$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa File: d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json) Hash identifier: yCCpAJqnmDNuMuCVc3dv04s1WwNuRI5bKCsdCWZ6oZg= Subject key identifier: 11:39:34:6D:BB:E7:FE:8F:FF:65:72:24:16:35:2D:CF:5F:D6:A3:1D Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F4328584A5FC5E165379C217CF2C00228 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 399029 IP address blocks: 23.144.216.0/24 maxlen: 24 2607:dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e1:65:37:9c:21:7c:f2:c0:02:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ff1368dc-05c4-42d8-91fb-4fccfc23957f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:f7:5f:2d:90:5e:76:67:46:c4:08:9b:ac: 3f:10:e3:9d:1a:41:bc:0c:99:e6:56:e7:8d:1a:62: 75:72:0f:2f:6f:b2:f3:4a:c2:01:2e:cb:28:c8:40: 48:e2:3e:f2:24:5f:98:8d:89:d3:8a:ce:16:b3:99: 98:ea:ba:c4:ea:0d:b7:4a:d2:b3:1a:c2:aa:b6:bd: b5:cc:98:53:84:91:a7:45:33:af:1f:5e:de:23:48: c6:6c:bc:3f:6b:c3:99:a2:e6:9e:dd:fb:ad:9f:2a: 34:04:17:0e:36:73:06:29:46:c5:bd:29:15:c8:87: c4:2e:0a:21:ab:32:9f:88:3b:90:55:04:79:60:da: a9:17:bf:6f:04:e2:f4:90:d3:3c:dd:4d:50:c9:d0: 17:6d:3d:5c:ae:ae:0d:5b:4d:ca:58:90:e3:65:ac: c6:33:66:38:93:c4:7b:53:84:d1:78:15:a0:b7:4d: a6:4a:34:21:df:f5:39:57:78:92:69:a7:be:00:b3: 61:42:42:1a:81:b1:09:73:6c:36:ad:24:95:ed:08: 51:cf:42:dd:9f:4a:27:3e:bc:00:29:27:85:91:1e: 12:a1:de:91:0f:f8:df:1f:61:de:0b:86:9a:2e:1b: d3:93:b6:c4:38:74:cd:c5:bc:ef:e9:57:d0:2c:bf: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:34:6D:BB:E7:FE:8F:FF:65:72:24:16:35:2D:CF:5F:D6:A3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 23.144.216.0/24 IPv6: 2607:dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:85:39:4d:ab:50:90:75:48:e3:a8:6e:79:7d:4c:81:0c:b0: c1:65:a8:f3:64:f5:2a:77:c9:ec:d6:81:e7:17:3f:c9:2c:ad: 47:40:74:2a:be:71:ca:b3:1f:9b:b0:55:21:ed:32:cd:7f:44: 4c:36:e6:f1:72:19:0d:e2:9b:da:ef:ff:7e:44:74:2e:fd:68: a6:87:1e:09:2c:66:28:d9:2d:00:66:0a:59:94:e6:5d:cb:20: 50:3d:d8:82:f3:fe:1c:29:2f:e9:4f:9b:12:34:8f:3f:42:6c: 91:b5:3f:c8:b2:0a:de:65:f5:e0:65:c0:20:2f:71:f5:2c:43: e1:18:1d:ff:09:73:bf:37:95:13:03:30:97:52:8a:5d:fa:4c: 5f:b7:14:c7:e2:6e:fe:40:21:c1:14:e9:f0:25:56:21:ad:15: 25:50:5d:b0:03:eb:ba:13:97:06:ab:16:08:2a:fa:d0:c7:51: 1f:75:3b:d1:b1:8c:61:0d:ec:e0:38:bd:61:1c:f5:e9:5c:b4: 02:94:f4:7e:c2:eb:cd:3a:98:a1:d2:85:29:aa:b9:36:e0:bf: 7b:83:3a:b0:13:b1:b1:69:8e:09:bc:b3:db:ee:e2:a3:d5:44: 16:8f:f7:4e:38:c7:ca:10:f8:f6:48:82:fc:01:d7:1c:f0:27: f5:dc:e7:58 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpfxeFlN5whfPLAAigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmYxMzY4ZGMtMDVjNC00MmQ4LTkxZmItNGZjY2ZjMjM5NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeP3Xy2QXnZnRsQIm6w/EOOdGkG8DJnmVueN GmJ1cg8vb7LzSsIBLssoyEBI4j7yJF+YjYnTis4Ws5mY6rrE6g23StKzGsKqtr21 zJhThJGnRTOvH17eI0jGbLw/a8OZouae3futnyo0BBcONnMGKUbFvSkVyIfELgoh qzKfiDuQVQR5YNqpF79vBOL0kNM83U1QydAXbT1crq4NW03KWJDjZazGM2Y4k8R7 U4TReBWgt02mSjQh3/U5V3iSaae+ALNhQkIagbEJc2w2rSSV7QhRz0Ldn0onPrwA KSeFkR4Sod6RD/jfH2HeC4aaLhvTk7bEOHTNxbzv6VfQLL+FiwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBE5NG275/6P/2VyJBY1Lc9f1qMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvZDg5M2E1OTgtMjE5MS0z OWU0LWFiNmYtZGYxM2QyNzE3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5DYMA0E AgACMAcDBQAmBw3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGWFOU2rUJB1SOOobnl9TIEMsMFlqPNk9Sp3 yezWgecXP8ksrUdAdCq+ccqzH5uwVSHtMs1/REw25vFyGQ3im9rv/35EdC79aKaH HgksZijZLQBmClmU5l3LIFA92ILz/hwpL+lPmxI0jz9CbJG1P8iyCt5l9eBlwCAv cfUsQ+EYHf8Jc783lRMDMJdSil36TF+3FMfibv5AIcEU6fAlViGtFSVQXbAD67oT lwarFggq+tDHUR91O9GxjGEN7OA4vWEc9elctAKU9H7C6806mKHShSmquTbgv3uD OrATsbFpjgm8s9vu4qPVRBaP9044x8oQ+PZIgvwB1xzwJ/Xc51g= -----END CERTIFICATE-----Generated at Fri Jul 11 04:38:43 2025 by rpki-client