$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa File: da93378e-6d07-3a1e-98f7-6ec0063c7938.roa (raw, json) Hash identifier: a06sA7hQd8q3MpVEjO6Zgbn9fW6/rEl34yi8onTTkGU= Subject key identifier: 6E:9F:81:E4:58:B0:D6:D2:57:54:F3:21:94:1E:E2:48:F9:D5:B6:F7 Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a Certificate serial: 010D0C9F4328584A2ABAE6DB0C2CDA9B20E52A80 Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 211392 IP address blocks: 23.145.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e6:db:0c:2c:da:9b:20:e5:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=53fc8f8c-2501-4e09-921a-bb1b4e75715f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:4f:36:55:a3:5d:13:64:60:3c:d5:c6:03: 7e:7b:9f:1a:e7:23:00:05:51:66:fe:50:f1:c4:75: b8:3a:76:dd:e1:79:dd:a5:04:37:23:4a:b8:13:1e: fa:f1:61:b8:3e:ce:cc:99:06:fe:37:b5:e5:cf:0c: fd:a8:18:69:15:dc:eb:d9:43:36:ed:e0:36:93:60: fc:b3:a0:78:31:14:13:68:fa:94:f6:98:26:e4:ff: ba:f2:74:2a:a3:8d:75:a5:8e:01:69:b5:23:73:31: 15:f9:bf:f4:5f:ba:cc:25:68:6b:bd:b4:00:cd:40: 9d:60:a6:e6:a5:18:a8:6b:7f:a0:f2:d1:61:3d:28: 69:43:3f:7d:2a:46:b4:82:bb:d8:30:ed:ab:69:17: 9c:8e:7b:14:17:52:8c:f0:ec:54:f3:01:15:d6:6e: 1c:a5:6f:5e:59:6c:af:b1:22:df:0b:95:18:38:9b: 9e:59:2e:72:cc:f3:d6:47:54:4e:ee:4d:3d:68:11: 9f:0f:da:f6:1a:1c:0c:83:75:d7:51:0f:e2:38:1c: 1c:22:06:66:7a:bc:6b:d0:b0:8a:0d:85:0e:85:2f: e9:d4:84:b8:c6:96:27:d8:fc:78:05:ef:94:31:60: 1f:6e:5c:bc:bf:4d:a0:e9:59:12:de:56:cc:62:0a: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9F:81:E4:58:B0:D6:D2:57:54:F3:21:94:1E:E2:48:F9:D5:B6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl X509v3 Authority Key Identifier: keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer sbgp-ipAddrBlock: critical IPv4: 23.145.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7b:86:00:67:b5:fd:e9:ed:12:aa:ce:45:bb:a7:bd:60:91: b6:dc:09:88:b0:57:9b:2b:be:d9:02:c5:cb:b3:d9:39:df:ed: f7:21:2c:fd:e3:2b:57:4b:e4:af:03:3e:09:3e:5e:7e:ff:a0: 05:46:ba:8a:fc:7b:49:b3:d3:84:55:af:f6:94:d0:bf:e5:38: 86:cf:fa:8c:16:0a:72:c6:ac:e7:7f:b9:1b:7f:1e:69:a9:7b: 15:00:f2:6c:b8:17:17:63:e0:60:13:bb:d0:f4:af:fa:03:52: 78:4f:11:9e:a7:8c:18:8b:49:46:22:15:0f:03:d8:62:ec:0e: 2e:3b:60:37:7d:3b:fc:64:3a:ea:1f:e5:9f:5a:4c:22:f6:72: 51:67:ba:a6:0a:37:67:d3:9a:17:33:6c:85:ec:e9:cc:d1:50: dd:db:18:2f:bf:c4:16:44:4e:a6:c2:dd:c2:55:89:21:b4:c8: d2:0f:39:9a:1b:94:41:35:48:97:9f:04:89:39:6b:c9:72:c7: 6c:c0:08:a1:86:67:57:1a:1a:b0:68:38:67:d0:4b:04:1f:12: 67:9c:33:31:04:49:62:68:5d:ac:3c:99:2c:c8:38:2d:43:bb: b3:fd:81:ea:ac:8f:fa:1b:2c:68:fc:bc:e9:51:cb:d5:bb:dc: 35:1e:1b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquubbDCzamyDlKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkxYTZjMDEtZGE2Yy00NDlhLTliNTAtYmE1NGZiODQw MzlhMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NTNmYzhmOGMtMjUwMS00ZTA5LTkyMWEtYmIxYjRlNzU3MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8NPNlWjXRNkYDzVxgN+e58a5yMABVFm/lDx xHW4Onbd4XndpQQ3I0q4Ex768WG4Ps7MmQb+N7Xlzwz9qBhpFdzr2UM27eA2k2D8 s6B4MRQTaPqU9pgm5P+68nQqo411pY4BabUjczEV+b/0X7rMJWhrvbQAzUCdYKbm pRioa3+g8tFhPShpQz99Kka0grvYMO2raRecjnsUF1KM8OxU8wEV1m4cpW9eWWyv sSLfC5UYOJueWS5yzPPWR1RO7k09aBGfD9r2GhwMg3XXUQ/iOBwcIgZmerxr0LCK DYUOhS/p1IS4xpYn2Px4Be+UMWAfbly8v02g6VkS3lbMYgoVqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6fgeRYsNbSV1TzIZQe4kj51bb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFh NmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4NDAzOWEvZGE5MzM3OGUtNmQwNy0z YTFlLTk4ZjctNmVjMDA2M2M3OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkxYTZjMDEtZGE2Yy00NDlhLTli NTAtYmE1NGZiODQwMzlhLzM5MWE2YzAxLWRhNmMtNDQ5YS05YjUwLWJhNTRmYjg0 MDM5YS5jcmwwHwYDVR0jBBgwFoAU02OLz5nQfmCBKU/RAYtha4JuYHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0 ZmI4NDAzOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC57hgBntf3p7RKqzkW7p71gkbbcCYiwV5srvtkCxcuz2Tnf7fchLP3j K1dL5K8DPgk+Xn7/oAVGuor8e0mz04RVr/aU0L/lOIbP+owWCnLGrOd/uRt/Hmmp exUA8my4Fxdj4GATu9D0r/oDUnhPEZ6njBiLSUYiFQ8D2GLsDi47YDd9O/xkOuof 5Z9aTCL2clFnuqYKN2fTmhczbIXs6czRUN3bGC+/xBZETqbC3cJViSG0yNIPOZob lEE1SJefBIk5a8lyx2zACKGGZ1caGrBoOGfQSwQfEmecMzEESWJoXaw8mSzIOC1D u7P9geqsj/obLGj8vOlRy9W73DUeG2w= -----END CERTIFICATE-----Generated at Mon Jun 16 05:31:11 2025 by rpki-client