$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa File: 1334152e-2583-37bf-87f6-7f569ffa4d42.roa (raw, json) Hash identifier: IPeeIL9Xb4pvmLcSeXfh6gcINnwY/8tqxW+VbMWfW/g= Subject key identifier: 2E:C4:33:4E:80:C4:50:06:3E:EE:05:65:1E:D9:35:60:11:0F:A4:D4 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F43285849F71508D4D8ADF2958F18D164 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 400536 IP address blocks: 23.134.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:08:d4:d8:ad:f2:95:8f:18:d1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=e247295f-e196-4d7c-9984-8aa9494da5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:85:af:20:7f:e3:69:47:e9:1d:c3:99:39: 3d:59:07:f7:9f:0c:ad:06:84:da:83:ec:13:02:fb: c4:f6:06:47:e5:ad:af:3a:83:34:05:99:9e:7c:d7: 2f:4e:53:20:0b:f8:e2:67:db:2f:f8:fd:87:bf:d5: 55:66:5e:ab:32:e2:67:13:18:15:e1:0b:8c:ba:76: 72:47:b8:77:a3:de:7b:15:a4:9a:b7:31:99:f8:c5: bf:c6:fc:20:b3:ff:25:de:84:bf:d0:b7:43:d0:b0: 19:14:64:16:f6:d0:27:f9:24:c5:ca:62:92:83:d6: ea:d2:47:a0:d2:47:d5:ed:46:89:81:5e:47:69:5d: e0:d0:0b:2b:51:93:c2:e8:d8:82:23:12:10:ba:8c: 86:f6:ef:61:20:3a:4a:8f:7b:d4:79:87:0c:92:a1: 02:4d:fb:cf:37:23:b0:0b:95:1f:16:7b:cf:25:e9: fc:f5:18:48:16:4a:9c:9e:0d:5d:e1:75:e1:fe:46: a6:f0:f8:28:60:64:2f:76:3c:c9:b6:d6:5d:a5:cf: b5:f3:6d:6d:0f:2a:13:9e:14:e1:99:c6:1b:26:8f: 2d:15:18:53:90:d9:d2:28:fd:b5:91:7c:a1:1d:b8: 1a:51:7c:cd:f4:97:98:1b:64:d9:a2:4d:63:6b:db: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C4:33:4E:80:C4:50:06:3E:EE:05:65:1E:D9:35:60:11:0F:A4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1334152e-2583-37bf-87f6-7f569ffa4d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.134.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7e:de:67:70:31:eb:8f:df:ad:3e:ee:fc:3f:64:78:aa:d4: 3c:e3:8e:e3:23:0f:c6:70:d7:7b:bd:17:68:94:e4:02:08:71: 4f:77:a7:f3:5b:f0:34:3a:a9:7c:0a:a5:f8:53:24:c8:d9:8b: 59:40:ad:99:55:e1:0d:0b:91:94:17:6e:ef:3a:1d:d2:1f:0a: 45:1d:8f:db:5a:2b:d5:a8:a8:db:e8:d5:33:73:65:e7:cb:fa: 34:69:6e:6a:84:c1:78:c0:cb:3e:10:8f:2b:6d:8b:4b:27:18: 06:89:21:6f:f4:1d:c7:e3:d2:3e:45:af:1d:8e:84:8a:9c:c4: cd:ef:17:8e:af:91:77:c7:34:2a:66:12:23:de:90:bb:41:15: 9d:99:fe:bf:91:e6:de:6f:94:e3:e8:e7:19:a5:d1:f6:5b:67: 8f:69:61:a5:5b:31:b9:b5:2b:3b:5c:b1:7a:20:94:d8:e1:e5: a1:0c:95:3b:e4:af:2e:56:20:0e:94:8e:a8:14:4c:dd:a6:d7: a6:d1:7f:d8:d3:7e:a9:b0:3a:ea:90:37:f7:ad:fc:dc:28:a0: 5c:06:b1:74:24:3e:24:17:04:10:b2:4e:39:12:77:a9:5b:53: cc:2b:62:50:c0:b2:b1:ed:7f:d5:85:55:38:8f:2e:0f:cc:ce: 20:31:ad:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FQjU2K3ylY8Y0WQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTI0NzI5NWYtZTE5Ni00ZDdjLTk5ODQtOGFhOTQ5NGRhNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU6FryB/42lH6R3DmTk9WQf3nwytBoTag+wT AvvE9gZH5a2vOoM0BZmefNcvTlMgC/jiZ9sv+P2Hv9VVZl6rMuJnExgV4QuMunZy R7h3o957FaSatzGZ+MW/xvwgs/8l3oS/0LdD0LAZFGQW9tAn+STFymKSg9bq0keg 0kfV7UaJgV5HaV3g0AsrUZPC6NiCIxIQuoyG9u9hIDpKj3vUeYcMkqECTfvPNyOw C5UfFnvPJen89RhIFkqcng1d4XXh/kam8PgoYGQvdjzJttZdpc+1821tDyoTnhTh mcYbJo8tFRhTkNnSKP21kXyhHbgaUXzN9JeYG2TZok1ja9s5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7EM06AxFAGPu4FZR7ZNWARD6TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMTMzNDE1MmUtMjU4My0z N2JmLTg3ZjYtN2Y1NjlmZmE0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ+3mdwMeuP360+7vw/ZHiq1DzjjuMjD8Zw13u9F2iU5AIIcU93p/Nb 8DQ6qXwKpfhTJMjZi1lArZlV4Q0LkZQXbu86HdIfCkUdj9taK9WoqNvo1TNzZefL +jRpbmqEwXjAyz4Qjytti0snGAaJIW/0Hcfj0j5Frx2OhIqcxM3vF46vkXfHNCpm EiPekLtBFZ2Z/r+R5t5vlOPo5xml0fZbZ49pYaVbMbm1KztcsXoglNjh5aEMlTvk ry5WIA6UjqgUTN2m16bRf9jTfqmwOuqQN/et/NwooFwGsXQkPiQXBBCyTjkSd6lb U8wrYlDAsrHtf9WFVTiPLg/MziAxre0= -----END CERTIFICATE-----Generated at Sun Jun 15 17:36:16 2025 by rpki-client