$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa File: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json) Hash identifier: TH8jmU4HqB5nq2ePhjUE89MSg/uLbr+yo8xCpKeG110= Subject key identifier: 92:4A:F5:ED:90:A2:37:A5:C3:20:FF:07:5A:B4:9B:10:3E:1C:14:E9 Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F4328584A0C056E49DC8DBA0ECBEE5900 Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 58061 IP address blocks: 23.247.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6e:49:dc:8d:ba:0e:cb:ee:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f4de5344-7f49-42ad-8ddd-a1409cab3f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:8a:ff:00:59:2f:24:b3:ea:3b:c2:cd:cb: e2:b7:69:96:00:95:c4:a2:00:7d:e6:f6:70:84:01: d8:72:73:a9:69:1a:b2:85:56:96:3b:02:f7:61:e6: 5f:0f:36:f9:2e:8c:27:3c:22:60:e1:e5:97:44:76: 9f:b6:4a:fa:f4:a7:94:88:cb:07:b6:5d:b5:67:8f: 4b:be:59:e1:c6:91:d1:ad:eb:a8:0a:22:9d:53:eb: 17:e5:ac:8b:7f:41:0b:31:f9:1d:20:3d:a3:fc:a3: b9:cd:5d:4e:84:95:a4:61:3a:19:f2:b6:55:83:3e: f6:ae:2f:5d:d6:95:f6:bc:45:83:e3:bb:70:8b:7c: 3e:3d:1d:85:f6:ab:98:67:51:de:b9:41:8f:3b:9a: a0:18:f8:ff:75:fd:39:25:18:ef:f9:39:2b:63:2a: 49:2b:15:b9:bb:b2:67:8c:7b:68:01:99:69:41:3f: d7:22:2a:af:77:47:e4:30:c6:ee:65:37:ae:9d:7c: fe:12:27:f0:44:e9:7c:fc:26:74:78:7f:b2:96:37: 71:46:bc:77:c6:4c:bc:df:1f:1d:11:43:db:1c:6f: f2:af:8d:cf:b3:f4:a2:b5:35:0f:8c:78:a0:7c:0c: 15:cb:dc:cc:4c:05:b3:3f:2a:08:6c:61:f7:28:da: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4A:F5:ED:90:A2:37:A5:C3:20:FF:07:5A:B4:9B:10:3E:1C:14:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: 23.247.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9d:2d:1d:f9:54:a6:d1:99:c5:ff:43:aa:a5:f7:5d:12:71: 9c:76:d4:1b:27:67:3a:13:3e:41:25:86:b8:e1:63:00:42:84: c0:01:c9:4c:9d:fa:4d:ae:52:a6:f2:a9:35:43:b9:e1:64:a6: 3f:68:64:74:56:ad:48:c5:13:bf:b4:cf:eb:e8:d9:d6:d1:a6: 28:c3:6b:12:36:a0:6e:c5:f5:0d:07:9d:6f:f3:1f:8c:5c:14: c1:d5:bf:fc:6d:48:31:72:76:18:cb:28:41:0d:1d:59:e6:a6: 80:9e:01:5b:5d:b7:b1:1b:0b:0f:73:53:7f:75:1a:7d:0a:f4: ae:a7:f4:73:b9:8f:43:95:32:d4:07:76:ee:3e:cb:9a:d9:cc: fc:77:4c:40:38:d2:d2:0c:91:25:87:df:f4:9c:1a:9a:4e:f6: 43:e2:21:b4:d1:cf:db:61:e9:21:27:69:68:c3:88:da:51:5e: 32:73:54:33:b8:a2:f2:dc:f6:0e:66:e5:8f:2a:d2:fa:5c:75: c5:73:34:da:7c:4b:34:87:73:d7:36:17:8a:c5:1b:ec:57:5e: 3c:ee:9f:f0:34:f3:aa:ee:5f:d2:38:ae:a8:20:4e:f9:07:82: 04:c5:56:be:8d:55:25:05:97:43:79:a5:8e:5e:a3:db:09:7c: 25:e4:3c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW5J3I26DsvuWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjRkZTUzNDQtN2Y0OS00MmFkLThkZGQtYTE0MDljYWIzZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKSK/wBZLySz6jvCzcvit2mWAJXEogB95vZw hAHYcnOpaRqyhVaWOwL3YeZfDzb5LownPCJg4eWXRHaftkr69KeUiMsHtl21Z49L vlnhxpHRreuoCiKdU+sX5ayLf0ELMfkdID2j/KO5zV1OhJWkYToZ8rZVgz72ri9d 1pX2vEWD47twi3w+PR2F9quYZ1HeuUGPO5qgGPj/df05JRjv+TkrYypJKxW5u7Jn jHtoAZlpQT/XIiqvd0fkMMbuZTeunXz+EifwROl8/CZ0eH+yljdxRrx3xky83x8d EUPbHG/yr43Ps/SitTUPjHigfAwVy9zMTAWzPyoIbGH3KNrWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJK9e2QojelwyD/B1q0mxA+HBTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvNjdjZDMzMWMtMGVlYS0z ZDQwLTk2ZDUtN2FjYzAwN2I4ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/f0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmdLR35VKbRmcX/Q6ql910ScZx21BsnZzoTPkElhrjhYwBChMAByUyd +k2uUqbyqTVDueFkpj9oZHRWrUjFE7+0z+vo2dbRpijDaxI2oG7F9Q0HnW/zH4xc FMHVv/xtSDFydhjLKEENHVnmpoCeAVtdt7EbCw9zU391Gn0K9K6n9HO5j0OVMtQH du4+y5rZzPx3TEA40tIMkSWH3/ScGppO9kPiIbTRz9th6SEnaWjDiNpRXjJzVDO4 ovLc9g5m5Y8q0vpcdcVzNNp8SzSHc9c2F4rFG+xXXjzun/A086ruX9I4rqggTvkH ggTFVr6NVSUFl0N5pY5eo9sJfCXkPCY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:55 2025 by rpki-client