$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa File: 41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json) Hash identifier: BihDMDsIK9+BiowKthO+vKCZtJXTRTnQCIElRHgdbJ0= Subject key identifier: 5A:E5:A6:10:EE:4B:F1:7C:00:96:F9:2D:D3:6B:CD:84:99:A5:B1:3A Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584A03A54314A72056D9F6447920 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:14:a7:20:56:d9:f6:44:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=88a75c5a-c530-4b8c-b595-b93a1f2fe947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:35:9b:87:30:96:c7:f5:bf:c5:49:78:12:f7: f8:77:db:55:3f:63:d5:f2:8e:50:8e:ee:28:88:b3: ad:48:d5:29:45:c5:d9:15:f8:72:10:87:0c:1d:e2: 14:6f:10:a6:34:b5:22:22:63:95:15:9a:c4:1b:4b: b7:39:a7:64:10:15:0f:46:d4:6d:78:12:67:93:88: e4:1f:86:79:53:e4:da:dc:7c:4e:df:32:c7:de:3d: dd:ce:74:f4:60:bb:e8:d0:c5:d9:03:86:9f:43:88: fd:12:91:64:d7:95:8f:57:b1:3a:16:10:38:4f:cd: 98:89:fd:42:0a:cc:83:36:d7:27:bd:22:42:06:2a: 74:91:39:4d:c8:d6:62:56:6d:69:b8:cd:d4:a0:bd: 2d:2c:9b:dc:7a:64:5b:a4:d9:0a:50:24:55:72:76: 0e:ec:bf:b6:cc:33:69:a3:63:2f:eb:ab:52:52:f6: 39:7f:54:28:30:cc:d1:e1:c4:34:52:26:f1:a2:a6: d3:30:a1:59:a3:1d:7a:01:6c:c9:81:a4:63:f6:28: c9:04:8f:03:c8:40:60:f2:57:2f:41:1e:24:34:15: 66:8f:c5:d2:ab:88:0b:1e:82:dd:62:d8:52:02:54: 74:19:57:60:69:b8:88:24:19:ee:10:1f:77:c6:1e: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:A6:10:EE:4B:F1:7C:00:96:F9:2D:D3:6B:CD:84:99:A5:B1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ec:71:99:33:9d:f3:0e:50:82:8b:10:69:46:d3:ae:75:8b: 18:ae:c5:e9:51:a9:26:90:7d:ec:f9:fa:05:b3:b4:fb:97:35: 15:cd:d9:b1:95:83:91:5a:26:90:39:70:07:d8:2c:5e:83:36: 72:a7:b1:03:b3:59:71:4c:a9:86:b6:e9:e8:a3:19:60:1f:f7: 19:1e:60:92:ef:43:9d:47:e8:dc:ff:08:62:c1:d8:bc:18:a7: 11:08:69:94:6e:32:00:b2:dc:64:0c:64:cb:eb:59:1c:0f:32: f9:f8:a8:c7:9b:fc:e7:05:e8:6d:18:b2:34:09:cd:d5:39:16: 36:3e:57:2a:9c:b8:13:93:47:db:09:00:80:5b:ba:d1:c3:8e: d7:bb:f7:86:92:ee:d0:11:a1:e0:eb:e0:a6:b2:93:54:7d:d1: a9:4b:82:c9:c4:23:45:95:d1:d1:3c:89:5c:86:d2:cd:d7:62: cd:bd:7a:c3:77:66:fd:2a:b0:fd:b4:8c:2e:69:8f:2d:e9:a7: 95:d3:1c:62:38:cd:74:23:e6:40:50:ed:8b:4b:39:10:f4:d8: 64:c6:74:d8:53:eb:e6:89:8b:de:72:0f:f6:86:a7:00:f8:de: cd:b6:46:6a:33:3c:0d:fe:2b:3b:48:9c:29:af:f5:e0:60:76: 16:c4:66:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUMUpyBW2fZEeSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ODhhNzVjNWEtYzUzMC00YjhjLWI1OTUtYjkzYTFmMmZlOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjWbhzCWx/W/xUl4Evf4d9tVP2PV8o5Qju4o iLOtSNUpRcXZFfhyEIcMHeIUbxCmNLUiImOVFZrEG0u3OadkEBUPRtRteBJnk4jk H4Z5U+Ta3HxO3zLH3j3dznT0YLvo0MXZA4afQ4j9EpFk15WPV7E6FhA4T82Yif1C CsyDNtcnvSJCBip0kTlNyNZiVm1puM3UoL0tLJvcemRbpNkKUCRVcnYO7L+2zDNp o2Mv66tSUvY5f1QoMMzR4cQ0UibxoqbTMKFZox16AWzJgaRj9ijJBI8DyEBg8lcv QR4kNBVmj8XSq4gLHoLdYthSAlR0GVdgabiIJBnuEB93xh59aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrlphDuS/F8AJb5LdNrzYSZpbE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvNDFiNDk1YTEtMzYyNy0z NjY3LWFmNDEtZDIwNzJkNWQ5ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjscZkznfMOUIKLEGlG0651ixiuxelRqSaQfez5+gWztPuXNRXN2bGV g5FaJpA5cAfYLF6DNnKnsQOzWXFMqYa26eijGWAf9xkeYJLvQ51H6Nz/CGLB2LwY pxEIaZRuMgCy3GQMZMvrWRwPMvn4qMeb/OcF6G0YsjQJzdU5FjY+VyqcuBOTR9sJ AIBbutHDjte794aS7tARoeDr4Kayk1R90alLgsnEI0WV0dE8iVyG0s3XYs29esN3 Zv0qsP20jC5pjy3pp5XTHGI4zXQj5kBQ7YtLORD02GTGdNhT6+aJi95yD/aGpwD4 3s22RmozPA3+KztInCmv9eBgdhbEZrk= -----END CERTIFICATE-----Generated at Wed Jun 18 06:58:23 2025 by rpki-client