$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: oMNuP0rftL/ojrk4mESxOeSy+t+ZIxOsRxu4TDXDcHg= Subject key identifier: 09:6D:20:75:47:E8:B7:B5:37:B5:E8:8A:22:07:EB:FB:15:80:1A:B4 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584A2D858BB20E224300FCB9F940 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8b:b2:0e:22:43:00:fc:b9:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=03dd8155-a20b-41e5-af4c-93bf4faede33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:68:b3:11:d0:15:c4:f5:df:72:78:09:8f: 1e:40:92:de:b5:2f:78:48:6f:f1:dc:3f:9c:b4:d7: 64:10:ae:af:69:e0:67:eb:57:89:d2:b4:2f:7f:cb: d2:f6:77:4e:1a:92:42:f1:c1:68:fc:69:af:96:04: 70:9b:37:27:b0:e9:04:69:62:c5:ba:65:b0:69:3a: 74:c6:d5:17:d9:13:15:5a:15:7e:3d:fd:c9:3f:52: a5:b4:b4:a0:10:37:9c:9e:37:f2:6c:a7:20:09:17: 40:8a:d0:0e:9b:7d:89:ee:a6:d8:7c:58:73:63:b0: c3:14:3a:a3:4d:24:3b:76:2d:9d:1a:1d:8b:e9:cd: 39:4f:fe:4e:1b:55:e2:df:1b:c9:dd:e4:5c:74:49: 00:76:ed:04:8e:7e:5a:b1:4e:95:d9:be:9b:63:3c: 01:9d:8a:9e:5d:30:83:b3:a3:82:6e:9a:d0:f5:bb: 42:ef:ea:c0:0f:a2:b3:95:15:de:f5:da:0c:0d:ac: 7c:8d:2b:e3:87:8d:c2:15:86:b7:ab:39:e4:6b:b6: 6b:1b:f6:ea:17:da:4d:a5:3f:ef:36:30:19:d1:76: e6:cd:69:94:5a:85:23:af:45:b3:cd:15:c5:5f:10: 9b:97:a8:f1:f2:3e:f1:1a:da:70:88:39:f3:63:5d: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:20:75:47:E8:B7:B5:37:B5:E8:8A:22:07:EB:FB:15:80:1A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:98:ad:a0:30:bf:fe:17:61:78:4d:c9:68:c7:21:50:50:82: fc:dd:ed:5d:91:73:04:fa:2c:44:29:34:4a:52:9b:51:af:53: 67:17:c7:4d:9e:d9:5b:52:7a:df:43:62:e2:63:53:ab:77:56: 20:0f:07:93:59:7c:1e:14:89:60:9a:19:5c:44:a8:0b:1f:a4: 63:46:70:79:2a:54:3e:4d:a9:f9:85:c7:a2:79:44:77:ba:3f: 3c:ab:0e:17:b5:be:c4:b5:8b:0f:76:00:e9:56:38:3a:9f:12: 4a:52:b8:74:2b:fd:58:14:14:c8:0e:29:83:b5:74:5a:63:08: 29:9f:06:ef:30:82:91:0f:6b:fd:89:ce:75:9d:b1:59:33:a8: 85:2f:ce:0c:24:b3:63:74:b2:fe:fb:d5:43:21:6b:74:2c:a4: 5f:ba:85:c8:50:49:f9:6a:c6:69:e8:a5:3f:93:aa:b3:27:52: 8c:4b:3f:38:df:29:72:32:dd:6e:e5:00:bb:c7:dc:41:c1:92: b0:29:c0:b0:58:42:aa:6c:47:a2:fa:3c:1d:a8:3e:8b:ac:15: d1:63:0b:e1:83:58:21:3f:92:b8:f8:b8:34:d1:c6:0f:a3:c6: c0:65:7a:f9:0f:1a:17:04:2c:9b:b7:92:b5:77:95:75:a1:a3: bb:3e:71:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYuyDiJDAPy5+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MDNkZDgxNTUtYTIwYi00MWU1LWFmNGMtOTNiZjRmYWVkZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSRosxHQFcT133J4CY8eQJLetS94SG/x3D+c tNdkEK6vaeBn61eJ0rQvf8vS9ndOGpJC8cFo/GmvlgRwmzcnsOkEaWLFumWwaTp0 xtUX2RMVWhV+Pf3JP1KltLSgEDecnjfybKcgCRdAitAOm32J7qbYfFhzY7DDFDqj TSQ7di2dGh2L6c05T/5OG1Xi3xvJ3eRcdEkAdu0Ejn5asU6V2b6bYzwBnYqeXTCD s6OCbprQ9btC7+rAD6KzlRXe9doMDax8jSvjh43CFYa3qznka7ZrG/bqF9pNpT/v NjAZ0XbmzWmUWoUjr0WzzRXFXxCbl6jx8j7xGtpwiDnzY13+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAltIHVH6Le1N7XoiiIH6/sVgBq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSYraAwv/4XYXhNyWjHIVBQgvzd7V2RcwT6LEQpNEpSm1GvU2cXx02e 2VtSet9DYuJjU6t3ViAPB5NZfB4UiWCaGVxEqAsfpGNGcHkqVD5NqfmFx6J5RHe6 PzyrDhe1vsS1iw92AOlWODqfEkpSuHQr/VgUFMgOKYO1dFpjCCmfBu8wgpEPa/2J znWdsVkzqIUvzgwks2N0sv771UMha3QspF+6hchQSflqxmnopT+TqrMnUoxLPzjf KXIy3W7lALvH3EHBkrApwLBYQqpsR6L6PB2oPousFdFjC+GDWCE/krj4uDTRxg+j xsBlevkPGhcELJu3krV3lXWho7s+cT8= -----END CERTIFICATE-----Generated at Wed Jun 18 14:38:21 2025 by rpki-client