$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa File: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json) Hash identifier: htLGXU07iOP+cK4AM+PpljBmu+7nje5xVIj5Q06goqk= Subject key identifier: 5A:A3:06:22:17:71:6F:34:B5:AA:97:6A:A8:81:73:1A:BA:C5:19:08 Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Certificate serial: 010D0C9F43285849F2E52EBF1D7F4B1D00204240 Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 400142 IP address blocks: 23.191.176.0/24 maxlen: 24 2602:fc99::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2e:bf:1d:7f:4b:1d:00:20:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=68e0820b-b3f6-4978-b977-12056ceef587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:b2:e5:bb:eb:67:e7:e8:1a:5c:7a:b9:33: bc:5f:6f:9d:0a:00:7f:86:68:16:c1:e7:3b:14:68: c5:1b:85:e5:b6:63:9e:84:3d:8e:67:5d:14:11:d0: 71:ac:e4:0c:7d:59:a2:18:17:72:84:9c:fb:0f:9e: 53:4a:20:2c:73:74:db:0f:ee:12:23:9f:83:fb:44: 86:82:6c:5a:4b:87:54:37:2c:29:65:ca:a6:17:07: 90:f0:78:a1:d2:f9:ce:bd:68:de:e0:1f:39:8f:e8: 4c:c2:29:91:99:76:95:46:cc:e1:f9:d6:c0:a0:7a: b5:e5:e5:da:dc:c4:62:07:45:cd:bc:9f:e1:3c:c0: 19:17:4c:9c:6e:5a:2c:e9:f1:90:89:6b:b9:0a:f7: 0f:67:dc:81:6b:80:a6:16:b8:3f:a1:52:5f:39:d6: ed:6c:db:2c:f8:d2:34:d0:d5:94:16:92:58:da:73: 55:3a:65:51:5d:5b:77:7a:b6:55:f1:ee:84:b1:e8: 7b:c5:b5:8a:0a:7d:27:2d:a0:3e:05:b6:43:88:7f: 08:db:92:ee:21:43:a8:9d:24:1e:ab:f5:a8:59:39: 06:1b:e4:1d:7a:b3:82:33:f8:b6:8b:ba:dd:c5:67: 2b:e9:86:6e:f0:f0:bf:16:f3:84:bf:81:6b:3c:dc: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A3:06:22:17:71:6F:34:B5:AA:97:6A:A8:81:73:1A:BA:C5:19:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl X509v3 Authority Key Identifier: keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer sbgp-ipAddrBlock: critical IPv4: 23.191.176.0/24 IPv6: 2602:fc99::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bb:d0:35:79:26:c2:f2:d8:c1:3a:ad:22:f5:12:7a:e3:54: 24:06:2b:33:7b:d8:41:98:2f:a7:8a:b0:a7:83:5c:b9:3f:15: 3d:7f:03:18:2a:c6:ab:5a:10:47:10:06:06:79:7c:b7:aa:d8: 52:8d:0c:5f:83:2c:87:e8:12:64:c8:db:26:a9:c9:e6:a5:ac: c2:97:f1:03:bd:bf:7d:e2:12:b7:a6:be:cc:76:9a:b3:f2:e5: d9:b6:38:a0:ec:09:63:58:49:a2:fd:c3:d2:35:bf:1f:80:53: 2a:c9:13:2a:93:da:8f:4c:b1:78:1d:f4:84:2b:57:7f:0a:2c: de:68:cd:34:38:ef:34:8f:47:c2:a8:32:73:9a:16:71:a5:8e: d7:a8:71:b3:c3:ea:63:dc:9c:53:a0:5c:87:b4:16:e2:d7:34: 8a:f4:9e:44:5b:ac:f1:00:bd:2e:44:94:98:8b:e9:93:d0:39: 76:17:5e:89:a6:74:e6:8b:73:ed:13:31:5b:43:8f:9a:e5:2e: a2:90:e8:40:43:1e:a4:9f:d3:4f:f6:ea:88:02:8b:7c:79:0b: ed:f8:2a:7e:8f:4f:c9:c9:15:4c:0e:2f:55:a6:a8:ca:65:e7: b2:33:6f:16:6b:7e:28:01:6a:14:63:23:97:de:0c:50:6e:9f: 51:75:e5:85 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEny5S6/HX9LHQAgQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1 MDU1MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjhlMDgyMGItYjNmNi00OTc4LWI5NzctMTIwNTZjZWVmNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ey5bvrZ+foGlx6uTO8X2+dCgB/hmgWwec7 FGjFG4XltmOehD2OZ10UEdBxrOQMfVmiGBdyhJz7D55TSiAsc3TbD+4SI5+D+0SG gmxaS4dUNywpZcqmFweQ8Hih0vnOvWje4B85j+hMwimRmXaVRszh+dbAoHq15eXa 3MRiB0XNvJ/hPMAZF0ycblos6fGQiWu5CvcPZ9yBa4CmFrg/oVJfOdbtbNss+NI0 0NWUFpJY2nNVOmVRXVt3erZV8e6Eseh7xbWKCn0nLaA+BbZDiH8I25LuIUOonSQe q/WoWTkGG+QderOCM/i2i7rdxWcr6YZu8PC/FvOEv4FrPNxEeQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFqjBiIXcW80taqXaqiBcxq6xRkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJh ZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvNGExOWMwNjItZDIyNy0z MWQ3LWIwZGMtMmY1MjU1NjdkM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmMyYWU0OGYtNDc1Yi00MmIzLTlh NTYtY2U4ODUyNTE1MDU1LzJjMmFlNDhmLTQ3NWItNDJiMy05YTU2LWNlODg1MjUx NTA1NS5jcmwwHwYDVR0jBBgwFoAUhBs1SSOEDxgolRUcg9Kc2jDt5EwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4 NTI1MTUwNTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+wMA4E AgACMAgDBgQmAvyZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMu9A1eSbC8tjBOq0i9RJ641QkBisze9hB mC+nirCng1y5PxU9fwMYKsarWhBHEAYGeXy3qthSjQxfgyyH6BJkyNsmqcnmpazC l/EDvb994hK3pr7Mdpqz8uXZtjig7AljWEmi/cPSNb8fgFMqyRMqk9qPTLF4HfSE K1d/CizeaM00OO80j0fCqDJzmhZxpY7XqHGzw+pj3JxToFyHtBbi1zSK9J5EW6zx AL0uRJSYi+mT0Dl2F16JpnTmi3PtEzFbQ4+a5S6ikOhAQx6kn9NP9uqIAot8eQvt +Cp+j0/JyRVMDi9VpqjKZeeyM28Wa34oAWoUYyOX3gxQbp9RdeWF -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:15 2025 by rpki-client