$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa File: bfb35758-071b-31cf-8ca8-8b8646b148b0.roa (raw, json) Hash identifier: xmsHJsNGZ5P4sjWDoacctoL7OMMWee9Gg4j6LyVCv/4= Subject key identifier: 04:9C:62:61:B2:75:B6:FE:B8:1F:F2:43:D2:BD:5F:DD:A3:79:7C:B6 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A0C0556888A18C499405244F0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 23.239.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:56:88:8a:18:c4:99:40:52:44:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=28e913c0-a9da-420d-a617-10d8263a4635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:11:c8:56:f7:03:d4:ec:a5:29:e8:5e:bf: bf:be:8c:4a:3f:14:d6:cc:0c:99:e1:99:f8:89:20: b6:0d:b4:a4:f1:bc:2c:f3:5c:3d:c9:7f:44:67:51: 2d:48:a8:73:7c:22:19:74:31:7b:cd:e6:03:39:2a: 4a:b5:fb:01:b9:c1:9f:b2:84:e4:e7:d4:13:5e:fd: e8:6b:37:eb:2c:f8:67:91:ea:00:93:01:71:db:d1: 9e:80:bd:c0:98:52:c2:8a:59:f5:13:af:c5:a9:59: a2:c8:6f:d2:8a:26:0f:22:96:73:3c:27:4f:d3:b4: 70:c1:f5:c4:fe:72:82:8b:eb:13:9b:27:0f:b5:6a: 72:8e:a8:af:4d:b1:a1:42:4d:7b:a4:88:cb:57:36: df:41:10:c4:2e:46:d9:7b:78:cd:e3:e4:0f:53:6a: b8:11:6d:36:91:1c:d4:8c:e7:73:07:44:1b:57:38: d1:dd:56:81:ca:95:6c:84:6c:6a:79:77:60:5b:e9: 04:de:9f:bd:df:19:47:a3:c4:71:86:6f:bc:40:fa: 3a:1e:0b:80:87:6a:72:fe:62:cb:b6:f3:9f:0b:f0: 4c:b0:51:40:26:7e:aa:ae:e6:c9:81:2e:a1:50:01: 2b:28:2d:6c:59:2a:87:f6:2c:eb:5b:dd:d8:ba:fe: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9C:62:61:B2:75:B6:FE:B8:1F:F2:43:D2:BD:5F:DD:A3:79:7C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cf:64:47:1d:80:3f:cc:07:6a:64:f8:39:23:f1:98:bb:55: 30:08:3b:e6:4b:14:37:57:81:8c:73:5f:19:ab:f1:d8:9d:6d: 4b:28:1d:56:1f:72:52:cf:53:76:82:44:12:fa:89:56:0e:67: be:c9:c8:40:2e:51:d2:76:81:0c:00:c4:8d:0f:ee:b9:ae:8c: 75:d0:d6:bb:6f:f1:b2:98:4f:3c:7c:be:10:fd:d2:2c:66:e4: e7:4a:5e:eb:72:50:57:42:4b:45:c8:79:eb:b3:a7:08:f9:63: b5:0a:08:37:f9:6b:ca:3a:8f:a7:42:29:97:eb:e8:98:83:52: 44:6b:a7:84:b1:59:af:73:fd:12:ed:48:2f:78:c6:89:6b:52: e5:81:59:21:0f:49:bf:3b:35:c1:a7:5e:c5:c5:68:fa:bf:23: 9d:c7:c3:db:6e:54:41:d6:05:bc:32:cc:b1:c8:21:68:3b:06: 6f:0d:5d:d4:c9:61:2e:96:d2:fe:c9:34:f3:73:4f:e8:f9:61: 6a:82:d5:3a:74:ba:d2:74:25:c1:bd:5d:7a:26:b9:7e:d1:09: a4:cd:bf:2a:91:6b:e4:3a:ac:5a:3c:a9:6a:f7:2b:be:58:44: bc:c3:d7:0c:5e:b5:a4:c8:d8:48:92:d6:81:6f:47:2d:8a:34: 33:29:45:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVaIihjEmUBSRPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjhlOTEzYzAtYTlkYS00MjBkLWE2MTctMTBkODI2M2E0NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoawRyFb3A9TspSnoXr+/voxKPxTWzAyZ4Zn4 iSC2DbSk8bws81w9yX9EZ1EtSKhzfCIZdDF7zeYDOSpKtfsBucGfsoTk59QTXv3o azfrLPhnkeoAkwFx29GegL3AmFLCiln1E6/FqVmiyG/SiiYPIpZzPCdP07RwwfXE /nKCi+sTmycPtWpyjqivTbGhQk17pIjLVzbfQRDELkbZe3jN4+QPU2q4EW02kRzU jOdzB0QbVzjR3VaBypVshGxqeXdgW+kE3p+93xlHo8Rxhm+8QPo6HguAh2py/mLL tvOfC/BMsFFAJn6qrubJgS6hUAErKC1sWSqH9izrW93Yuv7RFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAScYmGydbb+uB/yQ9K9X92jeXy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmZiMzU3NTgtMDcxYi0z MWNmLThjYTgtOGI4NjQ2YjE0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErPZEcdgD/MB2pk+Dkj8Zi7VTAIO+ZLFDdXgYxzXxmr8didbUsoHVYf clLPU3aCRBL6iVYOZ77JyEAuUdJ2gQwAxI0P7rmujHXQ1rtv8bKYTzx8vhD90ixm 5OdKXutyUFdCS0XIeeuzpwj5Y7UKCDf5a8o6j6dCKZfr6JiDUkRrp4SxWa9z/RLt SC94xolrUuWBWSEPSb87NcGnXsXFaPq/I53Hw9tuVEHWBbwyzLHIIWg7Bm8NXdTJ YS6W0v7JNPNzT+j5YWqC1Tp0utJ0JcG9XXomuX7RCaTNvyqRa+Q6rFo8qWr3K75Y RLzD1wxetaTI2EiS1oFvRy2KNDMpRYE= -----END CERTIFICATE-----Generated at Sun Jun 15 00:46:10 2025 by rpki-client