$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json) Hash identifier: YAVVYKqF6Kf+PdGGxU+u5Yb+bNvMtDhpxRTQGwcVHgc= Subject key identifier: 1C:45:F0:EB:97:35:BB:44:30:E2:A1:D4:EF:38:EC:07:F9:BD:A4:90 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584A0C0550CFD254D3B4A777BA80 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 17017 IP address blocks: 23.247.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:50:cf:d2:54:d3:b4:a7:77:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ab5af237-6973-409d-958a-1d353737d097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:0b:8e:56:24:f8:bd:32:2f:da:e7:7b:aa: 1c:56:e3:b1:9d:3a:69:8d:70:43:c7:af:cb:79:fb: ee:d6:58:e5:19:63:0f:54:28:61:f5:f0:b0:1c:ec: 53:d0:5c:a6:32:c4:6c:d6:76:13:ba:aa:64:05:b7: 27:c1:f1:d6:24:d0:93:67:24:9d:43:ec:93:3f:44: 28:fb:0b:32:ae:cc:3f:e8:03:e9:b3:47:00:fb:b6: ca:df:a2:a3:e3:e7:91:33:ad:ca:e6:5e:25:55:00: ee:c8:98:9e:cd:22:2b:55:01:46:95:d0:47:71:86: 4e:ad:fc:72:ec:a2:c1:27:62:08:18:15:dd:7e:07: 1c:1b:fc:df:73:1c:6f:3c:92:dc:93:d2:63:8f:15: 57:e4:31:18:49:98:d0:37:1d:c3:dc:fc:5f:d3:35: 1f:77:d2:22:4d:f5:c0:a3:2c:1c:09:8e:cf:18:8b: bf:08:ef:5c:31:34:2a:1f:5b:25:96:9f:f1:af:a6: f3:c1:7e:b6:aa:db:d9:a0:38:5e:34:36:f6:d1:93: a5:a3:b3:ad:fe:bd:fb:23:d0:28:e6:aa:c4:e0:70: a8:c9:29:32:65:dc:dc:32:51:aa:3e:d8:ef:30:a4: 2a:5a:e6:24:99:c7:6e:0f:d7:3a:61:65:b7:cc:d2: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:F0:EB:97:35:BB:44:30:E2:A1:D4:EF:38:EC:07:F9:BD:A4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 23.247.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:70:18:89:85:42:50:6a:05:99:7f:15:f8:ef:17:d4:f8:f6: c8:9d:e8:ca:91:2b:96:89:d4:e9:94:1b:77:d9:db:15:8b:43: 5d:97:d0:bc:dc:db:62:a0:bf:0b:89:47:46:19:a3:69:4e:04: fc:00:ec:2d:99:10:a9:39:cc:b7:5a:aa:cc:c5:02:93:d2:85: f1:6c:c4:64:7a:e2:68:7d:cc:cf:8b:07:04:9e:e4:7d:54:8c: 62:5e:93:95:eb:15:ac:13:d2:d2:34:73:e5:57:22:f8:40:61: 0c:8f:33:19:9c:b5:54:dc:67:87:ef:0f:16:3c:71:7e:eb:e5: f5:1e:98:04:d6:da:aa:04:5a:e0:07:2a:4c:a9:92:05:61:1c: 00:96:d2:a9:c8:d4:2a:9e:41:92:f3:d3:22:54:d4:be:7f:e2: 6f:29:07:2c:14:a6:ce:21:c4:57:65:19:e5:62:41:e0:32:48: ef:80:0d:e4:fb:d2:f7:f2:37:bd:2f:93:4b:60:72:6e:e8:01: 25:b5:ef:da:5c:12:ab:56:9d:74:5b:47:c3:fa:39:54:7a:bc: b1:5d:e5:e4:db:27:8e:8f:5b:e2:54:5e:97:37:9b:a6:9a:6c: fd:c0:68:79:aa:da:3e:81:de:c2:7e:3c:96:3b:6a:d0:35:fa: ce:a8:23:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVDP0lTTtKd3uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWI1YWYyMzctNjk3My00MDlkLTk1OGEtMWQzNTM3MzdkMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GMLjlYk+L0yL9rne6ocVuOxnTppjXBDx6/L efvu1ljlGWMPVChh9fCwHOxT0FymMsRs1nYTuqpkBbcnwfHWJNCTZySdQ+yTP0Qo +wsyrsw/6APps0cA+7bK36Kj4+eRM63K5l4lVQDuyJiezSIrVQFGldBHcYZOrfxy 7KLBJ2IIGBXdfgccG/zfcxxvPJLck9JjjxVX5DEYSZjQNx3D3Pxf0zUfd9IiTfXA oywcCY7PGIu/CO9cMTQqH1sllp/xr6bzwX62qtvZoDheNDb20ZOlo7Ot/r37I9Ao 5qrE4HCoySkyZdzcMlGqPtjvMKQqWuYkmcduD9c6YWW3zNL5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxF8OuXNbtEMOKh1O847Af5vaSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvNDY3NzNhMDUtYWUzOS0z NmJkLWE5NTAtMGQ2NGI1YjdlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5wGImFQlBqBZl/FfjvF9T49sid6MqRK5aJ1OmUG3fZ2xWLQ12X0Lzc 22KgvwuJR0YZo2lOBPwA7C2ZEKk5zLdaqszFApPShfFsxGR64mh9zM+LBwSe5H1U jGJek5XrFawT0tI0c+VXIvhAYQyPMxmctVTcZ4fvDxY8cX7r5fUemATW2qoEWuAH KkypkgVhHACW0qnI1CqeQZLz0yJU1L5/4m8pBywUps4hxFdlGeViQeAySO+ADeT7 0vfyN70vk0tgcm7oASW179pcEqtWnXRbR8P6OVR6vLFd5eTbJ46PW+JUXpc3m6aa bP3AaHmq2j6B3sJ+PJY7atA1+s6oI9I= -----END CERTIFICATE-----Generated at Sat Jun 14 15:45:02 2025 by rpki-client