$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: N9qn+9Rv9nyrF+BVZrNUD2Xfszpkfi/mZEahXNu+m8c= Subject key identifier: D4:64:93:CD:A0:51:FA:E7:6D:AB:3D:2C:DF:19:87:22:AA:17:48:0F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849F17FB815CD906A6E49669900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b8:15:cd:90:6a:6e:49:66:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=35d73fd9-0442-4bac-bc74-6e4bbbbb28a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:8f:b3:92:85:e1:91:2c:59:b8:41:71:97: 84:58:b9:ee:3b:e9:52:b7:e6:7e:4a:70:92:c6:7b: d3:0c:1f:0a:04:25:1a:6c:eb:ec:cc:83:b6:e7:58: 3b:d1:99:78:03:4b:d6:44:16:a6:69:c5:13:a0:d0: 49:5e:9a:fa:83:fc:32:18:57:ea:b4:39:82:f4:ff: 1e:f6:2e:4d:98:b1:39:89:14:06:d7:8d:b1:a4:46: 56:f8:ba:e5:a4:6c:8b:20:5d:ce:bc:e0:f2:af:c3: d7:93:d8:12:48:2b:c6:97:2e:5f:a8:71:0a:15:f1: b5:5a:49:ee:ca:4e:d0:d9:23:13:8a:a8:49:6f:63: 79:b0:7b:09:d0:a6:56:bf:1a:a7:66:6f:d8:e0:e7: d6:3a:f6:f9:d1:db:9e:b4:fd:20:aa:6b:05:0c:ca: 27:20:7f:b3:cb:01:c6:e6:a0:73:70:35:43:7b:61: 7f:df:6d:52:d2:69:72:cb:e4:9e:10:63:88:10:be: 7e:51:a3:c6:1d:2c:d7:55:0c:39:3c:3d:85:9d:a2: cf:a3:de:e8:1e:7d:76:fd:80:f6:ad:e7:c5:db:c9: 01:1f:c6:e4:a5:b5:21:0a:e7:60:c0:c6:43:66:20: bf:af:d0:7d:a2:4b:7e:4d:d2:85:54:00:6f:f2:62: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:93:CD:A0:51:FA:E7:6D:AB:3D:2C:DF:19:87:22:AA:17:48:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:77:6a:b0:16:a3:e8:84:04:82:6f:4b:fa:dc:b4:7e:27:7c: 16:15:c9:77:87:74:4e:46:79:b7:dd:a2:b5:2c:cc:ed:0f:6d: 11:fe:f2:58:2d:cb:f2:78:4f:0e:8f:e3:f6:66:24:f3:ca:e6: ed:54:77:11:8e:26:3f:13:6e:05:2e:c2:0e:e4:b0:da:96:47: fa:c3:89:b6:51:e3:4e:d2:c8:31:69:67:08:9b:cf:37:76:b4: 87:bc:f0:61:b6:a7:cf:ce:df:0a:55:27:0a:14:d3:51:24:12: 52:4e:db:f5:1c:fb:2a:90:66:df:5b:c2:31:9c:3c:8a:af:50: 93:8e:5f:6d:91:3f:3e:23:c8:95:37:c5:06:b6:a4:f1:53:81: 78:1a:06:fe:b5:f2:de:a1:dd:18:46:49:36:24:28:27:a1:79: e1:12:2e:cf:29:f9:12:86:0a:71:59:3a:23:7f:db:fc:03:17: 68:1b:22:b3:70:1c:63:90:e4:84:8c:74:2b:a4:0b:99:16:91: 97:4b:3f:1e:c3:91:1e:59:29:39:0b:75:df:ee:c9:03:8b:c7: 1a:7a:66:05:38:d6:1c:93:13:61:6d:91:1c:a5:84:1e:b7:6b: 66:62:63:9c:90:75:02:ad:8e:43:04:da:e3:8c:30:c6:20:70: da:30:ab:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7gVzZBqbklmmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MzVkNzNmZDktMDQ0Mi00YmFjLWJjNzQtNmU0YmJiYmIyOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyiPs5KF4ZEsWbhBcZeEWLnuO+lSt+Z+SnCS xnvTDB8KBCUabOvszIO251g70Zl4A0vWRBamacUToNBJXpr6g/wyGFfqtDmC9P8e 9i5NmLE5iRQG142xpEZW+LrlpGyLIF3OvODyr8PXk9gSSCvGly5fqHEKFfG1Wknu yk7Q2SMTiqhJb2N5sHsJ0KZWvxqnZm/Y4OfWOvb50duetP0gqmsFDMonIH+zywHG 5qBzcDVDe2F/321S0mlyy+SeEGOIEL5+UaPGHSzXVQw5PD2FnaLPo97oHn12/YD2 refF28kBH8bkpbUhCudgwMZDZiC/r9B9okt+TdKFVABv8mK6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRkk82gUfrnbas9LN8ZhyKqF0gPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC53arAWo+iEBIJvS/rctH4nfBYVyXeHdE5GebfdorUszO0PbRH+8lgt y/J4Tw6P4/ZmJPPK5u1UdxGOJj8TbgUuwg7ksNqWR/rDibZR407SyDFpZwibzzd2 tIe88GG2p8/O3wpVJwoU01EkElJO2/Uc+yqQZt9bwjGcPIqvUJOOX22RPz4jyJU3 xQa2pPFTgXgaBv618t6h3RhGSTYkKCeheeESLs8p+RKGCnFZOiN/2/wDF2gbIrNw HGOQ5ISMdCukC5kWkZdLPx7DkR5ZKTkLdd/uyQOLxxp6ZgU41hyTE2FtkRylhB63 a2ZiY5yQdQKtjkME2uOMMMYgcNowqzM= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:13 2025 by rpki-client