$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa File: 829029bf-93c1-3123-a84b-0e8364d0d0e8.roa (raw, json) Hash identifier: +wsZEGq2TBPnH4BC7P0BXiUBT3SoxGZ4YZZIL4JTwYg= Subject key identifier: 34:0B:E9:34:33:B4:E7:B2:19:C8:63:A3:5C:61:9A:A0:BF:40:89:67 Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584A14656614D1A9F13DB65B0C80 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 200510 IP address blocks: 23.144.152.0/24 maxlen: 24 2602:2f2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:66:14:d1:a9:f1:3d:b6:5b:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=fe961ea9-1649-407f-ad4a-238ef50ac04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:da:17:91:86:91:2e:4c:c5:5f:eb:98:19: 4d:48:7b:d4:0f:e8:3e:67:e2:42:fb:f1:a5:e1:2f: 56:73:5c:e0:a7:fe:9c:44:a7:1a:52:4f:b6:f0:55: 5b:f8:b5:3a:09:fd:8d:d8:25:fd:af:ac:d7:30:53: 82:b1:4b:6e:17:52:08:26:07:94:da:4b:40:3f:37: c4:4d:b1:a7:a3:1e:f8:22:60:c0:f6:5a:1b:24:92: af:46:d5:9a:29:df:18:ec:c8:fc:20:cf:56:66:1c: 56:0f:09:ac:d3:72:2d:ca:b4:4d:f6:3c:f1:90:e9: b0:c7:ad:d5:92:92:a7:45:3e:61:13:3a:ba:0f:ce: 0c:52:e5:74:ef:29:c7:57:f9:96:96:f5:b4:9d:ba: 15:52:99:5c:9e:dd:aa:f3:94:89:4c:95:21:ea:08: 1f:1f:df:9d:02:1d:5d:e8:5d:67:11:78:ad:7f:52: 24:75:a6:a6:21:b9:4c:ff:db:fe:60:d2:9d:bc:11: cf:67:1a:0a:07:89:08:c1:be:da:8e:b8:f4:e2:b3: aa:c4:79:39:f7:61:92:22:dd:af:49:f3:07:48:6a: 5d:31:a2:ae:15:4f:ae:28:05:17:73:1d:81:48:4d: 1f:79:04:f1:0e:fd:5b:1d:64:f4:74:3b:d9:80:6e: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:E9:34:33:B4:E7:B2:19:C8:63:A3:5C:61:9A:A0:BF:40:89:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.144.152.0/24 IPv6: 2602:2f2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:81:91:72:a2:9d:b1:cf:fb:e0:44:14:7e:8f:f3:52:31:4f: cd:90:3d:53:b4:b4:01:e6:67:5b:4a:4c:9d:78:3d:0e:06:66: 20:65:54:6e:73:9b:52:6c:df:8c:45:10:ca:4e:94:69:bd:19: da:ec:14:01:e3:2c:86:e6:e8:92:13:23:ca:68:19:9f:3e:6a: 5b:1c:5c:62:d0:02:9a:7a:63:6a:22:1d:6f:a7:30:e4:1a:6f: 3c:e6:39:ea:ac:17:35:dd:f9:e1:95:e7:ab:49:8f:d0:2c:4f: 6b:54:a9:49:b5:26:a1:37:cc:93:49:79:63:c9:9f:d0:79:c9: 23:9f:97:96:d1:89:25:35:16:24:a2:0d:61:9b:01:90:52:43: dc:56:eb:73:26:5a:43:3a:4a:f4:10:10:6a:b9:bb:bb:af:6d: 5b:86:80:a4:f8:75:c5:6a:2e:0a:43:38:c0:c0:7b:08:59:97: ea:8e:10:ca:8a:29:43:e4:66:65:40:b9:43:d6:e7:ad:3d:e6: b2:fb:8d:d2:48:08:85:5f:5e:98:93:bb:b8:a4:4f:b9:14:de: 8e:43:3f:92:0e:00:6f:6f:07:18:ff:32:77:4f:06:b8:5c:b1: 9d:02:73:f2:d4:7e:d1:2b:b2:0b:f5:ae:fb:2a:87:27:75:ba: a2:b3:22:16 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoUZWYU0anxPbZbDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmU5NjFlYTktMTY0OS00MDdmLWFkNGEtMjM4ZWY1MGFjMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK3aF5GGkS5MxV/rmBlNSHvUD+g+Z+JC+/Gl 4S9Wc1zgp/6cRKcaUk+28FVb+LU6Cf2N2CX9r6zXMFOCsUtuF1IIJgeU2ktAPzfE TbGnox74ImDA9lobJJKvRtWaKd8Y7Mj8IM9WZhxWDwms03ItyrRN9jzxkOmwx63V kpKnRT5hEzq6D84MUuV07ynHV/mWlvW0nboVUplcnt2q85SJTJUh6ggfH9+dAh1d 6F1nEXitf1IkdaamIblM/9v+YNKdvBHPZxoKB4kIwb7ajrj04rOqxHk592GSIt2v SfMHSGpdMaKuFU+uKAUXcx2BSE0feQTxDv1bHWT0dDvZgG49rwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDQL6TQztOeyGchjo1xhmqC/QIlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvODI5MDI5YmYtOTNjMS0z MTIzLWE4NGItMGU4MzY0ZDBkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5CYMA4E AgACMAgDBgAmAgLyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAegZFyop2xz/vgRBR+j/NSMU/NkD1TtLQB 5mdbSkydeD0OBmYgZVRuc5tSbN+MRRDKTpRpvRna7BQB4yyG5uiSEyPKaBmfPmpb HFxi0AKaemNqIh1vpzDkGm885jnqrBc13fnhleerSY/QLE9rVKlJtSahN8yTSXlj yZ/Qeckjn5eW0YklNRYkog1hmwGQUkPcVutzJlpDOkr0EBBqubu7r21bhoCk+HXF ai4KQzjAwHsIWZfqjhDKiilD5GZlQLlD1uetPeay+43SSAiFX16Yk7u4pE+5FN6O Qz+SDgBvbwcY/zJ3Twa4XLGdAnPy1H7RK7IL9a77KocndbqisyIW -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:49 2025 by rpki-client