$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa File: d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa (raw, json) Hash identifier: IM1Vc5aefP4c2XAZAblPCG8RcmvJkfeMvWMXZIARKL4= Subject key identifier: 28:C7:71:A6:D0:86:71:BD:83:19:99:94:19:15:EA:D8:E9:01:72:48 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849F17FB2DF2EB41A4B274F9C00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 19437 IP address blocks: 23.235.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b2:df:2e:b4:1a:4b:27:4f:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=1c1e4ba8-e0b9-478e-b218-29c0f2ad3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:8c:47:59:4a:aa:ac:cc:31:c0:e7:b0:75: e0:ea:98:60:fb:7a:fd:9d:23:ca:9f:e2:3b:c2:fb: 47:ce:54:e1:68:03:14:f6:fc:58:b0:d6:96:e1:e6: 5f:ad:28:05:20:cf:8e:e0:b9:c2:73:0e:c9:76:9f: 89:30:aa:bc:18:6c:76:14:a1:3c:83:88:8d:1e:c4: fb:98:07:08:af:c3:97:2b:3f:4f:0c:1a:40:86:f2: 3b:f4:af:ca:ff:d7:1c:0d:0f:64:f4:04:33:4f:34: 1d:43:f4:38:20:78:2e:9f:54:49:73:1b:5c:c7:6f: 6b:2a:33:61:f6:4d:48:48:e5:d9:a2:ea:4c:7c:6a: f1:7d:d2:fd:08:0c:e1:de:9a:1a:23:0b:ca:8e:21: c5:71:ce:76:6b:84:47:3f:57:8b:5b:d1:60:81:34: f6:a1:b6:c6:2d:86:80:60:b1:6f:19:b2:e7:35:c4: da:a9:36:1b:d8:c0:54:25:59:b4:cc:f2:34:c6:ae: 86:b6:e2:77:ff:a1:6e:22:73:f1:9d:59:24:bf:0f: bd:c9:01:b9:de:b1:47:22:c6:92:75:9e:a6:b5:7e: 72:53:c9:c5:4d:1c:4c:c9:69:15:c5:a0:f7:a6:db: b1:ab:18:3e:19:ba:94:5e:ef:47:a9:0d:cd:67:85: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:71:A6:D0:86:71:BD:83:19:99:94:19:15:EA:D8:E9:01:72:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6f:0b:72:83:b7:64:b9:7a:ad:83:f7:10:58:bd:fd:e3:f5: f6:ff:e7:8c:8f:c8:46:fe:fa:96:b5:2c:76:06:0f:5c:ab:66: 60:5f:ae:40:e7:c3:b0:b1:3d:9a:d0:a8:2c:d5:46:e4:04:ad: 96:77:c9:e9:a6:89:5b:80:28:63:80:ea:d1:39:96:51:65:86: f2:04:ec:45:28:cf:88:cf:aa:15:9e:c4:41:12:c0:23:4a:a8: bb:67:c4:3f:8e:56:4f:34:ea:b9:33:b5:73:65:fe:e7:3f:d5: d4:4b:b7:37:5a:1b:cd:50:49:62:a3:85:4a:66:2e:6f:95:7b: 59:f8:0e:66:15:0b:30:fc:f5:c5:88:2b:eb:a3:b7:41:b0:81: af:17:26:58:e5:9c:f4:50:08:a1:f6:a3:b7:09:ae:26:76:66: 7c:b6:a5:b0:55:6e:03:63:2f:c5:8f:d0:55:a2:89:14:05:07: 5c:7d:50:d4:39:7e:05:ca:37:92:ad:33:fb:61:99:3c:d8:97: 30:03:61:05:e7:42:3e:b3:6c:40:97:f3:8a:31:35:21:2a:32: b6:4a:91:bc:bf:81:cf:4c:ed:09:86:2e:e4:15:47:62:88:85: 53:14:ee:da:e7:ca:a8:e6:27:a5:88:72:53:77:4b:97:c5:ed: e5:b2:cd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7LfLrQaSydPnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MWMxZTRiYTgtZTBiOS00NzhlLWIyMTgtMjljMGYyYWQzMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth+MR1lKqqzMMcDnsHXg6phg+3r9nSPKn+I7 wvtHzlThaAMU9vxYsNaW4eZfrSgFIM+O4LnCcw7Jdp+JMKq8GGx2FKE8g4iNHsT7 mAcIr8OXKz9PDBpAhvI79K/K/9ccDQ9k9AQzTzQdQ/Q4IHgun1RJcxtcx29rKjNh 9k1ISOXZoupMfGrxfdL9CAzh3poaIwvKjiHFcc52a4RHP1eLW9FggTT2obbGLYaA YLFvGbLnNcTaqTYb2MBUJVm0zPI0xq6GtuJ3/6FuInPxnVkkvw+9yQG53rFHIsaS dZ6mtX5yU8nFTRxMyWkVxaD3ptuxqxg+GbqUXu9HqQ3NZ4X3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjHcabQhnG9gxmZlBkV6tjpAXJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDdmYzQxMWItNjZiOS0z NWYyLTliYWMtMWE5MWIxOGVlMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZvC3KDt2S5eq2D9xBYvf3j9fb/54yPyEb++pa1LHYGD1yrZmBfrkDn w7CxPZrQqCzVRuQErZZ3yemmiVuAKGOA6tE5llFlhvIE7EUoz4jPqhWexEESwCNK qLtnxD+OVk806rkztXNl/uc/1dRLtzdaG81QSWKjhUpmLm+Ve1n4DmYVCzD89cWI K+ujt0Gwga8XJljlnPRQCKH2o7cJriZ2Zny2pbBVbgNjL8WP0FWiiRQFB1x9UNQ5 fgXKN5KtM/thmTzYlzADYQXnQj6zbECX84oxNSEqMrZKkby/gc9M7QmGLuQVR2KI hVMU7trnyqjmJ6WIclN3S5fF7eWyzQs= -----END CERTIFICATE-----Generated at Sun Jun 15 12:14:35 2025 by rpki-client