$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa File: 294a538e-f862-3b25-966e-78f7297f94e8.roa (raw, json) Hash identifier: wHQMfikLNKlqd3Z3QnZATGLyQtcV3wpzK0kNyE4/aoM= Subject key identifier: 64:8F:D1:BA:90:35:97:C0:8C:A7:24:5F:D2:72:9E:7F:53:AD:66:18 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849EBEA4DC9322CCA5179991C80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 32696 IP address blocks: 63.212.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4d:c9:32:2c:ca:51:79:99:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=70a7b011-e426-4573-8026-81f7f70080b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:b0:66:e8:b2:d0:19:fd:99:92:44:04:21: 39:39:ed:4a:43:8e:f7:f4:e8:f6:4f:64:7a:90:5c: 23:48:03:3a:25:dc:70:8f:d3:94:9e:44:91:2c:ff: fb:c9:c7:38:63:35:13:bd:d0:b5:64:95:3d:24:8d: 6b:35:47:f0:e7:71:83:89:85:1e:98:8b:05:d4:09: 5c:6b:cc:7a:a7:72:62:bd:e9:f8:8b:d0:7c:7d:ec: 55:91:22:0f:8a:25:05:39:7a:07:fa:35:27:56:b9: e0:54:37:45:41:9d:c8:bd:fe:a1:e6:4f:73:ac:a0: b7:06:68:44:f6:f6:89:94:b0:1b:39:1b:cd:4f:35: 33:c3:35:04:26:34:ea:ae:a9:70:87:3b:9f:86:33: 60:5b:49:66:25:34:0d:a4:fe:47:2f:2e:ba:c7:9b: 32:1c:e0:33:c9:48:42:fd:fa:f8:75:55:c3:25:ce: 68:41:ea:48:10:a8:db:f0:12:ba:3d:04:14:30:09: 65:5f:30:ae:2b:5c:b1:6f:a3:73:6a:2e:08:1c:1e: ee:05:5e:f1:dd:aa:c1:10:4e:5d:6e:c2:b9:2b:c6: 64:c8:55:bd:bb:9c:f3:19:a7:9a:f1:8d:71:ec:b0: a2:a8:95:73:3b:7d:16:a9:ce:fc:fa:5a:21:54:ff: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:D1:BA:90:35:97:C0:8C:A7:24:5F:D2:72:9E:7F:53:AD:66:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/294a538e-f862-3b25-966e-78f7297f94e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 63.212.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4a:66:e1:d0:ba:96:0b:34:af:bd:8e:40:cb:ba:82:6c:bb: f8:73:1e:d4:1e:d5:7f:51:3b:6c:17:54:b5:85:7c:ad:c3:f1: 85:60:67:b3:a8:26:5d:c4:fd:f7:fb:7b:02:4b:0a:48:39:08: 29:d8:fc:30:35:01:6a:0a:50:c9:d9:44:9e:5a:c3:23:28:dd: 1e:c4:a3:5b:4b:b5:db:61:77:61:bd:8a:f1:19:ac:34:9e:11: b0:d2:12:88:be:8e:78:be:98:c2:f9:8a:1f:02:10:32:30:ab: 58:dd:3e:97:91:cb:4c:20:34:89:3f:c6:a3:c9:ef:e1:40:6a: 0c:cf:94:38:27:11:40:34:44:eb:87:ec:34:f3:16:8e:8f:af: 59:95:eb:21:7d:14:f9:6c:76:ce:b6:89:21:94:06:a8:7d:10: 8e:18:f6:92:e4:72:ad:d9:a6:b6:84:99:e5:ee:70:7b:c7:25: 24:11:2b:f1:06:48:e7:36:7d:6c:3a:d7:3b:ce:b6:5f:21:66: 75:20:08:a8:0f:6c:26:8b:f2:b7:df:86:96:5c:56:38:60:72: 6f:ea:fc:3e:28:32:72:e4:57:3c:6a:85:74:ad:71:5b:dd:f7: 0b:dc:15:16:79:12:16:4b:f6:39:09:c5:d5:b9:3c:f9:7f:f2: 0c:0e:a7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k3JMizKUXmZHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NzBhN2IwMTEtZTQyNi00NTczLTgwMjYtODFmN2Y3MDA4MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6SwZuiy0Bn9mZJEBCE5Oe1KQ4739Oj2T2R6 kFwjSAM6Jdxwj9OUnkSRLP/7ycc4YzUTvdC1ZJU9JI1rNUfw53GDiYUemIsF1Alc a8x6p3Jiven4i9B8fexVkSIPiiUFOXoH+jUnVrngVDdFQZ3Ivf6h5k9zrKC3BmhE 9vaJlLAbORvNTzUzwzUEJjTqrqlwhzufhjNgW0lmJTQNpP5HLy66x5syHOAzyUhC /fr4dVXDJc5oQepIEKjb8BK6PQQUMAllXzCuK1yxb6Nzai4IHB7uBV7x3arBEE5d bsK5K8ZkyFW9u5zzGaea8Y1x7LCiqJVzO30Wqc78+lohVP+hlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSP0bqQNZfAjKckX9Jynn9TrWYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjk0YTUzOGUtZjg2Mi0z YjI1LTk2NmUtNzhmNzI5N2Y5NGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9SHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRKZuHQupYLNK+9jkDLuoJsu/hzHtQe1X9RO2wXVLWFfK3D8YVgZ7Oo Jl3E/ff7ewJLCkg5CCnY/DA1AWoKUMnZRJ5awyMo3R7Eo1tLtdthd2G9ivEZrDSe EbDSEoi+jni+mML5ih8CEDIwq1jdPpeRy0wgNIk/xqPJ7+FAagzPlDgnEUA0ROuH 7DTzFo6Pr1mV6yF9FPlsds62iSGUBqh9EI4Y9pLkcq3ZpraEmeXucHvHJSQRK/EG SOc2fWw61zvOtl8hZnUgCKgPbCaL8rffhpZcVjhgcm/q/D4oMnLkVzxqhXStcVvd 9wvcFRZ5EhZL9jkJxdW5PPl/8gwOp98= -----END CERTIFICATE-----Generated at Mon Jun 16 05:40:44 2025 by rpki-client