$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: B5CnQUhqHRFDAnl3Z4izt18FkiC7Szue/H3kdpnn27I= Subject key identifier: 9A:90:B9:69:EA:A4:0C:63:CA:99:BB:73:45:B1:24:92:47:09:D0:06 Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F43285849ED4FC76519C77E2A8393BA89 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 399717 IP address blocks: 23.179.176.0/24 maxlen: 24 64.112.106.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c7:65:19:c7:7e:2a:83:93:ba:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=4310fcaf-41f5-44c1-ba9a-b26e33aec68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:64:d2:04:0d:eb:f4:0d:7e:30:3b:8e:d3: 24:55:93:c6:2e:2e:7c:a6:14:99:fd:8f:6a:a6:fb: c9:68:65:68:12:b8:3c:9b:a1:99:f6:6d:e1:c3:40: 85:ea:34:75:07:70:cf:11:96:98:08:b5:ca:0e:e6: ed:ca:86:a3:ad:39:48:98:c6:e8:97:9d:76:f8:a9: be:8a:57:c8:4a:dc:2c:fe:c8:0c:6e:83:6f:39:2f: fc:d4:90:07:54:3c:ec:66:68:e1:26:27:57:60:3b: c0:36:98:ad:a0:ed:f5:c5:2b:e7:c6:5d:90:fe:c7: 98:9e:ab:f7:2a:e1:c6:3b:64:99:a7:a3:3c:d7:f6: 50:6d:5e:24:16:e6:5d:ac:bb:44:a8:d1:36:34:24: 5b:ff:3f:7c:ca:ff:93:18:2a:d9:b7:18:d6:59:4c: 18:25:84:77:7d:2d:e4:25:5e:b5:00:0e:93:7a:62: 79:ed:de:02:a4:5b:65:2f:5e:aa:3a:92:1e:32:54: db:1d:cf:22:1f:70:d2:8e:b3:be:1d:f9:25:e6:46: 03:b1:cc:53:dc:34:1d:cc:af:b6:c9:3f:49:f0:b2: dd:aa:f9:84:71:e7:98:6f:29:77:95:e5:10:96:28: 10:39:cd:d2:5d:71:1a:bb:39:fc:5b:0c:be:d3:17: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:90:B9:69:EA:A4:0C:63:CA:99:BB:73:45:B1:24:92:47:09:D0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bd:cc:23:c2:37:de:01:7c:4c:a7:a5:2b:74:de:89:b1:74: 3b:6f:d1:17:0e:0b:da:5e:10:26:e0:5f:5c:b7:a2:52:45:30: 33:e2:02:1f:74:8a:f9:20:0f:fe:b6:dc:50:73:01:48:38:2e: 1a:6e:20:e4:4b:60:10:78:1b:14:ae:45:56:89:f8:50:64:a2: e0:e4:c4:b8:a3:6d:e4:0e:7b:76:9d:50:f0:7e:4a:3c:35:23: e6:e2:da:15:92:1b:99:62:fc:41:3d:60:d6:99:80:8c:8f:db: 65:7c:53:48:16:8b:d5:3d:de:e3:61:51:82:6a:fc:67:9a:22: 58:36:a3:44:40:60:83:80:ce:e3:41:74:83:34:d4:02:bf:9f: 56:87:cc:a4:ee:37:2c:88:1b:0c:04:fd:a7:fe:cb:18:a0:e2: 8e:f9:ca:04:62:99:df:f6:a9:4f:53:66:d6:f0:ef:68:64:b3: d9:24:95:25:ef:78:c3:52:82:59:1a:50:fc:12:d2:f8:c0:e6: 5d:6c:bf:51:8a:c9:ab:58:59:4a:ba:9c:74:f3:b7:a9:69:5a: 88:d4:6e:f0:ac:37:c2:d8:63:22:58:a8:a3:1b:e4:09:44:81: 45:79:e4:6f:0e:90:ec:3e:70:8d:08:1a:00:ea:28:00:31:f5: 84:64:35:88 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEntT8dlGcd+KoOTuokwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk NDMxMGZjYWYtNDFmNS00NGMxLWJhOWEtYjI2ZTMzYWVjNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdZk0gQN6/QNfjA7jtMkVZPGLi58phSZ/Y9q pvvJaGVoErg8m6GZ9m3hw0CF6jR1B3DPEZaYCLXKDubtyoajrTlImMbol512+Km+ ilfIStws/sgMboNvOS/81JAHVDzsZmjhJidXYDvANpitoO31xSvnxl2Q/seYnqv3 KuHGO2SZp6M81/ZQbV4kFuZdrLtEqNE2NCRb/z98yv+TGCrZtxjWWUwYJYR3fS3k JV61AA6TemJ57d4CpFtlL16qOpIeMlTbHc8iH3DSjrO+Hfkl5kYDscxT3DQdzK+2 yT9J8LLdqvmEceeYbyl3leUQligQOc3SXXEauzn8Wwy+0xfyMwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJqQuWnqpAxjypm7c0WxJJJHCdAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfvcwjwjfeAXxMp6UrdN6JsXQ7 b9EXDgvaXhAm4F9ct6JSRTAz4gIfdIr5IA/+ttxQcwFIOC4abiDkS2AQeBsUrkVW ifhQZKLg5MS4o23kDnt2nVDwfko8NSPm4toVkhuZYvxBPWDWmYCMj9tlfFNIFovV Pd7jYVGCavxnmiJYNqNEQGCDgM7jQXSDNNQCv59Wh8yk7jcsiBsMBP2n/ssYoOKO +coEYpnf9qlPU2bW8O9oZLPZJJUl73jDUoJZGlD8EtL4wOZdbL9RismrWFlKupx0 87epaVqI1G7wrDfC2GMiWKijG+QJRIFFeeRvDpDsPnCNCBoA6igAMfWEZDWI -----END CERTIFICATE-----Generated at Tue Jun 17 14:12:08 2025 by rpki-client