$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: HYmbRMjBUZPr/E5dMXv26HlXirS/vs1Jjk+5HkhGyBU= Subject key identifier: 61:7D:3A:C8:CE:FA:45:AB:3F:D9:CE:75:46:51:53:A8:F8:39:D6:4E Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584A119AB2EF5ABA0F1F4AC3D880 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:b2:ef:5a:ba:0f:1f:4a:c3:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=d503abc7-4eb5-4893-8b45-789d6678b838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:52:91:df:b2:21:a9:8c:6a:38:86:58:91: fe:8e:aa:0a:9e:a0:53:f5:3a:1c:a0:81:0f:15:e7: 09:ef:b9:0c:5c:b4:16:f5:62:14:12:7b:69:96:4e: 09:f2:d3:0a:30:ce:c5:01:d3:ad:b7:fe:60:23:66: c2:9b:e8:1d:2e:0d:2c:cb:76:cf:87:06:d1:50:29: bf:32:80:59:ad:0e:5f:04:73:b7:84:95:46:59:ed: 49:9a:5b:dd:e2:29:bb:cf:3c:ed:67:0b:ed:8c:b9: 72:0b:07:74:78:a0:14:6d:d9:5d:ec:5b:0a:30:0b: 77:30:7c:cf:5e:e1:cd:91:e3:0d:7c:53:72:ca:dd: 1d:c3:4d:24:60:ff:23:2f:0f:6d:2d:e6:96:5c:0c: 7e:b5:26:10:94:ab:38:b9:7e:16:b1:45:fa:fa:b7: c4:4c:38:60:26:5a:6c:61:e7:26:18:68:34:3a:b6: e9:80:f9:32:f1:8d:a5:75:f3:4c:03:53:ee:ec:42: e8:ca:f9:eb:e8:82:f1:fc:b9:ae:c2:a6:6f:bb:a8: 49:84:31:b6:39:a3:aa:c4:01:88:a2:64:71:cb:da: 5e:e9:48:f5:f5:73:92:25:8e:fc:6e:88:28:93:81: 73:0e:4f:8e:c8:40:80:a1:a3:51:9c:68:99:42:6b: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7D:3A:C8:CE:FA:45:AB:3F:D9:CE:75:46:51:53:A8:F8:39:D6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fd:00:89:a0:95:61:26:c0:ce:ec:e2:61:cf:39:4a:7b:b7: 85:25:33:fe:77:51:b4:f7:17:fa:1f:5f:4c:9c:92:2f:d5:db: 66:51:cd:c6:9c:bc:60:50:47:0b:06:71:a5:aa:95:68:0c:da: cf:1a:36:e2:b5:27:85:fe:05:7e:e8:ae:98:08:0e:ed:ad:4e: f9:2a:10:12:c2:43:80:b0:9b:90:4d:e7:e6:44:a1:43:a8:bc: 50:17:2e:59:02:c6:17:99:a6:ba:49:a6:f0:07:19:49:4f:1c: 15:92:ed:84:75:f9:23:4b:65:84:8f:0f:b8:c5:f9:43:f0:1c: 26:2d:da:34:97:87:cd:26:cf:f3:0a:07:7b:ac:e5:83:62:95: 0c:60:dc:ac:db:64:cc:64:47:0e:a6:51:1a:d3:d2:f8:d9:fc: 37:ed:26:76:a0:d4:a1:ee:f6:90:de:17:20:cc:af:d3:e5:21: fb:8a:95:1f:65:0e:4f:10:0b:3e:4a:8f:a4:55:c1:b0:27:20: 3c:98:d4:73:b2:8c:58:a9:8c:2c:cd:b8:ac:1e:b7:ed:11:2f: c0:0c:77:a7:62:1e:cd:9c:37:0a:f3:57:b5:c5:08:8e:b2:67: f5:36:b2:c3:ca:26:bb:4f:c3:bb:d2:3f:c9:66:cf:b4:bf:98: c6:54:d1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrLvWroPH0rD2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDUwM2FiYzctNGViNS00ODkzLThiNDUtNzg5ZDY2NzhiODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz1Skd+yIamMajiGWJH+jqoKnqBT9TocoIEP FecJ77kMXLQW9WIUEntplk4J8tMKMM7FAdOtt/5gI2bCm+gdLg0sy3bPhwbRUCm/ MoBZrQ5fBHO3hJVGWe1Jmlvd4im7zzztZwvtjLlyCwd0eKAUbdld7FsKMAt3MHzP XuHNkeMNfFNyyt0dw00kYP8jLw9tLeaWXAx+tSYQlKs4uX4WsUX6+rfETDhgJlps YecmGGg0OrbpgPky8Y2ldfNMA1Pu7ELoyvnr6ILx/LmuwqZvu6hJhDG2OaOqxAGI omRxy9pe6Uj19XOSJY78bogok4FzDk+OyECAoaNRnGiZQms+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF9OsjO+kWrP9nOdUZRU6j4OdZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz9AImglWEmwM7s4mHPOUp7t4UlM/53UbT3F/ofX0ycki/V22ZRzcac vGBQRwsGcaWqlWgM2s8aNuK1J4X+BX7orpgIDu2tTvkqEBLCQ4Cwm5BN5+ZEoUOo vFAXLlkCxheZprpJpvAHGUlPHBWS7YR1+SNLZYSPD7jF+UPwHCYt2jSXh80mz/MK B3us5YNilQxg3KzbZMxkRw6mURrT0vjZ/DftJnag1KHu9pDeFyDMr9PlIfuKlR9l Dk8QCz5Kj6RVwbAnIDyY1HOyjFipjCzNuKwet+0RL8AMd6diHs2cNwrzV7XFCI6y Z/U2ssPKJrtPw7vSP8lmz7S/mMZU0Us= -----END CERTIFICATE-----Generated at Wed Jun 18 20:01:45 2025 by rpki-client