$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa File: d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa (raw, json) Hash identifier: 0RbotTVBM+26w+24F92LJYkRdDT6nZ5KUXEnJYC730Q= Subject key identifier: 45:78:3E:0F:71:BD:88:54:7E:FE:3D:F7:60:28:A0:27:17:6B:6E:85 Certificate issuer: /CN=dec54853-8708-4db6-8c16-61e598dd115f Certificate serial: 010D0C9F43285849E2253F1B1B6B0D256A68D980 Authority key identifier: AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399788 IP address blocks: 23.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3f:1b:1b:6b:0d:25:6a:68:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec54853-8708-4db6-8c16-61e598dd115f Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=2e554b2a-7c71-413e-b172-2edcd6ee91ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:2b:ed:03:61:38:90:01:a9:f3:41:c4:86: 34:60:66:a1:48:0f:44:dd:07:5f:63:85:73:02:f2: 57:b8:2e:3f:32:7b:d6:c6:a6:83:2a:4c:16:69:dc: 52:92:2d:e2:21:90:e3:86:3f:61:77:eb:90:e1:45: cf:91:d8:b4:b1:9b:1a:36:ad:b5:62:c1:2f:7e:90: e4:ac:53:4a:6d:11:c9:07:41:32:f0:3f:cc:29:6d: 49:0f:ff:a6:3f:5c:32:e0:ab:1e:fa:2a:23:df:44: f3:d0:ae:54:a9:30:55:eb:ed:ad:11:da:ab:4a:30: 88:57:27:b6:d4:56:9d:c5:60:8b:a3:99:c2:0c:40: e0:b1:48:35:af:76:8b:dd:1f:fc:e4:61:b2:c9:b7: 73:f7:80:2c:87:01:41:13:7d:5e:b4:5a:c7:4b:e0: 0c:71:e8:07:58:75:4a:12:e6:6b:cc:64:85:1d:4d: 26:3b:df:9f:08:10:a6:e1:0d:ab:f9:d1:94:a2:34: f0:4c:6f:40:07:a2:ce:6e:dc:dd:01:09:1b:5b:33: ad:65:97:99:bd:09:87:58:8b:dd:3a:bd:91:82:c7: 67:91:d2:86:72:bd:10:c4:c9:2e:fe:fb:e3:f7:7b: 63:d0:5a:a4:8a:dd:63:a0:a4:d4:60:ac:f6:ed:ec: fa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:78:3E:0F:71:BD:88:54:7E:FE:3D:F7:60:28:A0:27:17:6B:6E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/d5b43b70-426f-3d8a-8326-d5dbb771bde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f/dec54853-8708-4db6-8c16-61e598dd115f.crl X509v3 Authority Key Identifier: keyid:AF:E2:B2:1C:02:76:14:90:C2:EB:AB:19:F8:C2:59:BC:52:73:A5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dec54853-8708-4db6-8c16-61e598dd115f.cer sbgp-ipAddrBlock: critical IPv4: 23.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:09:07:51:6c:83:29:68:fc:94:b5:b3:bf:e3:d1:15:47:11: eb:ad:52:5f:bf:e0:0a:f2:7c:1c:1f:8f:21:de:ea:87:4e:67: d8:6c:9a:61:62:88:e8:4b:6a:a4:59:c8:77:0f:ac:d0:81:48: 7d:99:6d:8b:44:69:9c:2e:37:ed:61:3f:7f:1e:aa:a9:50:51: fd:f6:b7:29:21:d9:39:23:05:a4:9f:97:ff:17:3c:6c:ad:d9: 88:c9:b0:e4:0e:89:88:f3:1e:58:5e:93:e9:bd:f4:6c:6a:fb: 57:08:d4:a4:1a:27:e1:16:27:45:0c:33:4f:1e:f5:59:51:50: 86:41:2c:61:70:c8:fb:37:6c:98:e5:ac:a8:5f:c9:be:a2:78: 9b:50:eb:7b:01:dd:e4:0b:d7:1e:00:d0:a1:32:cf:34:71:b4: 04:06:83:1c:e0:e4:fb:b1:e4:ba:56:83:6e:9f:3d:dc:9a:38: 7f:9e:6e:a2:ff:bf:45:95:4b:a6:b8:d6:f2:5a:e7:87:51:73: 80:7d:1c:2e:12:40:20:77:d2:2b:86:9e:92:a5:d7:23:7b:a7: da:51:c5:9b:38:71:12:c1:3c:03:4c:7f:47:bc:94:87:c5:73: 98:9e:7c:26:e9:e3:7a:e1:11:50:1d:d0:fd:fb:61:89:fb:1c: 6a:01:61:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJT8bG2sNJWpo2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjNTQ4NTMtODcwOC00ZGI2LThjMTYtNjFlNTk4ZGQx MTVmMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MmU1NTRiMmEtN2M3MS00MTNlLWIxNzItMmVkY2Q2ZWU5MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgYr7QNhOJABqfNBxIY0YGahSA9E3QdfY4Vz AvJXuC4/MnvWxqaDKkwWadxSki3iIZDjhj9hd+uQ4UXPkdi0sZsaNq21YsEvfpDk rFNKbRHJB0Ey8D/MKW1JD/+mP1wy4Kse+ioj30Tz0K5UqTBV6+2tEdqrSjCIVye2 1FadxWCLo5nCDEDgsUg1r3aL3R/85GGyybdz94AshwFBE31etFrHS+AMcegHWHVK EuZrzGSFHU0mO9+fCBCm4Q2r+dGUojTwTG9AB6LObtzdAQkbWzOtZZeZvQmHWIvd Or2RgsdnkdKGcr0QxMku/vvj93tj0Fqkit1joKTUYKz27ez6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV4Pg9xvYhUfv4992AooCcXa26FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1 NDg1My04NzA4LTRkYjYtOGMxNi02MWU1OThkZDExNWYvZDViNDNiNzAtNDI2Zi0z ZDhhLTgzMjYtZDVkYmI3NzFiZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGVjNTQ4NTMtODcwOC00ZGI2LThj MTYtNjFlNTk4ZGQxMTVmL2RlYzU0ODUzLTg3MDgtNGRiNi04YzE2LTYxZTU5OGRk MTE1Zi5jcmwwHwYDVR0jBBgwFoAUr+KyHAJ2FJDC66sZ+MJZvFJzpZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZWM1NDg1My04NzA4LTRkYjYtOGMxNi02MWU1 OThkZDExNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8JB1Fsgylo/JS1s7/j0RVHEeutUl+/4AryfBwfjyHe6odOZ9hsmmFi iOhLaqRZyHcPrNCBSH2ZbYtEaZwuN+1hP38eqqlQUf32tykh2TkjBaSfl/8XPGyt 2YjJsOQOiYjzHlhek+m99Gxq+1cI1KQaJ+EWJ0UMM08e9VlRUIZBLGFwyPs3bJjl rKhfyb6ieJtQ63sB3eQL1x4A0KEyzzRxtAQGgxzg5Pux5LpWg26fPdyaOH+ebqL/ v0WVS6a41vJa54dRc4B9HC4SQCB30iuGnpKl1yN7p9pRxZs4cRLBPANMf0e8lIfF c5iefCbp43rhEVAd0P37YYn7HGoBYb8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:37:42 2025 by rpki-client