$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json) Hash identifier: z8zw779UTzu6WdziNyKA+kJ4yq7erFKE/BUdEt1l/Ps= Subject key identifier: 74:49:69:DC:1A:DB:EC:CF:8E:96:37:F4:1B:70:40:3C:08:C8:D7:63 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584A0C055112FF91E71A3437AD18 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 393444 IP address blocks: 23.165.48.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:51:12:ff:91:e7:1a:34:37:ad:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0778b625-524b-4dd8-8144-be4d093be69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:5e:7f:1d:b0:bb:d2:64:5e:d5:3e:c0:eb: e1:0a:a2:18:fc:50:61:59:04:9a:e1:d3:80:83:97: 0c:df:3b:41:bb:17:87:f4:5d:a9:cb:90:4f:70:9b: c5:33:f8:7f:74:ba:01:67:b4:63:85:d2:fa:cf:c9: a6:96:5d:63:0d:62:1d:23:3d:9f:03:76:54:2c:0b: 91:59:7f:fd:16:a4:a9:02:09:e4:a1:f8:a1:b0:f2: 20:b5:7f:06:07:51:1e:93:b6:0e:11:a0:30:33:07: 11:4b:26:9f:c0:77:f3:e1:0f:54:22:02:a5:4b:4e: 4c:71:ad:0b:7c:0f:1c:74:db:c0:55:03:7c:b0:93: 7a:a3:a4:a7:cb:2c:e4:cc:02:8b:88:84:92:91:89: 71:ea:5d:0d:04:27:dd:9f:7f:26:e4:60:df:92:4a: 0d:59:a1:c5:5b:67:f5:52:e8:de:d7:74:7c:ab:8f: d6:98:fc:f6:32:ca:35:21:63:19:e9:02:fd:ce:d7: b7:6f:db:07:c5:79:05:a1:18:de:53:07:30:63:4d: db:01:89:a5:83:3e:1f:39:3a:98:ba:c5:e2:7b:88: 0d:ac:48:53:87:76:e7:59:80:8a:32:7a:73:b3:8e: e5:53:d3:44:b1:9c:12:30:6f:25:e6:ab:dc:42:09: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:69:DC:1A:DB:EC:CF:8E:96:37:F4:1B:70:40:3C:08:C8:D7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d6:ec:a3:6d:a6:19:3d:bb:e1:47:11:f6:a4:86:fb:0d:d4: ee:da:cf:07:1c:09:7f:0a:05:05:a7:4a:20:a5:3c:53:f1:bf: 45:26:4a:b0:04:8b:9d:20:fa:c3:d9:bf:3f:11:6a:e4:28:33: 7f:48:0d:6a:be:3f:68:b1:34:f3:ab:3c:38:54:bb:93:a1:bf: bd:ed:9e:95:da:02:83:bf:aa:d0:68:32:ae:c8:ac:2c:cf:a4: 95:30:1c:53:df:6f:4a:dd:1b:76:5f:55:cd:46:ad:25:0f:45: 65:4c:32:6a:1e:2a:3e:52:09:a6:31:5f:00:38:47:1e:b5:36: 3d:cc:3d:fe:cd:2d:9b:51:9d:00:80:8d:8c:1b:b5:7c:61:89: a0:42:82:53:d7:d3:e8:56:7b:c2:6b:c7:79:a3:b4:d6:6f:c6: bb:14:ef:54:9a:38:fa:55:b6:25:12:4c:5e:03:70:c8:dd:2a: 0e:c4:39:9b:5c:a5:9c:a8:90:8f:3c:a2:24:69:28:7a:f9:17: ca:2c:67:71:0a:f4:dd:ad:38:aa:d0:08:18:54:c1:e5:6e:80: cd:0f:c3:44:ea:9a:8d:cd:b1:00:a9:46:bb:b3:bd:41:2e:7e: 53:80:c5:01:41:04:f7:49:3c:14:b6:37:ec:f6:fa:0d:52:e4: 67:11:a0:0c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoMBVES/5HnGjQ3rRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDc3OGI2MjUtNTI0Yi00ZGQ4LTgxNDQtYmU0ZDA5M2JlNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAictefx2wu9JkXtU+wOvhCqIY/FBhWQSa4dOA g5cM3ztBuxeH9F2py5BPcJvFM/h/dLoBZ7RjhdL6z8mmll1jDWIdIz2fA3ZULAuR WX/9FqSpAgnkofihsPIgtX8GB1Eek7YOEaAwMwcRSyafwHfz4Q9UIgKlS05Mca0L fA8cdNvAVQN8sJN6o6SnyyzkzAKLiISSkYlx6l0NBCfdn38m5GDfkkoNWaHFW2f1 Uuje13R8q4/WmPz2Mso1IWMZ6QL9zte3b9sHxXkFoRjeUwcwY03bAYmlgz4fOTqY usXie4gNrEhTh3bnWYCKMnpzs47lU9NEsZwSMG8l5qvcQglZ3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHRJadwa2+zPjpY39BtwQDwIyNdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvZWIwODljMWItYzVjYi0z Y2FhLWE4NjgtOTUyZmMxMTI0MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6UwMA4E AgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA41uyjbaYZPbvhRxH2pIb7DdTu2s8HHAl/ CgUFp0ogpTxT8b9FJkqwBIudIPrD2b8/EWrkKDN/SA1qvj9osTTzqzw4VLuTob+9 7Z6V2gKDv6rQaDKuyKwsz6SVMBxT329K3Rt2X1XNRq0lD0VlTDJqHio+UgmmMV8A OEcetTY9zD3+zS2bUZ0AgI2MG7V8YYmgQoJT19PoVnvCa8d5o7TWb8a7FO9Umjj6 VbYlEkxeA3DI3SoOxDmbXKWcqJCPPKIkaSh6+RfKLGdxCvTdrTiq0AgYVMHlboDN D8NE6pqNzbEAqUa7s71BLn5TgMUBQQT3STwUtjfs9voNUuRnEaAM -----END CERTIFICATE-----Generated at Sun Jun 15 21:27:20 2025 by rpki-client