$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa File: 04820b76-4425-3cac-b7e3-17376625637b.roa (raw, json) Hash identifier: JGEo7rc40B/GUty5KjNZh61adJdkF5stloj+PDB2n4U= Subject key identifier: F4:D3:52:CB:3F:1B:6C:57:39:FE:CB:AF:6A:78:55:82:33:E1:FC:5B Certificate issuer: /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Certificate serial: 010D0C9F4328584A5335A4F7A5FEDC4FF790DA80 Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 12119 IP address blocks: 23.249.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a4:f7:a5:fe:dc:4f:f7:90:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=c652985a-e340-454e-b4ae-b2090d6e246f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:85:99:f7:54:c1:5d:f6:6d:73:a7:fe:c1: 34:48:f9:0d:6f:bc:9b:da:c1:ec:78:0b:cc:70:86: 19:c9:98:e1:02:56:13:a9:59:07:c0:c6:77:66:a1: e1:54:bb:3a:c4:73:2d:ac:db:99:25:12:59:90:08: ef:de:8f:a5:c1:c0:24:9a:1c:ae:89:f9:31:0c:39: 54:72:03:21:a3:45:27:cc:d0:7c:6f:be:2e:b1:33: 60:c5:7d:b7:84:56:1c:7e:87:a2:e9:cf:09:f6:e7: 18:0d:31:f8:08:cc:e9:67:6b:97:08:12:3d:5a:eb: ba:95:dc:46:d9:70:00:58:f8:26:fc:87:8d:f1:39: d1:d6:46:ee:58:0e:2b:e7:b9:ba:75:e4:3b:75:ee: 81:2b:07:b2:6f:4d:b1:b6:0f:2f:ec:9a:db:ea:80: 8b:1c:66:2b:95:48:31:e1:c6:f4:00:a0:d6:de:c5: 1a:bc:dd:4c:f6:2d:f3:11:e8:e5:a7:10:79:2b:cd: 67:0c:2c:c7:cd:75:8c:45:cf:58:c3:0f:cd:1c:e5: 6c:1a:06:68:1c:af:35:bd:c8:a4:f1:f1:c7:09:ba: 16:26:0a:5b:3d:3b:5f:7d:cb:dd:8a:97:e9:17:10: a0:3a:41:d4:67:ed:67:d8:f7:f1:dd:99:33:04:6e: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D3:52:CB:3F:1B:6C:57:39:FE:CB:AF:6A:78:55:82:33:E1:FC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/04820b76-4425-3cac-b7e3-17376625637b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl X509v3 Authority Key Identifier: keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer sbgp-ipAddrBlock: critical IPv4: 23.249.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5c:50:c4:67:be:f3:bc:d3:10:39:10:40:9e:1d:1b:d4:aa: cc:e8:85:75:1c:a8:fa:64:80:4f:5a:d9:2f:53:16:47:09:59: 34:ba:bd:77:be:be:39:a0:ff:cd:27:1f:b6:90:b4:fd:5a:55: 28:e4:f9:75:55:0d:6c:50:62:23:27:92:7f:7a:b6:26:cd:52: 20:b1:be:77:69:3c:27:01:b4:a8:64:35:b9:92:7c:e9:ff:27: c6:98:cb:42:78:ab:03:9b:f5:4a:ee:4d:e5:57:0c:3b:16:63: 03:3f:3e:e3:16:2c:60:8f:82:b4:4c:24:b0:d5:b8:da:3c:71: 1f:31:eb:4e:78:31:6b:42:06:ca:23:42:97:25:4e:cf:bc:d7: 52:92:9e:83:5a:88:40:f8:38:00:23:ae:21:ad:cd:9b:f7:1b: 92:dd:3f:d0:64:a4:9a:32:67:46:c3:a2:21:42:f2:67:1a:24: 6f:42:ca:cc:ed:08:73:b2:c4:55:4e:6a:07:bf:2c:ea:e6:0e: d2:47:cf:8c:ce:30:c5:69:34:fa:f2:00:6a:8f:a9:21:69:cd: d5:b1:a9:b9:bf:b0:52:9f:57:61:b2:7a:ba:dc:80:60:8b:24: 1b:43:14:a5:a5:61:0c:e5:4f:be:46:64:ec:93:c0:0c:7b:bc: be:06:7b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaT3pf7cT/eQ2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy M2I5MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YzY1Mjk4NWEtZTM0MC00NTRlLWI0YWUtYjIwOTBkNmUyNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdqFmfdUwV32bXOn/sE0SPkNb7yb2sHseAvM cIYZyZjhAlYTqVkHwMZ3ZqHhVLs6xHMtrNuZJRJZkAjv3o+lwcAkmhyuifkxDDlU cgMho0UnzNB8b74usTNgxX23hFYcfoei6c8J9ucYDTH4CMzpZ2uXCBI9Wuu6ldxG 2XAAWPgm/IeN8TnR1kbuWA4r57m6deQ7de6BKweyb02xtg8v7Jrb6oCLHGYrlUgx 4cb0AKDW3sUavN1M9i3zEejlpxB5K81nDCzHzXWMRc9Yww/NHOVsGgZoHK81vcik 8fHHCboWJgpbPTtffcvdipfpFxCgOkHUZ+1n2Pfx3ZkzBG64zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTTUss/G2xXOf7Lr2p4VYIz4fxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvMDQ4MjBiNzYtNDQyNS0z Y2FjLWI3ZTMtMTczNzY2MjU2MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5 YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1 MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4 N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdcUMRnvvO80xA5EECeHRvUqszohXUcqPpkgE9a2S9TFkcJWTS6vXe+ vjmg/80nH7aQtP1aVSjk+XVVDWxQYiMnkn96tibNUiCxvndpPCcBtKhkNbmSfOn/ J8aYy0J4qwOb9UruTeVXDDsWYwM/PuMWLGCPgrRMJLDVuNo8cR8x6054MWtCBsoj QpclTs+811KSnoNaiED4OAAjriGtzZv3G5LdP9BkpJoyZ0bDoiFC8mcaJG9Cyszt CHOyxFVOage/LOrmDtJHz4zOMMVpNPryAGqPqSFpzdWxqbm/sFKfV2GyerrcgGCL JBtDFKWlYQzlT75GZOyTwAx7vL4Ge8k= -----END CERTIFICATE-----Generated at Thu Jul 3 22:15:29 2025 by rpki-client