1gUPc6ww0iTZ6mThMtvcYAGJr24Mgfib3leE3w9cOkP 7jryaRqchr03XoKmikZ3u3wdpLuaXyYt4sRBClHAB/Q7bVgk/uUn/PR/qmy7jcIW JlHziBrEFMuKsHihcnb9bACrFdm5mO0+LkjsOH4Tkgi3hBzx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcx4BM8yAmyPQbDTaGSvgThPuFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1 OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2ZiMjcyMDVkNjgvNTk3ZjRhNGItNDBhOS0z YzI1LTllMzgtZmU0ODUxODZjNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzI0NTk2ZjUtMWNmNy00ZDkyLTlj NjgtZWNmYjI3MjA1ZDY4LzMyNDU5NmY1LTFjZjctNGQ5Mi05YzY4LWVjZmIyNzIw NWQ2OC5jcmwwHwYDVR0jBBgwFoAUp/JaOlC4h4UXkcCaMyIpOOzlI5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2Zi MjcyMDVkNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4KYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0yKqWoYWNZntrbmIG38TdlnbapNY6Ey2Cqjlul3KK6kapMbl9tulYF FzSkCnvUqYyyLobnjza9pVyYW+OXYHxd6P4p4vzlxQ58H4O2du5vVr/nvQAcS04P vQDvqMjfphJYKLAJH42zSDjFGZ5HMBv9dW0c9gnHk0ZxrMc5tFdxsXz9jooccmaf uM8RTItYWxs6FtY8uXCqc2w7tPvc0jAswDzMoFVPAkkVnmj7JrPXnKQYjpv1eGsZ WnTTHCNOKx9vaM3YR79ciu35YRNhqn0ZoQ58CkevrLcXu3pw5eIz6QRy9GeR+z1l Kg9U5XHqPOOqFfsQfw1sy1e8BjBFHSc= -----END CERTIFICATE-----Generated at Mon Jun 16 10:20:46 2025 by rpki-client