$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa File: 2517d6e9-9680-3eb3-a47b-2325fa06189c.roa (raw, json) Hash identifier: jhvi6+dYhVwllNGVhzyRNByf+AS83g5BxjHmTNwHZXM= Subject key identifier: 04:5F:AB:CC:DC:04:C1:56:75:08:A0:13:B1:EC:66:E9:3C:97:83:B6 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584B0E414D2F08390D7D3FCC8300 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 394625 IP address blocks: 23.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4d:2f:08:39:0d:7d:3f:cc:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=efda1450-a53f-4b69-85f4-35a46ff74c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:24:31:b8:fc:fd:98:53:e0:52:19:88:e1: a6:ba:0c:70:ab:c2:59:8b:c8:30:d2:e5:f8:21:16: 4d:03:4e:a7:df:52:4a:26:38:7c:bc:15:6a:24:e5: b3:75:26:64:5c:3b:b3:34:a0:b0:3b:9f:4e:1c:d0: d1:c3:61:55:f5:f7:11:22:ce:99:72:2b:e9:cd:fa: ad:75:42:4b:e3:d5:64:d3:f4:a5:3d:8e:dc:56:c4: 68:5c:05:1a:a1:81:7e:95:07:1b:9e:08:89:6e:2c: 96:1c:28:d7:4a:55:32:28:d6:99:d2:13:e2:99:07: 06:93:ef:5d:c2:ae:49:b7:08:8e:85:a1:df:10:81: 70:b6:de:ac:5a:96:a5:90:78:8e:c9:00:6c:f2:4e: 38:3a:82:8e:d6:58:99:55:08:1e:ec:a3:f5:ac:f5: 40:cd:ec:d7:fa:a4:b3:de:25:a1:b8:92:b2:38:d1: 4e:c9:c8:6d:46:1c:f0:d3:70:88:1e:1e:f0:4d:d0: 7e:6d:75:2a:cb:fd:64:eb:50:bb:75:28:19:83:60: ef:08:33:f9:37:5c:06:01:46:84:74:04:a1:8b:ab: c4:e0:ae:01:fd:b1:9a:04:1b:79:1d:83:18:d3:11: eb:40:b8:b2:06:78:b1:d2:04:8c:85:5d:a1:70:a1: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5F:AB:CC:DC:04:C1:56:75:08:A0:13:B1:EC:66:E9:3C:97:83:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 23.154.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:30:e8:af:80:c2:fc:db:7b:6c:9b:e2:9a:c1:3d:54:c1:fc: f2:a1:27:aa:24:87:b6:4d:58:90:b9:af:f7:a8:4f:f1:9c:11: 90:f0:c3:98:40:52:b3:c7:16:2f:62:d0:78:17:64:ba:e0:ab: 5b:0a:d7:39:53:15:2d:79:43:e7:f5:14:37:bd:be:3b:2c:0c: c0:49:be:d2:fc:a2:16:fd:20:cd:67:36:93:18:76:94:26:0a: 3f:a1:6c:52:e5:a6:5f:58:68:78:88:29:45:8b:e3:5c:be:d6: b3:ab:a8:19:7a:64:93:82:fa:75:cf:55:dc:16:4d:6a:df:32: d2:43:7a:35:d2:38:7b:7d:13:63:5a:65:0e:ed:c9:ff:77:c7: a2:0c:a1:c3:b3:96:2d:ec:c0:90:06:6a:06:f8:d9:a9:52:d1: 0e:b7:5b:f7:59:19:3f:83:91:37:d4:d9:ba:14:77:d6:69:fa: ec:8c:96:7c:0b:27:3f:68:14:bd:19:0d:f6:c0:7d:ce:e6:27: 9e:cb:25:7a:1d:4c:3b:2d:b3:8a:82:cc:b6:b8:66:a5:3b:84: 4e:30:21:aa:05:e7:d1:9e:47:ff:f9:fc:9b:7c:b3:8a:3d:0a: ef:4c:e6:f9:2d:3a:29:aa:59:08:8c:28:3e:c5:a9:d4:ae:be: 28:41:2e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU0vCDkNfT/MgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWZkYTE0NTAtYTUzZi00YjY5LTg1ZjQtMzVhNDZmZjc0YzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bskMbj8/ZhT4FIZiOGmugxwq8JZi8gw0uX4 IRZNA06n31JKJjh8vBVqJOWzdSZkXDuzNKCwO59OHNDRw2FV9fcRIs6Zcivpzfqt dUJL49Vk0/SlPY7cVsRoXAUaoYF+lQcbngiJbiyWHCjXSlUyKNaZ0hPimQcGk+9d wq5JtwiOhaHfEIFwtt6sWpalkHiOyQBs8k44OoKO1liZVQge7KP1rPVAzezX+qSz 3iWhuJKyONFOychtRhzw03CIHh7wTdB+bXUqy/1k61C7dSgZg2DvCDP5N1wGAUaE dAShi6vE4K4B/bGaBBt5HYMY0xHrQLiyBnix0gSMhV2hcKE45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARfq8zcBMFWdQigE7HsZuk8l4O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvMjUxN2Q2ZTktOTY4MC0z ZWIzLWE0N2ItMjMyNWZhMDYxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5oRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMw6K+Awvzbe2yb4prBPVTB/PKhJ6okh7ZNWJC5r/eoT/GcEZDww5hA UrPHFi9i0HgXZLrgq1sK1zlTFS15Q+f1FDe9vjssDMBJvtL8ohb9IM1nNpMYdpQm Cj+hbFLlpl9YaHiIKUWL41y+1rOrqBl6ZJOC+nXPVdwWTWrfMtJDejXSOHt9E2Na ZQ7tyf93x6IMocOzli3swJAGagb42alS0Q63W/dZGT+DkTfU2boUd9Zp+uyMlnwL Jz9oFL0ZDfbAfc7mJ57LJXodTDsts4qCzLa4ZqU7hE4wIaoF59GeR//5/Jt8s4o9 Cu9M5vktOimqWQiMKD7FqdSuvihBLpk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:20:14 2025 by rpki-client