$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa File: 854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json) Hash identifier: RZJ0pQG/HNL+Yu7q8FFcujZ8dPEZScFZ86lHBS5zVIY= Subject key identifier: 48:43:FC:39:3B:FD:47:D1:5C:71:85:C3:14:26:46:3A:FB:B7:F0:1C Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285849DF5A76A78B98BBCCC211DD80 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 26930 IP address blocks: 23.133.6.0/24 maxlen: 24 202.5.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:76:a7:8b:98:bb:cc:c2:11:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=18f80e1a-c6fe-4a68-9e3d-b3a3fc8a273d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:3a:26:7a:b0:35:e4:1d:b3:a0:a7:53:1f: 9f:44:3a:6e:12:17:d6:2b:09:6d:e0:16:b3:2b:ba: 7a:a9:b1:12:31:91:59:f3:f9:48:b8:16:e6:06:d3: 9a:d6:da:ac:2c:c7:a9:33:4a:90:59:83:51:f7:f2: b6:c4:23:55:0b:84:bc:cc:c1:6b:9b:4b:e8:50:74: aa:d5:0d:4c:76:fb:3e:73:10:6b:c6:af:b1:0f:e6: b8:c3:28:5c:c8:ba:dd:f7:f1:73:7d:1b:84:3d:b3: 52:e7:5e:4b:65:c4:c9:d3:d0:43:97:50:cc:a8:88: a5:f9:92:47:dd:6d:fc:6e:d0:be:a8:b6:84:62:e2: 9e:d4:e0:d0:a6:02:ed:80:37:a0:5f:8b:40:94:12: 78:4f:91:6e:d8:34:5b:2b:19:7d:ae:55:e3:81:25: a1:eb:c7:43:31:54:f4:72:21:d8:5a:3a:23:66:70: a4:52:99:01:36:8c:d9:5a:f5:e9:d6:f1:e7:87:be: 89:0b:bb:3c:b3:2a:39:7a:41:98:02:95:89:7b:52: 01:98:cd:bc:ab:c9:8e:45:6c:b4:1e:b6:91:ac:30: 4d:d2:28:2a:5a:8d:fb:2e:bd:fe:0d:b5:e4:0a:ae: 7b:a5:12:2b:20:30:c7:b1:82:04:fb:b8:d3:12:41: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:43:FC:39:3B:FD:47:D1:5C:71:85:C3:14:26:46:3A:FB:B7:F0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.6.0/24 202.5.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d6:54:27:9d:57:65:f0:f0:3a:c7:6a:69:86:40:c5:ad:05: 64:6f:54:71:f3:57:cd:d8:e8:f8:1d:a7:ba:e4:91:16:db:29: cf:1d:a1:dc:00:79:75:9c:f6:91:77:b0:0d:5b:9a:2f:0f:50: b5:1b:16:af:78:4c:0b:be:d6:4e:ad:2d:f9:f4:e8:f0:eb:97: f8:e3:6b:17:47:ef:33:de:47:e9:ad:51:23:6e:d8:a6:40:ea: 4e:ec:ab:1c:37:0d:18:99:f6:b0:2f:6d:c4:19:f8:1a:e6:b7: 0a:be:73:45:d2:4e:00:0a:38:f4:39:0d:61:14:0b:ce:89:b9: d6:f1:26:97:b6:eb:cf:63:09:f5:c6:bb:66:ce:55:04:c5:12: 54:73:bd:50:f4:c3:17:0b:5c:10:1a:c7:7a:7b:de:d7:a6:0c: 5d:68:15:74:5d:3b:0c:96:33:83:e0:5f:60:48:dc:80:73:52: 49:33:e4:ff:8e:05:bd:e0:87:e0:d1:02:04:cb:8d:90:73:64: 0f:42:ae:92:ce:97:77:59:43:fc:4a:2c:aa:00:5c:b0:a9:40: 8f:35:73:25:fa:3f:53:43:54:b1:57:6c:64:83:04:20:d3:3f: ba:4e:24:34:ca:49:6f:41:98:9c:ce:e8:7c:eb:5f:33:38:70: 93:8b:ac:ed -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnfWnani5i7zMIR3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MThmODBlMWEtYzZmZS00YTY4LTllM2QtYjNhM2ZjOGEyNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYM6JnqwNeQds6CnUx+fRDpuEhfWKwlt4Baz K7p6qbESMZFZ8/lIuBbmBtOa1tqsLMepM0qQWYNR9/K2xCNVC4S8zMFrm0voUHSq 1Q1Mdvs+cxBrxq+xD+a4wyhcyLrd9/FzfRuEPbNS515LZcTJ09BDl1DMqIil+ZJH 3W38btC+qLaEYuKe1ODQpgLtgDegX4tAlBJ4T5Fu2DRbKxl9rlXjgSWh68dDMVT0 ciHYWjojZnCkUpkBNozZWvXp1vHnh76JC7s8syo5ekGYApWJe1IBmM28q8mORWy0 HraRrDBN0igqWo37Lr3+DbXkCq57pRIrIDDHsYIE+7jTEkHqowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEhD/Dk7/UfRXHGFwxQmRjr7t/AcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODU0NzA5ZjEtYzU1Yy0z ZjVmLTk0NjktM2JlYTY3MThlNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UGAwQA ygUaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAArWVCedV2Xw8DrHammGQMWtBWRvVHHzV83Y6Pgdp7rkkRbb Kc8dodwAeXWc9pF3sA1bmi8PULUbFq94TAu+1k6tLfn06PDrl/jjaxdH7zPeR+mt USNu2KZA6k7sqxw3DRiZ9rAvbcQZ+Brmtwq+c0XSTgAKOPQ5DWEUC86JudbxJpe2 689jCfXGu2bOVQTFElRzvVD0wxcLXBAax3p73temDF1oFXRdOwyWM4PgX2BI3IBz Ukkz5P+OBb3gh+DRAgTLjZBzZA9CrpLOl3dZQ/xKLKoAXLCpQI81cyX6P1NDVLFX bGSDBCDTP7pOJDTKSW9BmJzO6HzrXzM4cJOLrO0= -----END CERTIFICATE-----Generated at Mon Jun 16 11:58:51 2025 by rpki-client