$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: Q4nvdrbYoDWqwl7/WNUdAW5hAlWXxriQbKAu77FSn7o= Subject key identifier: 8B:65:11:EF:EC:A8:CB:70:C5:81:8A:66:6C:26:42:AB:85:58:BA:01 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F43285849CD34C68E8E998532B07F8300 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c6:8e:8e:99:85:32:b0:7f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=5c608ef4-bb47-474e-a29e-bc727f0ac6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:04:7e:c0:2d:98:07:22:6d:89:1d:af:dd: 59:bb:fe:3f:ab:bd:d5:14:9a:ca:3d:d9:10:fa:c4: ee:62:4d:53:60:7f:8c:8d:3f:74:22:bc:cc:28:ec: c0:7c:f0:8f:0d:e2:91:d3:38:86:75:d8:b2:f1:13: 00:29:92:b3:8e:1e:67:7c:d2:37:1c:bf:a0:f5:f9: 37:cd:86:69:d0:21:73:b1:76:45:44:5c:f4:d7:a6: 0b:0e:36:24:76:7a:8d:f9:ca:1a:25:38:c5:d3:4d: 17:ed:15:22:18:2e:73:c7:88:77:e5:54:46:f1:30: 04:f4:54:79:de:f0:96:87:7a:c1:ac:ab:82:52:72: ce:1f:7b:98:ee:85:9d:9a:65:d0:0b:0a:47:2a:ac: 1c:48:24:37:78:dc:d7:dc:6d:e7:2f:5f:2a:59:f0: 72:ef:9d:f9:5d:94:4d:ee:32:64:e0:63:65:44:8d: 2f:f3:ac:28:59:59:75:d5:75:48:af:fa:09:99:f5: cb:aa:20:54:fd:7f:69:f3:bc:af:f7:74:50:b0:74: e4:9c:9b:71:08:69:2e:a7:e8:3c:42:b2:38:e5:20: 83:10:02:f3:d9:ad:af:54:e2:07:f7:81:b0:86:83: b7:d9:99:da:f6:b1:13:4b:ea:14:d7:6d:64:6d:0e: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:11:EF:EC:A8:CB:70:C5:81:8A:66:6C:26:42:AB:85:58:BA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f1:25:68:0b:78:db:bc:1f:be:f8:1a:fe:c2:f4:70:5d:46: 79:79:6f:d7:d4:62:b3:21:84:9f:0d:fe:0d:3f:ad:6a:98:10: 39:1b:e8:2c:67:be:d8:cc:ef:6f:d4:e0:6a:58:e3:35:84:11: 7e:c2:42:3e:08:db:9d:68:eb:6e:9d:38:01:3e:5d:f8:6e:2a: 71:a1:14:d5:41:67:79:1f:83:c0:94:d0:3c:ea:56:a5:06:e7: c2:89:f1:cc:79:ab:d1:24:fa:d0:0c:e8:1e:e5:99:22:a5:b4: 66:02:8c:27:70:c0:3b:c3:d5:4d:27:f5:15:70:d0:24:e0:83: e7:d4:0c:ea:2e:0b:fa:ca:dc:80:fe:2a:4c:71:a4:fe:1c:bb: 1a:4b:ca:c2:4c:f7:eb:50:f5:8e:ba:63:37:53:b3:d3:9b:53: 1b:7f:5c:84:60:cb:c9:e5:ed:c9:b6:96:5d:06:2c:6a:1d:b6: 80:c4:d0:08:69:35:96:b9:60:81:fc:36:0c:aa:70:2d:d4:76: 7c:d9:02:80:cc:a9:0a:54:db:af:37:b6:db:b5:27:78:67:d6: 1c:3d:fa:0b:e7:42:02:c4:dd:d3:5c:95:f0:f1:d8:6c:03:4b: ff:d7:78:3b:b3:da:4d:bb:3e:53:8b:3f:ca:c3:f3:75:84:b3: 48:52:31:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMaOjpmFMrB/gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NWM2MDhlZjQtYmI0Ny00NzRlLWEyOWUtYmM3MjdmMGFjNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifwEfsAtmAcibYkdr91Zu/4/q73VFJrKPdkQ +sTuYk1TYH+MjT90IrzMKOzAfPCPDeKR0ziGddiy8RMAKZKzjh5nfNI3HL+g9fk3 zYZp0CFzsXZFRFz016YLDjYkdnqN+coaJTjF000X7RUiGC5zx4h35VRG8TAE9FR5 3vCWh3rBrKuCUnLOH3uY7oWdmmXQCwpHKqwcSCQ3eNzX3G3nL18qWfBy7535XZRN 7jJk4GNlRI0v86woWVl11XVIr/oJmfXLqiBU/X9p87yv93RQsHTknJtxCGkup+g8 QrI45SCDEALz2a2vVOIH94GwhoO32Zna9rETS+oU121kbQ6dxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItlEe/sqMtwxYGKZmwmQquFWLoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXxJWgLeNu8H774Gv7C9HBdRnl5b9fUYrMhhJ8N/g0/rWqYEDkb6Cxn vtjM72/U4GpY4zWEEX7CQj4I251o626dOAE+XfhuKnGhFNVBZ3kfg8CU0DzqVqUG 58KJ8cx5q9Ek+tAM6B7lmSKltGYCjCdwwDvD1U0n9RVw0CTgg+fUDOouC/rK3ID+ KkxxpP4cuxpLysJM9+tQ9Y66YzdTs9ObUxt/XIRgy8nl7cm2ll0GLGodtoDE0Ahp NZa5YIH8NgyqcC3UdnzZAoDMqQpU2683ttu1J3hn1hw9+gvnQgLE3dNclfDx2GwD S//XeDuz2k27PlOLP8rD83WEs0hSMfE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:06:59 2025 by rpki-client