$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa File: 5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa (raw, json) Hash identifier: BoBO1iHsODQ5eFiJbSX9f2GE2n2Ci/4cU2o7o2pqBlk= Subject key identifier: 9B:D6:2E:A4:50:4E:34:29:69:F5:B3:3C:95:32:AD:41:F3:A1:03:EE Certificate issuer: /CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Certificate serial: 010D0C9F4328584A2C201737AC23A1629C521380 Authority key identifier: 0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 401214 IP address blocks: 23.183.152.0/24 maxlen: 24 2602:f888::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:17:37:ac:23:a1:62:9c:52:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2845a4-b952-4ab7-9cdb-d432ca530dd9 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=2fe48ae7-0235-492f-9700-d6492c805cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:5a:59:24:46:81:eb:46:5c:62:bc:eb:1e: 48:0a:54:22:bc:34:4d:ca:4a:ad:cf:b9:9d:9e:cf: d2:07:1d:d9:72:cd:95:0d:13:52:1a:5f:cb:19:ea: b7:4b:4b:f5:98:23:cf:b1:b5:3e:78:73:1b:7c:b3: 78:69:1d:15:b0:2e:87:58:41:8a:ba:f6:9d:f7:78: 02:37:46:46:43:69:63:4c:29:4e:ea:e2:90:4e:37: 83:8a:3d:5b:43:05:3b:6b:6f:bd:5e:f6:07:47:7a: 5d:26:07:b5:c5:ac:6e:56:37:c6:dd:42:21:13:bf: c6:99:85:e6:c2:1c:73:5d:a6:da:b7:31:6a:58:11: 53:07:01:eb:a5:fe:26:07:11:22:59:dc:a5:2e:1c: 66:df:1b:5b:bc:81:1c:dd:c3:5c:08:2f:af:16:d4: 38:34:ab:ef:44:af:a9:fb:38:a4:9e:a2:db:d4:23: f7:55:af:52:07:99:45:44:8e:43:3c:d2:2c:12:7e: 80:02:73:fb:e8:5a:6d:40:42:fa:73:ac:18:da:09: 83:41:04:d6:ba:7c:49:64:5d:33:7b:37:b0:07:26: 03:00:22:7b:6c:a2:34:60:63:93:52:3c:73:ae:9b: 63:62:80:22:7f:ed:54:a1:76:3e:cd:29:7d:31:e6: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D6:2E:A4:50:4E:34:29:69:F5:B3:3C:95:32:AD:41:F3:A1:03:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5901ce23-13b6-30e0-ab94-3ae79fb72dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.crl X509v3 Authority Key Identifier: keyid:0D:4B:24:A0:6E:CC:9A:63:0F:75:61:B5:63:F2:70:B8:95:57:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d2845a4-b952-4ab7-9cdb-d432ca530dd9.cer sbgp-ipAddrBlock: critical IPv4: 23.183.152.0/24 IPv6: 2602:f888::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:df:1f:e6:ba:c1:db:87:0f:dd:9d:9f:06:da:62:29:40:ca: c5:ef:e1:2d:5c:7b:9b:0e:ad:19:8b:fc:6d:67:49:47:21:c3: 31:ff:3f:a0:70:bc:e2:84:8d:cf:bd:d6:97:4f:1f:49:68:0e: 44:8a:3c:58:37:e6:d0:da:c7:33:dc:1f:8a:33:3f:71:42:2b: 9d:62:d4:15:c5:4e:41:2a:ee:5f:43:d9:b5:79:06:20:a8:7f: 61:83:8f:49:71:bb:fa:2c:ae:12:aa:dc:aa:d6:77:70:b6:d2: fb:44:89:77:4b:f0:82:dd:05:1d:0c:63:a9:a1:98:c1:83:e0: c7:c7:d7:09:24:2d:13:76:ca:fa:2c:b4:84:ea:7e:00:d3:b7: 29:f9:48:aa:49:18:51:23:32:42:8b:f2:dd:1a:b0:f8:4a:0e: c4:17:97:42:aa:8b:7b:3c:85:70:08:d6:8e:29:93:b7:12:3c: be:54:bc:40:13:48:4d:70:1d:28:80:c3:93:31:e5:f1:8a:4f: ab:6a:14:7b:59:11:98:24:57:73:28:c4:b7:ae:02:86:50:17: f0:af:e1:67:9b:f2:d5:b5:69:cc:aa:87:c6:6e:02:8f:80:8e: 5b:8e:c1:c5:c6:5b:3d:68:9d:96:02:f0:51:ba:70:c3:a8:f4: fa:1b:6e:b8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEosIBc3rCOhYpxSE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQyODQ1YTQtYjk1Mi00YWI3LTljZGItZDQzMmNhNTMw ZGQ5MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MmZlNDhhZTctMDIzNS00OTJmLTk3MDAtZDY0OTJjODA1Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iZaWSRGgetGXGK86x5IClQivDRNykqtz7md ns/SBx3Zcs2VDRNSGl/LGeq3S0v1mCPPsbU+eHMbfLN4aR0VsC6HWEGKuvad93gC N0ZGQ2ljTClO6uKQTjeDij1bQwU7a2+9XvYHR3pdJge1xaxuVjfG3UIhE7/GmYXm whxzXabatzFqWBFTBwHrpf4mBxEiWdylLhxm3xtbvIEc3cNcCC+vFtQ4NKvvRK+p +ziknqLb1CP3Va9SB5lFRI5DPNIsEn6AAnP76FptQEL6c6wY2gmDQQTWunxJZF0z ezewByYDACJ7bKI0YGOTUjxzrptjYoAif+1UoXY+zSl9MebCjwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJvWLqRQTjQpafWzPJUyrUHzoQPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDI4 NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMyY2E1MzBkZDkvNTkwMWNlMjMtMTNiNi0z MGUwLWFiOTQtM2FlNzlmYjcyZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQyODQ1YTQtYjk1Mi00YWI3LTlj ZGItZDQzMmNhNTMwZGQ5LzVkMjg0NWE0LWI5NTItNGFiNy05Y2RiLWQ0MzJjYTUz MGRkOS5jcmwwHwYDVR0jBBgwFoAUDUskoG7MmmMPdWG1Y/JwuJVXISswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDI4NDVhNC1iOTUyLTRhYjctOWNkYi1kNDMy Y2E1MzBkZDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7eYMA4E AgACMAgDBgAmAviIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj3x/musHbhw/dnZ8G2mIpQMrF7+EtXHub Dq0Zi/xtZ0lHIcMx/z+gcLzihI3PvdaXTx9JaA5EijxYN+bQ2scz3B+KMz9xQiud YtQVxU5BKu5fQ9m1eQYgqH9hg49Jcbv6LK4Sqtyq1ndwttL7RIl3S/CC3QUdDGOp oZjBg+DHx9cJJC0Tdsr6LLSE6n4A07cp+UiqSRhRIzJCi/LdGrD4Sg7EF5dCqot7 PIVwCNaOKZO3Ejy+VLxAE0hNcB0ogMOTMeXxik+rahR7WRGYJFdzKMS3rgKGUBfw r+Fnm/LVtWnMqofGbgKPgI5bjsHFxls9aJ2WAvBRunDDqPT6G264 -----END CERTIFICATE-----Generated at Sun Jun 15 17:43:29 2025 by rpki-client