$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json) Hash identifier: 60//GhX3cbICsQhJOlWobwVBeht30LEcjTt3TYLh7OM= Subject key identifier: 01:C5:E6:CB:52:FA:18:BE:B1:4E:82:D4:12:F0:6C:79:2A:74:2D:9B Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285849D85FAA838FE65366A9FB2440 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 26904 IP address blocks: 23.247.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:aa:83:8f:e6:53:66:a9:fb:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=3bfb4faa-f46a-4cd6-96f3-1606f62217cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:77:34:be:d5:d1:76:50:13:46:0b:47:1c: fe:40:c8:e1:3c:21:41:d4:7a:75:87:96:c6:b9:7a: ac:b0:77:88:69:93:2a:12:76:32:8d:95:40:26:c7: 93:aa:83:41:0d:f8:f9:0f:d6:a3:1b:bc:0d:fb:fa: 15:0e:4d:ef:b3:1b:b0:7a:45:c8:39:05:bb:55:ba: f3:ae:38:ef:fd:01:a0:b4:b3:ec:16:ae:2f:a2:34: 16:9b:8a:36:36:15:9a:9e:fc:7b:b4:57:6c:2e:b7: 21:fb:60:09:e5:8f:c9:16:c3:a0:28:d2:25:3a:e2: ee:23:f6:b3:60:01:ff:7d:38:38:b1:d9:1a:7f:e0: 8e:c3:8b:72:32:eb:05:57:88:1e:e6:2e:1a:36:2d: be:c2:57:65:04:f2:a5:01:56:ad:8a:72:01:bd:bc: 3d:56:3f:fe:9a:21:64:62:de:db:ad:c3:33:83:7f: 47:84:cc:0e:f0:47:d0:45:c9:81:4c:d7:31:32:aa: 84:c9:de:f4:56:75:d5:18:b4:6b:d7:67:17:24:04: 5c:a1:96:f5:20:00:70:96:5d:f4:f1:23:00:34:df: a0:fa:64:c9:64:d0:52:70:3b:96:6b:a7:0e:22:79: 68:74:b7:41:ca:73:55:3e:e7:57:36:c2:06:c5:48: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:E6:CB:52:FA:18:BE:B1:4E:82:D4:12:F0:6C:79:2A:74:2D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b5:f8:62:08:d7:94:51:21:16:7b:5b:02:5c:55:24:ec:7f: 39:1d:c6:63:d8:80:3e:1f:ab:38:7d:a9:39:79:e6:bf:a8:36: 7a:f4:1a:de:11:b0:8d:71:6f:b4:17:af:fa:88:84:32:b3:74: 5a:06:33:58:07:86:97:08:16:3d:87:07:62:0b:df:e6:d0:4a: 9c:d6:6f:d9:9f:89:0a:76:f3:62:bf:60:d3:2e:11:38:50:f1: aa:03:0b:95:a3:c1:3e:05:d1:0c:b9:79:65:59:68:5b:d6:47: b6:0b:a5:7c:a9:e2:44:76:f2:ed:41:8c:0e:4a:7e:0b:13:a1: f6:05:e6:ef:58:7c:1c:37:8b:7a:84:21:a7:a7:bd:00:bc:b4: 3c:20:51:a7:8b:64:f6:18:9b:14:01:f1:1f:b8:f1:cc:2d:68: cc:dc:64:63:53:e4:53:26:59:27:cf:d8:94:ff:03:ca:9c:67: 94:84:01:74:28:2c:ee:c2:76:b0:d9:7f:9f:63:00:48:f8:76: 77:d3:fb:e9:77:e8:f9:14:33:39:a9:84:36:4e:2b:b0:94:54: c6:84:92:64:e8:c2:c8:6c:77:85:7a:63:6e:87:aa:8f:f8:c9: 65:a7:24:90:0a:3f:28:dc:9a:31:9c:ef:29:21:b3:a8:6b:9d: 59:dd:0b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6qDj+ZTZqn7JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk M2JmYjRmYWEtZjQ2YS00Y2Q2LTk2ZjMtMTYwNmY2MjIxN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UN3NL7V0XZQE0YLRxz+QMjhPCFB1Hp1h5bG uXqssHeIaZMqEnYyjZVAJseTqoNBDfj5D9ajG7wN+/oVDk3vsxuwekXIOQW7Vbrz rjjv/QGgtLPsFq4vojQWm4o2NhWanvx7tFdsLrch+2AJ5Y/JFsOgKNIlOuLuI/az YAH/fTg4sdkaf+COw4tyMusFV4ge5i4aNi2+wldlBPKlAVatinIBvbw9Vj/+miFk Yt7brcMzg39HhMwO8EfQRcmBTNcxMqqEyd70VnXVGLRr12cXJARcoZb1IABwll30 8SMANN+g+mTJZNBScDuWa6cOInlodLdBynNVPudXNsIGxUh1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHF5stS+hi+sU6C1BLwbHkqdC2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvODgyZDBlYzQtODM4Ny0z OGUzLTkzZTktZTQ4MDZlYjJhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq1+GII15RRIRZ7WwJcVSTsfzkdxmPYgD4fqzh9qTl55r+oNnr0Gt4R sI1xb7QXr/qIhDKzdFoGM1gHhpcIFj2HB2IL3+bQSpzWb9mfiQp282K/YNMuEThQ 8aoDC5WjwT4F0Qy5eWVZaFvWR7YLpXyp4kR28u1BjA5KfgsTofYF5u9YfBw3i3qE IaenvQC8tDwgUaeLZPYYmxQB8R+48cwtaMzcZGNT5FMmWSfP2JT/A8qcZ5SEAXQo LO7CdrDZf59jAEj4dnfT++l36PkUMzmphDZOK7CUVMaEkmTowshsd4V6Y26Hqo/4 yWWnJJAKPyjcmjGc7ykhs6hrnVndC6U= -----END CERTIFICATE-----Generated at Mon Jun 16 12:27:58 2025 by rpki-client