$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json) Hash identifier: /ldPpNV2Vxp6snXwr/QyeeLIbCX4Q/SaTm5bEpeE8tg= Subject key identifier: A8:16:60:11:C8:B9:84:67:01:75:48:9C:2B:32:F2:90:5A:25:9B:8E Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F4328584A0C0572C23F6E2A7A50D62800 Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 394989 IP address blocks: 23.151.192.0/24 maxlen: 24 23.151.193.0/24 maxlen: 24 2602:febb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:72:c2:3f:6e:2a:7a:50:d6:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=cd055872-4edd-459e-aac7-6bc823dc1c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:6f:02:93:d9:74:69:a3:6d:5f:3d:30:ac: af:b0:21:9b:55:58:3d:32:de:86:69:4e:67:64:51: ef:b7:e1:f2:41:84:f5:6f:f4:e2:d1:b8:e9:3e:fa: 19:e7:42:13:02:6d:ef:34:a4:3c:38:ac:5a:3f:bd: 20:e9:f8:d4:e6:c0:76:3b:78:91:c8:72:5f:a8:9a: bc:10:5b:45:17:57:d4:1c:d1:2b:30:51:c6:13:30: 75:5e:47:f6:fb:ae:87:07:92:5d:29:33:b8:20:30: 9d:81:bb:36:f3:23:17:c7:2b:00:14:25:84:a4:8f: 72:54:fe:cf:a5:90:f6:3d:9e:97:53:27:61:a9:41: e9:5c:e7:fe:36:56:01:25:00:4e:b9:f4:22:6e:62: 6c:2b:53:25:ed:06:fa:fa:63:74:af:19:03:4c:6d: a3:be:e7:18:32:94:b1:66:13:2e:95:f9:2a:b4:d3: 81:4e:93:73:cf:f4:9d:31:6e:4f:38:a6:8b:d2:3e: 08:26:f4:14:7b:53:23:d4:53:d5:98:6d:4a:4b:41: 13:e6:b5:58:6d:09:35:bc:84:6f:56:83:9e:08:ac: 18:9a:c6:b1:76:6e:a1:5b:29:8c:10:dc:91:86:cf: e8:0d:a8:db:d2:3b:40:f6:12:36:f4:8d:50:84:44: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:60:11:C8:B9:84:67:01:75:48:9C:2B:32:F2:90:5A:25:9B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: 23.151.192.0/23 IPv6: 2602:febb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:84:15:ab:70:2f:ce:bc:fc:a0:5c:03:5b:42:f3:cd:90:5e: e5:de:9c:69:8d:05:29:2a:d0:d2:fb:d7:d4:29:2a:f7:7f:7d: ec:8b:6e:5b:98:b6:4c:b7:66:39:f8:d7:4a:83:1b:bf:5d:ba: 8c:b4:46:ec:af:ba:97:8a:3a:23:c6:7c:b9:d0:f8:43:fc:c8: cb:ff:a7:e1:0c:44:ba:fe:7b:bf:47:ee:ef:e6:33:7d:02:52: 0e:3b:73:5f:b2:c1:d9:ce:63:5c:4c:2f:20:83:4b:1d:8f:42: b5:2c:d6:9b:2d:00:a0:8b:71:d0:0b:29:eb:7b:a1:0d:fa:f9: 91:75:eb:e7:db:19:9b:49:b9:91:34:4a:fd:c1:c5:a5:19:72: 88:03:90:6e:ec:e7:51:bd:7e:6b:d2:cb:02:ad:91:e7:4b:95: 37:f7:52:65:8c:f3:9f:f6:4a:28:be:5c:d0:01:2b:f9:f9:e1: 61:55:b0:3d:fa:13:38:72:00:a3:0b:f1:b7:ac:f4:bb:f2:fc: c8:eb:67:e8:ea:d0:62:e3:c7:a7:12:5e:d6:fc:a4:c1:db:a0: 45:27:99:b5:01:d8:a2:f0:41:5e:a6:c4:8f:01:d7:9c:99:dc: ee:dd:53:e9:de:1f:85:eb:02:7f:67:fd:06:64:65:0b:5e:d5: 0a:73:e7:5c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoMBXLCP24qelDWKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Y2QwNTU4NzItNGVkZC00NTllLWFhYzctNmJjODIzZGMxYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhZvApPZdGmjbV89MKyvsCGbVVg9Mt6GaU5n ZFHvt+HyQYT1b/Ti0bjpPvoZ50ITAm3vNKQ8OKxaP70g6fjU5sB2O3iRyHJfqJq8 EFtFF1fUHNErMFHGEzB1Xkf2+66HB5JdKTO4IDCdgbs28yMXxysAFCWEpI9yVP7P pZD2PZ6XUydhqUHpXOf+NlYBJQBOufQibmJsK1Ml7Qb6+mN0rxkDTG2jvucYMpSx ZhMulfkqtNOBTpNzz/SdMW5POKaL0j4IJvQUe1Mj1FPVmG1KS0ET5rVYbQk1vIRv VoOeCKwYmsaxdm6hWymMENyRhs/oDajb0jtA9hI29I1QhEQXDQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKgWYBHIuYRnAXVInCsy8pBaJZuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYzdmYjAxMjAtODQ3My0z MTZlLTgxYjQtNzBmOTEyMWMwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5fAMA4E AgACMAgDBgQmAv67ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIhBWrcC/OvPygXANbQvPNkF7l3pxpjQUp KtDS+9fUKSr3f33si25bmLZMt2Y5+NdKgxu/XbqMtEbsr7qXijojxny50PhD/MjL /6fhDES6/nu/R+7v5jN9AlIOO3NfssHZzmNcTC8gg0sdj0K1LNabLQCgi3HQCynr e6EN+vmRdevn2xmbSbmRNEr9wcWlGXKIA5Bu7OdRvX5r0ssCrZHnS5U391JljPOf 9koovlzQASv5+eFhVbA9+hM4cgCjC/G3rPS78vzI62fo6tBi48enEl7W/KTB26BF J5m1Adii8EFepsSPAdecmdzu3VPp3h+F6wJ/Z/0GZGULXtUKc+dc -----END CERTIFICATE-----Generated at Tue Jun 17 08:59:42 2025 by rpki-client