$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa File: 3d653275-34fd-30d1-9fbd-3fc5704add6a.roa (raw, json) Hash identifier: hP0+CARbhE6m0aJm00YZz9IGexn0073woHtqGDrwAhE= Subject key identifier: 94:BB:08:4F:2D:0E:CB:F2:B5:F3:61:7E:59:24:0F:B2:B1:E2:56:41 Certificate issuer: /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Certificate serial: 010D0C9F43285849F17FD251E5BE8734F1F91100 Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 400930 IP address blocks: 23.175.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d2:51:e5:be:87:34:f1:f9:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=e891df60-2107-4ffb-9937-deec27f48f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:13:c7:41:f8:26:d2:80:a0:84:f0:14:41: 93:2d:1e:0a:b8:43:5e:18:5e:4f:35:01:d9:eb:bd: 15:43:59:ca:b6:dc:a2:a8:3a:f8:c2:bf:79:fd:e8: 71:67:99:08:7a:98:76:6e:95:dc:eb:5d:7d:9b:00: 62:ff:ea:7f:99:a3:80:d0:6f:49:e3:2f:f8:31:65: 67:38:23:63:bd:dc:68:13:7b:59:5c:4e:93:76:ed: 77:4e:ee:ca:2d:a5:58:28:93:3d:85:af:f9:91:20: 69:cf:34:8e:f4:b9:39:fa:dc:25:64:cf:f2:0d:00: 60:a9:a3:74:84:88:26:c8:94:8d:5b:e5:47:5c:39: 8c:23:b3:a5:65:08:a3:16:79:68:85:a0:29:35:17: 03:2b:42:80:5b:bd:42:dc:7a:f4:a9:51:9b:65:c2: ea:8a:24:be:be:39:e9:ad:ce:fd:d6:18:7f:6e:26: 64:d8:8d:e9:11:18:a0:c6:d9:bf:47:04:27:49:ef: 98:c6:ce:9f:be:96:1b:5d:98:1c:45:d5:fa:14:ad: ce:a7:31:a8:af:7a:fa:ed:83:b7:f9:82:21:39:e7: 65:9a:f2:b4:17:cb:ed:ee:cf:b9:48:e1:18:0a:94: 21:e7:a5:7b:3f:c9:e6:21:60:a4:05:5f:6b:06:69: 62:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BB:08:4F:2D:0E:CB:F2:B5:F3:61:7E:59:24:0F:B2:B1:E2:56:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl X509v3 Authority Key Identifier: keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer sbgp-ipAddrBlock: critical IPv4: 23.175.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1b:37:3a:6e:33:19:00:2a:1a:db:1c:d7:c6:47:96:c0:42: 63:fe:8c:af:df:ee:0f:66:7e:0a:5b:f3:41:c6:c3:84:a6:22: e8:cc:6b:e4:7e:ec:71:be:92:3b:53:5c:5f:be:14:5b:53:6a: e0:39:73:d6:fd:72:bd:28:d6:f7:ac:b5:18:bf:13:10:c2:92: 65:a5:a0:ad:b3:76:58:72:a5:97:61:01:21:c4:8c:f0:c2:65: f7:06:41:57:c8:dc:5b:df:cf:de:5b:e0:9d:9e:f3:cb:dd:4b: d6:9b:5e:2c:3b:9d:37:bb:1b:e2:fa:e6:95:57:a1:7c:a9:50: 82:93:97:47:80:99:62:e5:e3:27:b1:8a:9d:d3:31:53:c7:94: b1:f3:09:48:6f:ae:a4:42:8f:0c:e6:05:b0:44:ca:b5:c3:c3: 8e:c6:d5:92:f8:ff:ce:8e:2e:84:ae:8c:13:1b:1f:a6:28:15: ae:50:35:fe:82:dc:56:73:7c:59:59:4a:dd:72:dd:e0:eb:f2: 7e:2a:fa:6f:1f:ec:f2:85:01:68:aa:62:6e:fc:b6:f4:59:15: 25:e2:e9:18:cb:4f:79:b6:bc:1d:0e:34:51:20:89:9a:a6:0e: 3b:94:5e:27:78:d3:4d:b3:66:d8:84:e6:ca:de:01:a6:62:c0: 11:e4:4d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9JR5b6HNPH5EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIyNGEwZjMtZWQwZS00ZjUyLWE3ZDQtNWYyYjUwNDhi ZWY4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTg5MWRmNjAtMjEwNy00ZmZiLTk5MzctZGVlYzI3ZjQ4Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPQTx0H4JtKAoITwFEGTLR4KuENeGF5PNQHZ 670VQ1nKttyiqDr4wr95/ehxZ5kIeph2bpXc6119mwBi/+p/maOA0G9J4y/4MWVn OCNjvdxoE3tZXE6Tdu13Tu7KLaVYKJM9ha/5kSBpzzSO9Lk5+twlZM/yDQBgqaN0 hIgmyJSNW+VHXDmMI7OlZQijFnlohaApNRcDK0KAW71C3Hr0qVGbZcLqiiS+vjnp rc791hh/biZk2I3pERigxtm/RwQnSe+Yxs6fvpYbXZgcRdX6FK3OpzGor3r67YO3 +YIhOedlmvK0F8vt7s+5SOEYCpQh56V7P8nmIWCkBV9rBmli7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS7CE8tDsvytfNhflkkD7Kx4lZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMjI0 YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJiNTA0OGJlZjgvM2Q2NTMyNzUtMzRmZC0z MGQxLTlmYmQtM2ZjNTcwNGFkZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjIyNGEwZjMtZWQwZS00ZjUyLWE3 ZDQtNWYyYjUwNDhiZWY4LzIyMjRhMGYzLWVkMGUtNGY1Mi1hN2Q0LTVmMmI1MDQ4 YmVmOC5jcmwwHwYDVR0jBBgwFoAUl1Nt1yQVObJUhvIlN/tifcqtQpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMjI0YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJi NTA0OGJlZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF684MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkbNzpuMxkAKhrbHNfGR5bAQmP+jK/f7g9mfgpb80HGw4SmIujMa+R+ 7HG+kjtTXF++FFtTauA5c9b9cr0o1vestRi/ExDCkmWloK2zdlhypZdhASHEjPDC ZfcGQVfI3Fvfz95b4J2e88vdS9abXiw7nTe7G+L65pVXoXypUIKTl0eAmWLl4yex ip3TMVPHlLHzCUhvrqRCjwzmBbBEyrXDw47G1ZL4/86OLoSujBMbH6YoFa5QNf6C 3FZzfFlZSt1y3eDr8n4q+m8f7PKFAWiqYm78tvRZFSXi6RjLT3m2vB0ONFEgiZqm DjuUXid4002zZtiE5sreAaZiwBHkTYY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:53:49 2025 by rpki-client