$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5cd5fd9-3b5c-3032-ac07-4dc4d707f046.roa File: a5cd5fd9-3b5c-3032-ac07-4dc4d707f046.roa (raw, json) Hash identifier: LOaUu9GcUekpAmOWPJXizVMhZL8g3fKMUuoP3dhxecw= Subject key identifier: 53:08:09:76:66:76:85:0D:A0:EF:D2:A6:48:A2:4D:44:E8:EB:FE:79 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849D479713A88431B5EDD3FA8C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5cd5fd9-3b5c-3032-ac07-4dc4d707f046.roa Signing time: Mon 12 May 2025 15:29:53 +0000 ROA not before: Mon 12 May 2025 15:29:53 +0000 ROA not after: Sun 10 Aug 2025 15:29:53 +0000 asID: 401152 IP address blocks: 23.26.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:79:71:3a:88:43:1b:5e:dd:3f:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: May 12 15:29:53 2025 GMT Not After : Aug 10 15:29:53 2025 GMT Subject: CN=5128da00-f871-484d-9ef8-0ff9a5fe21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:02:ee:86:83:6e:9b:fa:60:db:56:5e:a8: 6d:68:e9:a9:35:52:31:81:8f:14:b0:bb:e6:9e:53: c9:91:78:cf:ac:0c:2a:77:4b:84:70:20:bf:a5:28: 6e:24:7f:d9:b7:ff:7e:fa:f0:9c:8c:58:50:54:87: 2f:7b:0d:70:17:31:86:83:66:06:d5:a9:34:f2:8d: 45:14:d0:38:d8:94:a3:6e:98:58:a4:ed:e5:48:0c: e1:eb:81:bf:ea:66:8c:82:88:9e:33:0e:b5:6a:3e: 6f:cc:da:de:96:b8:25:79:7c:31:07:2c:9f:a3:3d: 44:eb:93:58:17:88:f6:b1:75:49:cf:61:48:4b:fe: 15:49:59:09:b9:c9:76:c0:4f:a5:2b:a3:b4:01:fa: cf:7d:19:4a:8b:92:3d:43:32:19:e7:85:b2:a5:d6: f2:0d:f3:40:2b:db:7b:46:5f:74:b6:f6:b9:f5:42: aa:a8:88:15:3e:1f:39:0e:fb:49:43:2c:8e:8a:3e: 95:63:34:bb:6a:40:0d:af:dd:9d:e1:38:7a:30:bd: a1:5d:a2:8f:09:a7:f1:4b:79:fa:6e:c2:b1:9d:0b: 43:d5:3b:d0:2c:69:26:ef:93:34:ea:1c:05:46:6b: e6:27:cf:5d:55:3d:ed:9b:57:24:d5:73:d5:1d:04: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:09:76:66:76:85:0D:A0:EF:D2:A6:48:A2:4D:44:E8:EB:FE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5cd5fd9-3b5c-3032-ac07-4dc4d707f046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:e3:66:d1:69:a0:40:6f:1b:bd:b5:d5:6e:90:7d:06:f5:80: 7e:9d:80:b3:c2:22:02:ed:dd:51:c7:df:23:19:4b:d2:8a:74: 17:6e:81:b1:00:60:28:e7:5c:9d:f9:82:ec:c0:ce:fe:34:25: 3f:bd:d9:52:db:57:99:43:d8:39:d5:ad:0e:76:cd:3b:75:ed: 74:1a:1e:05:50:b1:d5:92:ab:1d:ef:6f:08:9f:45:9e:0b:6a: 94:79:80:bc:f6:17:ed:a3:4a:a4:c5:f8:60:56:08:9d:a0:30: b2:5a:c5:9f:ba:ad:e7:83:20:4a:db:d9:0e:46:8f:4c:32:95: 89:8f:09:58:5f:d3:78:a6:81:d6:10:76:3e:46:1e:da:ea:bc: 6f:9e:69:47:78:36:68:03:a7:91:e9:dd:68:87:bc:b0:af:07: 9d:82:21:ff:26:75:71:76:38:cc:d3:5f:f3:f6:3f:b6:dd:a4: 53:7d:bd:ac:24:f9:14:bd:ef:f3:fd:ff:d2:79:3a:3d:cb:39: 67:63:c4:c7:f3:60:60:6e:cb:75:b7:26:35:9b:fa:ad:7b:5a: a9:88:72:07:7a:8d:c6:54:90:25:0b:f7:c0:eb:44:32:2a:4b: 18:87:a1:e9:45:71:0c:ce:61:3f:99:0e:6c:4e:80:76:93:23: 3a:5c:0b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUeXE6iEMbXt0/qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDUxMjE1Mjk1M1oXDTI1MDgxMDE1Mjk1M1owLzEtMCsGA1UEAxMk NTEyOGRhMDAtZjg3MS00ODRkLTllZjgtMGZmOWE1ZmUyMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YoC7oaDbpv6YNtWXqhtaOmpNVIxgY8UsLvm nlPJkXjPrAwqd0uEcCC/pShuJH/Zt/9++vCcjFhQVIcvew1wFzGGg2YG1ak08o1F FNA42JSjbphYpO3lSAzh64G/6maMgoieMw61aj5vzNrelrgleXwxByyfoz1E65NY F4j2sXVJz2FIS/4VSVkJucl2wE+lK6O0AfrPfRlKi5I9QzIZ54WypdbyDfNAK9t7 Rl90tva59UKqqIgVPh85DvtJQyyOij6VYzS7akANr92d4Th6ML2hXaKPCafxS3n6 bsKxnQtD1TvQLGkm75M06hwFRmvmJ89dVT3tm1ck1XPVHQQX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMICXZmdoUNoO/SpkiiTUTo6/55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTVjZDVmZDktM2I1Yy0z MDMyLWFjMDctNGRjNGQ3MDdmMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDjZtFpoEBvG7211W6QfQb1gH6dgLPCIgLt3VHH3yMZS9KKdBdugbEA YCjnXJ35guzAzv40JT+92VLbV5lD2DnVrQ52zTt17XQaHgVQsdWSqx3vbwifRZ4L apR5gLz2F+2jSqTF+GBWCJ2gMLJaxZ+6reeDIErb2Q5Gj0wylYmPCVhf03imgdYQ dj5GHtrqvG+eaUd4NmgDp5Hp3WiHvLCvB52CIf8mdXF2OMzTX/P2P7bdpFN9vawk +RS97/P9/9J5Oj3LOWdjxMfzYGBuy3W3JjWb+q17WqmIcgd6jcZUkCUL98DrRDIq SxiHoelFcQzOYT+ZDmxOgHaTIzpcC90= -----END CERTIFICATE-----Generated at Sat Jun 7 23:33:46 2025 by rpki-client