$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa File: d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa (raw, json) Hash identifier: 89LN+X9M/R+cYQR9jkZ7AuYv46MP4+cZv5RVKYc99Ec= Subject key identifier: 47:2D:28:D8:5B:96:90:65:CF:15:8C:15:98:50:B9:51:1E:4E:C9:1D Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F43285849F7151CCDF68F02D78F5F16C0 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 40081 IP address blocks: 23.175.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:1c:cd:f6:8f:02:d7:8f:5f:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9c071a6e-ada2-49ee-aa68-859bdab6cc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:0e:08:32:93:d4:f4:87:c2:78:31:a8:97: be:8b:32:cd:41:ea:4d:59:4a:6e:d4:c3:f5:49:94: 56:ec:3f:5e:dc:7e:40:64:71:31:18:6b:b3:40:fd: 3a:56:3e:60:4d:19:6c:44:78:f7:29:0a:a0:c9:cd: e9:b8:87:d3:f2:6d:d9:f4:8e:da:8d:6a:8b:cc:9a: b0:d1:b2:03:11:da:dc:76:c3:b2:ee:f4:f1:11:f7: 96:64:c9:53:8f:ee:81:ce:1c:d5:8e:5b:8d:82:e0: aa:c4:8a:09:29:a4:b7:9a:10:5e:e6:86:4d:d4:23: 96:21:2b:07:b1:54:9b:e0:7e:d0:4c:0e:85:c8:f2: 7e:2a:cf:55:f1:3d:7c:4c:10:c3:ff:34:81:bd:45: 18:4f:f2:6a:27:f9:e4:05:54:47:8d:b0:1a:d8:90: ba:02:d6:aa:82:92:46:69:9c:c1:a3:76:69:be:11: 09:01:ae:96:69:00:8a:70:6c:02:92:53:c4:2c:32: fb:fa:8e:44:dc:20:45:14:11:22:04:cb:ef:2a:7e: 6f:4f:d2:29:dc:60:b8:ee:9e:c2:9d:85:05:48:da: 1f:be:49:6b:4a:cd:4d:5a:2e:97:6d:e7:6f:e0:8e: 78:50:92:cc:af:91:ba:a4:32:b8:05:4b:bd:03:ef: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:28:D8:5B:96:90:65:CF:15:8C:15:98:50:B9:51:1E:4E:C9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv4: 23.175.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fc:6a:a7:cf:65:0d:f9:49:09:14:2a:07:1c:0e:4a:18:b5: 31:9a:e5:da:d2:d2:35:a2:cb:8b:b2:43:55:cd:52:ff:9c:d8: 02:f0:f5:bb:27:1c:69:5b:f0:e7:ad:92:be:5a:c7:74:25:bb: 2d:ff:ac:5f:22:88:1e:c5:a0:f3:6e:0e:a4:2d:e5:96:9c:b6: 39:d2:d4:44:32:40:64:ce:9a:17:09:10:2a:cd:4e:c3:ae:5b: 4c:71:b9:51:ff:98:ce:12:07:b5:a7:cd:c8:96:53:00:00:23: 3b:6b:2a:0c:8b:8e:c5:43:95:9e:4f:5a:42:8c:c8:bc:6f:8a: da:20:c8:07:9e:3c:fa:86:c5:9e:15:76:07:17:8a:4e:2d:86: 07:32:3d:cc:21:76:5f:47:ed:0a:60:77:f2:15:da:97:2e:2a: 6c:6e:aa:04:4e:90:87:cf:3c:8a:13:dc:e6:ad:67:e5:ca:5c: fe:a2:a9:f0:87:52:c9:ef:19:52:71:a4:b6:79:13:a6:4f:1b: f6:c5:2c:b4:14:81:c2:6d:f5:d0:ca:11:0f:d0:07:25:67:33: 26:e3:22:87:55:ab:51:34:77:f6:dd:79:8a:d1:31:63:b0:ef: 8b:df:b6:1e:58:d2:9a:a2:5b:05:6a:21:bd:27:99:33:09:29: 5a:c3:36:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRzN9o8C149fFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OWMwNzFhNmUtYWRhMi00OWVlLWFhNjgtODU5YmRhYjZjYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd0OCDKT1PSHwngxqJe+izLNQepNWUpu1MP1 SZRW7D9e3H5AZHExGGuzQP06Vj5gTRlsRHj3KQqgyc3puIfT8m3Z9I7ajWqLzJqw 0bIDEdrcdsOy7vTxEfeWZMlTj+6BzhzVjluNguCqxIoJKaS3mhBe5oZN1COWISsH sVSb4H7QTA6FyPJ+Ks9V8T18TBDD/zSBvUUYT/JqJ/nkBVRHjbAa2JC6AtaqgpJG aZzBo3ZpvhEJAa6WaQCKcGwCklPELDL7+o5E3CBFFBEiBMvvKn5vT9Ip3GC47p7C nYUFSNofvklrSs1NWi6Xbedv4I54UJLMr5G6pDK4BUu9A+9b4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEctKNhblpBlzxWMFZhQuVEeTskdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZDY4OWUxZDQtYTU1ZS0z NzFlLWJhOWEtNGExMmFkNGJlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH8aqfPZQ35SQkUKgccDkoYtTGa5drS0jWiy4uyQ1XNUv+c2ALw9bsn HGlb8Oetkr5ax3Qluy3/rF8iiB7FoPNuDqQt5ZactjnS1EQyQGTOmhcJECrNTsOu W0xxuVH/mM4SB7WnzciWUwAAIztrKgyLjsVDlZ5PWkKMyLxvitogyAeePPqGxZ4V dgcXik4thgcyPcwhdl9H7Qpgd/IV2pcuKmxuqgROkIfPPIoT3OatZ+XKXP6iqfCH UsnvGVJxpLZ5E6ZPG/bFLLQUgcJt9dDKEQ/QByVnMybjIodVq1E0d/bdeYrRMWOw 74vfth5Y0pqiWwVqIb0nmTMJKVrDNo4= -----END CERTIFICATE-----Generated at Tue Jun 17 16:08:54 2025 by rpki-client