$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/6a3b1014-6c1a-3147-9398-3d1ac39497e4.roa File: 6a3b1014-6c1a-3147-9398-3d1ac39497e4.roa (raw, json) Hash identifier: oVljYihNWWNiJdnCzVDqAx4uawSdVeVhAQInLgketyg= Subject key identifier: 87:2F:42:DE:0C:27:18:34:C2:D6:18:84:F4:4C:E0:56:71:50:BF:28 Certificate issuer: /CN=a4237824-37cc-45e0-92cf-cce30150cb15 Certificate serial: 010D0C9F4328584A2355349BFF3D28045C8ACE20 Authority key identifier: E2:AA:10:22:A2:B3:DB:24:22:0A:1C:AD:98:44:0D:EE:F4:30:8D:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/6a3b1014-6c1a-3147-9398-3d1ac39497e4.roa Signing time: Mon 09 Jun 2025 21:25:44 +0000 ROA not before: Mon 09 Jun 2025 21:25:44 +0000 ROA not after: Sun 07 Sep 2025 21:25:44 +0000 asID: 54502 IP address blocks: 23.247.220.0/22 maxlen: 22 172.110.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/a4237824-37cc-45e0-92cf-cce30150cb15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/a4237824-37cc-45e0-92cf-cce30150cb15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:55:34:9b:ff:3d:28:04:5c:8a:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4237824-37cc-45e0-92cf-cce30150cb15 Validity Not Before: Jun 9 21:25:44 2025 GMT Not After : Sep 7 21:25:44 2025 GMT Subject: CN=30afb5c2-8641-4d53-b0c3-3f53e7bc4085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:a8:b5:c3:d2:bb:4b:90:9c:5b:7a:70:f2: f4:9e:04:f3:95:d5:10:5b:e7:ea:f7:99:65:ba:65: dc:70:4e:2b:f3:b4:aa:cf:4c:d6:ac:a4:a2:00:f8: 29:f9:a7:76:13:87:64:c4:44:8e:07:61:78:db:dc: 67:d3:cd:34:b4:96:42:89:35:6d:cc:39:be:77:bf: 8f:cc:3e:f1:76:fd:29:83:93:30:cd:07:ab:a8:46: 21:46:c6:ce:06:43:8a:8d:37:6d:af:7e:c3:9e:71: ae:b2:f9:5d:f5:34:25:1c:2d:89:a1:8d:ef:9f:01: 5e:57:c1:ab:59:6a:14:f9:a3:39:ed:10:c8:ff:83: bf:76:b3:10:ef:6a:5b:10:e4:10:12:5b:de:0a:6f: 7e:c7:f9:7b:dd:c5:69:cf:fe:09:ed:41:83:02:e4: 22:da:e4:68:da:3a:0f:f1:ac:d2:5e:04:ff:e2:40: be:6c:36:7c:da:ee:38:01:48:d2:42:26:43:6e:63: e0:15:f4:75:2f:b5:27:52:7e:d6:ae:61:b6:8f:a3: aa:98:73:41:f4:ea:81:72:e0:9c:71:9a:5c:4b:8f: e2:50:ff:6e:0c:cc:92:e8:8a:6d:1a:b7:58:dc:72: 62:97:71:fd:5c:c8:7c:bf:e5:ae:b5:8a:85:0d:0c: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2F:42:DE:0C:27:18:34:C2:D6:18:84:F4:4C:E0:56:71:50:BF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/6a3b1014-6c1a-3147-9398-3d1ac39497e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15/a4237824-37cc-45e0-92cf-cce30150cb15.crl X509v3 Authority Key Identifier: keyid:E2:AA:10:22:A2:B3:DB:24:22:0A:1C:AD:98:44:0D:EE:F4:30:8D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4237824-37cc-45e0-92cf-cce30150cb15.cer sbgp-ipAddrBlock: critical IPv4: 23.247.220.0/22 172.110.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:37:d1:33:f2:de:50:5b:1f:a2:27:58:a4:a8:e8:73:0a:98: ef:bc:0e:4c:22:ec:f4:c8:e6:c4:95:d2:a7:d4:65:f4:c5:52: 38:58:16:7d:f3:5e:0e:ed:3d:0c:a0:6c:41:74:b2:63:f3:93: 56:ea:76:88:19:62:6f:fa:76:ec:d9:df:d5:a0:e2:22:59:4d: c2:0d:21:9e:42:0c:c6:79:29:04:c0:06:a3:1c:00:50:35:45: 4a:af:84:cc:d8:6d:b7:1b:da:07:99:e3:dd:df:66:fd:9e:91: 03:fb:69:04:e3:e6:e3:da:4a:69:97:d4:cc:85:f2:ea:df:72: 43:53:0e:b1:34:08:36:df:b6:0e:a4:6d:e4:29:00:90:8a:71: e8:95:31:0b:de:e2:c8:d4:b2:70:43:a5:fd:96:7e:0f:c5:72: ae:4d:39:7d:60:e7:61:eb:58:62:3b:24:a1:5a:fc:3f:02:a0: 6a:86:3c:57:f7:f9:1f:6d:63:cc:92:33:4c:25:dd:df:d7:f4: ce:6f:45:5d:11:b8:ae:77:ba:45:cd:50:ba:ec:c7:40:47:93: c2:db:82:0b:25:9e:09:e1:cd:8a:6d:88:46:8d:f1:0c:71:01: 37:0d:17:37:ae:2a:32:11:bd:f2:68:a7:c5:27:8a:ba:48:39: 15:d7:d6:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEojVTSb/z0oBFyKziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyMzc4MjQtMzdjYy00NWUwLTkyY2YtY2NlMzAxNTBj YjE1MB4XDTI1MDYwOTIxMjU0NFoXDTI1MDkwNzIxMjU0NFowLzEtMCsGA1UEAxMk MzBhZmI1YzItODY0MS00ZDUzLWIwYzMtM2Y1M2U3YmM0MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0eotcPSu0uQnFt6cPL0ngTzldUQW+fq95ll umXccE4r87Sqz0zWrKSiAPgp+ad2E4dkxESOB2F429xn0800tJZCiTVtzDm+d7+P zD7xdv0pg5MwzQerqEYhRsbOBkOKjTdtr37DnnGusvld9TQlHC2JoY3vnwFeV8Gr WWoU+aM57RDI/4O/drMQ72pbEOQQElveCm9+x/l73cVpz/4J7UGDAuQi2uRo2joP 8azSXgT/4kC+bDZ82u44AUjSQiZDbmPgFfR1L7UnUn7WrmG2j6OqmHNB9OqBcuCc cZpcS4/iUP9uDMyS6IptGrdY3HJil3H9XMh8v+WutYqFDQzkBwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIcvQt4MJxg0wtYYhPRM4FZxUL8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNDIz NzgyNC0zN2NjLTQ1ZTAtOTJjZi1jY2UzMDE1MGNiMTUvNmEzYjEwMTQtNmMxYS0z MTQ3LTkzOTgtM2QxYWMzOTQ5N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTQyMzc4MjQtMzdjYy00NWUwLTky Y2YtY2NlMzAxNTBjYjE1L2E0MjM3ODI0LTM3Y2MtNDVlMC05MmNmLWNjZTMwMTUw Y2IxNS5jcmwwHwYDVR0jBBgwFoAU4qoQIqKz2yQiChytmEQN7vQwjUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNDIzNzgyNC0zN2NjLTQ1ZTAtOTJjZi1jY2Uz MDE1MGNiMTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/fcAwQD rG7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJA30TPy3lBbH6InWKSo6HMKmO+8Dkwi7PTI5sSV0qfUZfTF UjhYFn3zXg7tPQygbEF0smPzk1bqdogZYm/6duzZ39Wg4iJZTcINIZ5CDMZ5KQTA BqMcAFA1RUqvhMzYbbcb2geZ493fZv2ekQP7aQTj5uPaSmmX1MyF8urfckNTDrE0 CDbftg6kbeQpAJCKceiVMQve4sjUsnBDpf2Wfg/Fcq5NOX1g52HrWGI7JKFa/D8C oGqGPFf3+R9tY8ySM0wl3d/X9M5vRV0RuK53ukXNULrsx0BHk8LbggslngnhzYpt iEaN8QxxATcNFzeuKjIRvfJop8UnirpIORXX1go= -----END CERTIFICATE-----Generated at Mon Jun 16 13:04:15 2025 by rpki-client