$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa File: 9305f653-4589-3b05-9b07-a986191aeaaa.roa (raw, json) Hash identifier: cPZsQxFiL2xHvj7ZZ4BcWk6Gt+FczCc/gZ0tEpEz59A= Subject key identifier: F1:3C:1C:2C:8A:A8:DC:69:0E:07:23:93:4D:08:88:1C:43:E9:A6:45 Certificate issuer: /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2 Certificate serial: 010D0C9F43285849FCAA66691782CFCD88629300 Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 216360 IP address blocks: 23.185.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:66:69:17:82:cf:cd:88:62:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=b4694f34-aca9-4ca1-a232-8a13fcf7bbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:49:ca:b3:77:48:7b:9c:73:a7:93:cf:89: 8a:8d:d5:82:e0:61:00:ec:85:b9:a1:f7:fc:50:46: 2f:7e:d4:eb:96:3f:0d:55:9d:00:0b:9e:a3:34:d7: 65:4c:1d:34:a5:8e:81:cc:7c:de:f0:78:72:21:72: 07:a9:f8:17:c3:fa:85:e5:c4:b8:90:f1:76:94:3e: 60:a1:d7:d3:7c:7f:4f:c8:a9:c7:42:e4:0d:4e:f8: 15:a7:4d:b6:26:3f:d9:af:1b:0b:f6:46:f9:70:d9: ac:22:90:e4:61:9c:98:0a:aa:70:98:48:54:46:6d: 16:1e:0c:34:9f:5a:18:63:98:19:52:b1:3c:4c:92: c5:70:ef:1c:07:5e:11:11:6c:c1:c0:cd:ea:70:3f: 66:ff:75:d5:39:8f:af:08:69:44:42:f0:d8:f4:99: b7:70:22:65:80:9d:aa:30:df:a2:e7:1c:71:9f:54: 8b:44:f4:e6:1c:49:dc:4a:9d:1e:33:d6:db:72:94: de:3f:65:43:7b:b3:57:ca:cf:3a:cb:87:96:47:c8: 17:ad:3a:b9:56:ca:40:65:76:83:bf:e5:44:80:73: 04:37:12:3d:a6:b7:a2:6e:d8:2c:6a:65:fe:c7:31: 06:99:83:4f:2f:14:8c:41:4f:6d:7c:c0:11:d3:ef: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3C:1C:2C:8A:A8:DC:69:0E:07:23:93:4D:08:88:1C:43:E9:A6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl X509v3 Authority Key Identifier: keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer sbgp-ipAddrBlock: critical IPv4: 23.185.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e5:50:7b:3b:ae:e9:f3:37:46:f9:0d:1b:d8:4b:c9:0b:ae: 94:ff:ce:42:0e:92:06:8b:4d:ae:14:9c:5c:43:e4:cc:3c:e4: 00:f5:f4:3e:51:f2:a3:92:49:bb:fa:f8:c2:3d:dc:2c:c6:e3: de:0e:29:a8:63:8b:d3:d2:89:07:dd:43:a8:b5:d3:ba:d5:4c: e9:a7:29:2c:2c:dc:64:66:06:2a:fd:53:35:13:a2:cb:eb:b8: b1:40:85:85:3e:87:d3:38:4d:b3:2c:32:f0:3d:ba:8a:41:a0: db:be:26:ea:65:3d:1f:d2:e4:9b:dc:3b:3a:2b:7b:49:5b:1a: 4f:e8:12:78:e2:ae:69:07:d1:49:a6:95:73:da:06:ef:06:65: 53:4e:21:38:b3:85:3b:aa:5b:97:04:18:da:5e:1a:7b:1b:68: d3:4a:55:8f:7b:87:ce:e1:51:42:b1:9a:e7:6a:fb:ae:57:e2: 73:2d:b3:28:7b:3e:85:90:91:b8:e8:8c:89:fc:a1:c5:1d:83: e8:1b:46:5a:f4:4a:d0:e4:02:d6:26:cd:c7:c5:f6:02:4d:79: 5e:5e:81:98:88:83:f9:1f:bb:30:40:8f:f1:27:45:fa:d0:9f: f0:00:ad:7f:56:35:68:ce:e7:ee:f7:e1:03:30:28:a3:37:30: 94:2a:67:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qmZpF4LPzYhikwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M2NjQ2ODMtZDU4ZS00ZDI2LThjZjEtZTVmNWM1ZGMy NGMyMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YjQ2OTRmMzQtYWNhOS00Y2ExLWEyMzItOGExM2ZjZjdiYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu5JyrN3SHucc6eTz4mKjdWC4GEA7IW5off8 UEYvftTrlj8NVZ0AC56jNNdlTB00pY6BzHze8HhyIXIHqfgXw/qF5cS4kPF2lD5g odfTfH9PyKnHQuQNTvgVp022Jj/ZrxsL9kb5cNmsIpDkYZyYCqpwmEhURm0WHgw0 n1oYY5gZUrE8TJLFcO8cB14REWzBwM3qcD9m/3XVOY+vCGlEQvDY9Jm3cCJlgJ2q MN+i5xxxn1SLRPTmHEncSp0eM9bbcpTeP2VDe7NXys86y4eWR8gXrTq5VspAZXaD v+VEgHMENxI9preibtgsamX+xzEGmYNPLxSMQU9tfMAR0+8MZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE8HCyKqNxpDgcjk00IiBxD6aZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2 NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1YzVkYzI0YzIvOTMwNWY2NTMtNDU4OS0z YjA1LTliMDctYTk4NjE5MWFlYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2M2NjQ2ODMtZDU4ZS00ZDI2LThj ZjEtZTVmNWM1ZGMyNGMyL2NjNjY0NjgzLWQ1OGUtNGQyNi04Y2YxLWU1ZjVjNWRj MjRjMi5jcmwwHwYDVR0jBBgwFoAU0GW5Gote3fP6GpwXPbrG4dvkab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1 YzVkYzI0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGflUHs7runzN0b5DRvYS8kLrpT/zkIOkgaLTa4UnFxD5Mw85AD19D5R 8qOSSbv6+MI93CzG494OKahji9PSiQfdQ6i107rVTOmnKSws3GRmBir9UzUTosvr uLFAhYU+h9M4TbMsMvA9uopBoNu+JuplPR/S5JvcOzore0lbGk/oEnjirmkH0Umm lXPaBu8GZVNOITizhTuqW5cEGNpeGnsbaNNKVY97h87hUUKxmudq+65X4nMtsyh7 PoWQkbjojIn8ocUdg+gbRlr0StDkAtYmzcfF9gJNeV5egZiIg/kfuzBAj/EnRfrQ n/AArX9WNWjO5+734QMwKKM3MJQqZ/g= -----END CERTIFICATE-----Generated at Wed Jun 4 22:48:12 2025 by rpki-client