$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: +yIClwz6/nlNV0iHX+n95jN4NO3nMHa1jaKMuc5YNY4= Subject key identifier: 7E:AA:50:B3:E6:0E:E0:D7:AB:45:4F:CF:8D:13:9A:51:D9:DE:82:0A Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584A1B6007E060EECA923D7FFC40 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:07:e0:60:ee:ca:92:3d:7f:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=2d86dc0c-4fa4-4592-9002-c0f8cfa7a3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:82:61:80:bc:9f:af:d5:f8:dc:5d:ef:fe: 70:c5:d5:56:6e:0b:2e:19:91:cf:1a:81:5f:89:98: 0b:e8:c4:b2:c5:44:e1:79:7a:be:52:79:ef:08:31: ec:7d:f4:ef:91:bd:a3:cf:bf:85:12:f2:5d:1a:1b: 49:1b:15:61:b2:73:dd:bb:fe:e1:fc:0f:97:f5:62: 10:6c:ac:fb:40:2f:3c:ca:79:39:52:d0:5b:91:8a: 81:21:a5:7a:07:85:21:3e:e1:cb:7b:c2:2a:b1:70: 34:d5:e2:c3:47:6f:8e:49:8c:51:88:6b:95:b3:5a: 7f:39:13:16:71:34:04:ec:3e:23:3c:a6:ec:a4:58: 70:20:30:ce:7a:e8:f2:62:6a:b4:c5:58:6e:88:ec: 54:c2:4f:8d:27:60:13:54:9a:ab:43:4d:d6:a7:8d: 63:32:35:0a:bb:f7:fc:f2:0a:01:8e:16:4e:b7:77: 52:12:22:35:94:b2:6e:2e:c1:95:4c:c9:cc:24:4a: 5a:99:a2:01:d4:ad:1b:bf:ef:45:9a:e6:23:cc:1e: 4c:9f:52:e0:38:ae:7d:84:9d:da:f3:06:4c:ca:a0: 8a:73:65:ca:8f:10:a0:7a:44:0e:88:9e:78:01:b9: 70:e1:e9:de:77:95:db:b1:48:c7:ba:e2:3b:a4:62: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AA:50:B3:E6:0E:E0:D7:AB:45:4F:CF:8D:13:9A:51:D9:DE:82:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:14:e2:64:b6:59:de:fd:cf:ee:38:30:c7:f9:5c:08:55:59: b7:29:22:c9:02:1a:15:5a:fd:d2:be:fb:a3:12:07:39:d0:01: 68:20:87:98:3e:2c:fa:50:62:50:d5:6c:83:7d:7a:3f:cf:56: c1:27:80:fd:d4:40:a8:fa:56:51:e8:fd:2c:a8:a0:8d:95:df: dd:db:aa:b1:86:21:c0:7e:01:b5:ea:92:f1:85:59:d4:65:05: 16:2e:ff:eb:d0:39:a7:95:6a:75:f0:71:7d:e0:76:b8:0e:dd: 9d:4b:bf:60:18:45:32:f7:7c:c7:03:ae:06:07:c1:97:c8:b6: 6d:3d:55:86:a3:46:20:cd:6d:27:23:6e:5b:ea:4a:ac:9a:87: 02:94:29:33:bd:eb:fd:39:ab:88:36:9d:91:9a:18:af:a2:d1: bd:ed:2c:f3:12:3a:09:75:b0:84:f3:ab:94:dc:e0:1f:d6:cb: 23:34:74:4e:92:9c:be:57:60:1d:31:ec:a6:b9:31:e1:50:69: 57:32:8b:20:8b:9a:ad:01:08:79:77:69:93:0d:97:fc:c1:a8: 90:37:d0:ff:74:9a:49:7a:f1:90:e1:f9:a0:4c:31:1c:c3:ac: af:66:b4:71:68:36:75:8c:81:ee:56:11:b3:1d:36:a8:d8:60: 8c:81:07:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAfgYO7Kkj1//EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MmQ4NmRjMGMtNGZhNC00NTkyLTkwMDItYzBmOGNmYTdhM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4muCYYC8n6/V+Nxd7/5wxdVWbgsuGZHPGoFf iZgL6MSyxUTheXq+UnnvCDHsffTvkb2jz7+FEvJdGhtJGxVhsnPdu/7h/A+X9WIQ bKz7QC88ynk5UtBbkYqBIaV6B4UhPuHLe8IqsXA01eLDR2+OSYxRiGuVs1p/ORMW cTQE7D4jPKbspFhwIDDOeujyYmq0xVhuiOxUwk+NJ2ATVJqrQ03Wp41jMjUKu/f8 8goBjhZOt3dSEiI1lLJuLsGVTMnMJEpamaIB1K0bv+9FmuYjzB5Mn1LgOK59hJ3a 8wZMyqCKc2XKjxCgekQOiJ54Ablw4ened5XbsUjHuuI7pGJ0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6qULPmDuDXq0VPz40TmlHZ3oIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgU4mS2Wd79z+44MMf5XAhVWbcpIskCGhVa/dK++6MSBznQAWggh5g+ LPpQYlDVbIN9ej/PVsEngP3UQKj6VlHo/SyooI2V393bqrGGIcB+AbXqkvGFWdRl BRYu/+vQOaeVanXwcX3gdrgO3Z1Lv2AYRTL3fMcDrgYHwZfItm09VYajRiDNbScj blvqSqyahwKUKTO96/05q4g2nZGaGK+i0b3tLPMSOgl1sITzq5Tc4B/WyyM0dE6S nL5XYB0x7Ka5MeFQaVcyiyCLmq0BCHl3aZMNl/zBqJA30P90mkl68ZDh+aBMMRzD rK9mtHFoNnWMge5WEbMdNqjYYIyBB64= -----END CERTIFICATE-----Generated at Sun Jun 15 03:30:35 2025 by rpki-client