$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa File: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json) Hash identifier: VtPW7kPwWsSv/jZSDbn6kv/MDWxHFQ5J5H2QX6JUAXg= Subject key identifier: B8:09:E7:93:08:8C:13:96:A2:5B:A6:59:7F:FD:D1:93:80:C0:45:0A Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F432858496527AF6820355D47BD196C40 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa Signing time: Wed 02 Apr 2025 18:30:26 +0000 ROA not before: Wed 02 Apr 2025 18:30:26 +0000 ROA not after: Tue 01 Jul 2025 18:30:26 +0000 asID: 13886 IP address blocks: 65.75.205.0/24 maxlen: 24 65.75.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:27:af:68:20:35:5d:47:bd:19:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Apr 2 18:30:26 2025 GMT Not After : Jul 1 18:30:26 2025 GMT Subject: CN=4a704bf3-2140-4d4d-a3d8-d900f60aebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:36:3e:c6:ad:65:b0:01:aa:02:7a:9f:04: 59:2e:89:58:fd:6c:e6:aa:e9:e0:55:9e:e2:37:73: 76:82:51:82:0c:ee:da:7e:6f:36:40:61:66:23:62: 8d:1b:23:2d:ee:5d:83:e7:15:9d:4c:33:b3:f9:b6: 34:d1:d1:c6:51:63:c2:6a:f6:f3:6c:6b:5f:fa:7e: ef:35:6e:fe:88:10:57:03:0c:43:2b:6f:bf:33:71: 6e:f5:fb:51:1a:d0:70:d0:08:8a:38:d2:7d:6d:4e: 44:f0:10:9b:f8:37:b2:f0:f9:5d:95:ae:2a:b8:3a: 34:db:09:d9:84:53:1f:59:30:e6:af:bb:0c:ec:8b: 28:30:10:c1:69:b9:04:81:e2:18:ef:59:6e:9a:7b: 8b:ba:57:5e:b6:f4:64:67:94:db:b2:a9:bf:cc:b0: e9:61:70:9b:4b:4f:d1:b0:23:25:5b:d0:a5:c8:86: b8:55:71:02:99:a7:09:3c:2d:9d:70:9b:9a:9b:d4: 1a:5d:fe:ca:05:94:9e:eb:08:ba:b3:79:13:05:1e: da:8b:57:a1:01:02:07:93:11:fe:26:9f:3a:0e:0c: 70:47:58:67:71:90:be:80:4f:1e:d5:27:62:81:37: 9e:d4:97:44:69:46:cf:5f:8d:da:2d:8b:78:2f:72: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:09:E7:93:08:8C:13:96:A2:5B:A6:59:7F:FD:D1:93:80:C0:45:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.205.0-65.75.206.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bd:29:89:53:51:56:06:ba:fa:25:52:f2:b9:03:8c:0b:0d: 24:08:ce:4c:40:50:a4:d1:9f:7c:67:65:f4:c8:5b:a1:14:bd: 67:2b:40:0c:bd:9a:f3:09:db:13:40:59:19:e7:e0:d0:98:9f: 5d:b2:2f:f0:f2:28:d7:83:3a:cb:86:c4:39:7c:7f:a1:46:2a: ad:b7:6e:be:7a:99:9a:9e:86:62:22:35:d4:a3:02:37:ad:60: 7b:c5:96:09:cc:a4:8e:7d:a4:25:57:13:ac:01:c2:25:f2:f9: 26:c8:8d:3f:e6:f8:f9:01:46:b0:41:72:1b:f6:92:f9:53:05: 0b:c2:ab:76:9d:22:78:b7:2a:14:8b:69:01:05:de:1b:c7:ab: 6c:8f:df:99:4e:0b:af:d7:eb:89:16:4c:3c:48:41:6b:ab:d8: 5e:ca:2a:4b:46:c0:9f:b4:8d:08:b5:71:49:aa:3a:6e:ae:63: 9d:07:c1:86:7c:4c:b7:18:ec:b2:75:76:5d:f0:77:b2:ad:b7: bc:fe:7f:56:ee:f6:89:79:a7:e5:9f:61:12:a4:4e:ba:85:f9: 6d:f9:b6:b4:af:2b:c9:85:5d:62:aa:35:7d:00:dd:d6:65:f0: 37:ea:2b:79:4e:35:7b:0f:42:8c:b6:54:f2:91:3a:85:f0:8f: 59:bc:dd:6d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEllJ69oIDVdR70ZbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDQwMjE4MzAyNloXDTI1MDcwMTE4MzAyNlowLzEtMCsGA1UEAxMk NGE3MDRiZjMtMjE0MC00ZDRkLWEzZDgtZDkwMGY2MGFlYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbw2PsatZbABqgJ6nwRZLolY/WzmqungVZ7i N3N2glGCDO7afm82QGFmI2KNGyMt7l2D5xWdTDOz+bY00dHGUWPCavbzbGtf+n7v NW7+iBBXAwxDK2+/M3Fu9ftRGtBw0AiKONJ9bU5E8BCb+Dey8Pldla4quDo02wnZ hFMfWTDmr7sM7IsoMBDBabkEgeIY71lumnuLuldetvRkZ5Tbsqm/zLDpYXCbS0/R sCMlW9ClyIa4VXECmacJPC2dcJuam9QaXf7KBZSe6wi6s3kTBR7ai1ehAQIHkxH+ Jp86DgxwR1hncZC+gE8e1SdigTee1JdEaUbPX43aLYt4L3IFhQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLgJ55MIjBOWolumWX/90ZOAwEUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMjNkODI1ZmEtYWJmNC0z ZjVjLWExMzgtZGVhNWM1Yzc0N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABBS80D BABBS84wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhL0piVNRVga6+iVS8rkDjAsNJAjOTEBQpNGffGdl9Mhb oRS9ZytADL2a8wnbE0BZGefg0JifXbIv8PIo14M6y4bEOXx/oUYqrbduvnqZmp6G YiI11KMCN61ge8WWCcykjn2kJVcTrAHCJfL5JsiNP+b4+QFGsEFyG/aS+VMFC8Kr dp0ieLcqFItpAQXeG8erbI/fmU4Lr9friRZMPEhBa6vYXsoqS0bAn7SNCLVxSao6 bq5jnQfBhnxMtxjssnV2XfB3sq23vP5/Vu72iXmn5Z9hEqROuoX5bfm2tK8ryYVd Yqo1fQDd1mXwN+oreU41ew9CjLZU8pE6hfCPWbzdbQ== -----END CERTIFICATE-----Generated at Wed Apr 30 09:41:23 2025 by rpki-client