$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa File: 412a11c3-55d8-30a7-954e-7f92feb5901b.roa (raw, json) Hash identifier: EEgBjsIU+96ppFPHxjW88am4Rfdn2e2oFlsymvijbcA= Subject key identifier: BA:3E:80:C7:36:38:42:79:6E:22:88:DF:68:D7:A7:F8:A5:37:0B:4E Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584A0D6A8A2892B593D9E9BD0F00 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 62164 IP address blocks: 23.129.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8a:28:92:b5:93:d9:e9:bd:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=ac0c4f44-9d11-4e7b-931c-78cce4a79d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:00:62:70:69:02:c6:92:39:14:97:90:a3: 87:f2:2a:58:73:6d:39:d8:6d:71:d7:94:e4:e2:1a: a2:8b:a3:0d:9c:51:98:25:83:7b:26:13:52:c2:d0: 25:8c:5a:63:05:7f:10:2b:c2:f6:d2:25:67:5e:ee: 28:81:8c:f0:24:38:dc:6f:c9:d0:ea:d4:43:e0:60: 72:be:1d:1e:5e:e7:82:f3:7d:b5:cf:06:a7:e6:55: c3:8f:98:e1:57:57:5f:85:0c:ce:fa:90:64:af:33: 65:12:55:1f:16:d9:d8:0f:5a:17:27:ca:f2:8d:30: 35:d4:b8:b1:00:e5:79:2c:b4:05:18:8b:80:67:1c: 6c:24:e7:62:0e:33:0a:91:d3:9d:b8:9f:48:20:5e: 99:f2:0c:d8:c9:f3:0d:b1:f8:bd:54:f0:a2:7a:c4: 01:15:7e:6c:23:b6:f5:5e:62:46:ff:27:eb:88:6b: c3:b2:75:f4:04:9a:03:af:8b:a8:08:f1:fc:88:6b: 18:5c:42:15:4a:83:61:0e:8a:ba:2b:f0:15:c3:65: fe:9f:f1:b9:3d:a3:38:45:65:a8:e1:6c:d6:8f:af: cf:9e:cf:98:9c:dc:6c:ab:78:d6:f1:dd:3c:ed:b1: eb:a0:4e:d7:7b:29:1c:53:63:d9:9a:2b:93:c8:b8: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:80:C7:36:38:42:79:6E:22:88:DF:68:D7:A7:F8:A5:37:0B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/412a11c3-55d8-30a7-954e-7f92feb5901b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 23.129.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:83:56:67:06:42:3d:02:61:6b:eb:54:5e:c7:ec:79:c4:b3: a3:06:a9:bf:2b:7f:e0:39:bd:31:3a:27:65:36:0e:b3:34:ab: 39:ce:c9:8e:69:95:0c:4a:ac:46:4e:b9:e9:bb:b5:ca:50:9c: 07:43:bd:58:9d:7c:d7:2e:d8:cd:4d:b8:99:8b:a5:6e:93:33: b7:f2:c9:3f:c2:12:ec:5a:db:2a:2d:51:a3:66:f4:d1:c0:75: 80:b7:0d:20:07:ff:ca:80:3f:71:2e:b8:86:c1:d4:2b:9e:b2: 3b:fd:31:5a:9e:90:50:9a:0e:f4:bc:62:32:2d:63:34:11:59: 5f:66:64:35:32:a1:50:3b:64:35:a2:31:0f:71:b5:e7:25:29: d0:9f:10:7a:07:a0:90:3b:84:5c:8f:a2:62:09:13:25:73:2d: 30:49:1e:fe:ad:b6:3d:ac:bd:73:d1:cd:08:b5:b6:65:22:45: 29:d9:45:08:72:79:01:13:9a:cb:85:92:40:12:56:c9:9b:bd: 74:85:e3:d6:af:dd:fc:9a:53:73:6f:b1:1b:f2:11:f2:2f:57: 52:0f:85:c3:98:37:b8:c1:78:e9:7d:96:ed:64:0e:40:99:11: 07:55:ba:cc:41:4c:5b:f2:5c:97:2d:03:11:6f:a0:4e:09:28: e4:64:8e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoookrWT2em9DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk YWMwYzRmNDQtOWQxMS00ZTdiLTkzMWMtNzhjY2U0YTc5ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyAAYnBpAsaSORSXkKOH8ipYc2052G1x15Tk 4hqii6MNnFGYJYN7JhNSwtAljFpjBX8QK8L20iVnXu4ogYzwJDjcb8nQ6tRD4GBy vh0eXueC8321zwan5lXDj5jhV1dfhQzO+pBkrzNlElUfFtnYD1oXJ8ryjTA11Lix AOV5LLQFGIuAZxxsJOdiDjMKkdOduJ9IIF6Z8gzYyfMNsfi9VPCiesQBFX5sI7b1 XmJG/yfriGvDsnX0BJoDr4uoCPH8iGsYXEIVSoNhDoq6K/AVw2X+n/G5PaM4RWWo 4WzWj6/Pns+YnNxsq3jW8d087bHroE7XeykcU2PZmiuTyLghUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo+gMc2OEJ5biKI32jXp/ilNwtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDEyYTExYzMtNTVkOC0z MGE3LTk1NGUtN2Y5MmZlYjU5MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+DVmcGQj0CYWvrVF7H7HnEs6MGqb8rf+A5vTE6J2U2DrM0qznOyY5p lQxKrEZOuem7tcpQnAdDvVidfNcu2M1NuJmLpW6TM7fyyT/CEuxa2yotUaNm9NHA dYC3DSAH/8qAP3EuuIbB1Cuesjv9MVqekFCaDvS8YjItYzQRWV9mZDUyoVA7ZDWi MQ9xteclKdCfEHoHoJA7hFyPomIJEyVzLTBJHv6ttj2svXPRzQi1tmUiRSnZRQhy eQETmsuFkkASVsmbvXSF49av3fyaU3NvsRvyEfIvV1IPhcOYN7jBeOl9lu1kDkCZ EQdVusxBTFvyXJctAxFvoE4JKORkjo4= -----END CERTIFICATE-----Generated at Sat Jun 7 12:32:50 2025 by rpki-client