$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa File: 65c13d7b-acee-30f4-a5da-46152c1b5e65.roa (raw, json) Hash identifier: hPJENY+Lkj6AVux/tVYMItTnJAzIshf8CCboPbTCvI0= Subject key identifier: B3:B7:62:6A:A0:17:83:85:37:79:0D:5A:74:09:17:63:F4:99:5A:33 Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Certificate serial: 010D0C9F4328584A51D06690DE4AA6F857501E80 Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 21527 IP address blocks: 23.157.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:66:90:de:4a:a6:f8:57:50:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=7b742810-71d2-4480-8a6b-e62a15e3e299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:b2:0b:c4:e0:b0:dc:99:50:ac:2e:6a:2a: ad:34:3d:ed:d6:d2:42:1b:0e:60:03:f1:d3:11:c9: 98:58:71:6b:eb:1a:a2:2b:e5:3e:e7:c8:60:59:97: 07:2f:fc:87:af:56:80:ca:f6:8e:a3:0c:15:84:70: f2:0b:ff:18:79:94:94:73:8b:99:22:4e:16:41:77: 71:c3:5a:83:af:e9:6d:d1:7d:76:88:ac:7a:34:41: 07:85:b2:8d:77:77:90:69:cb:33:b0:9e:5f:74:38: bc:bd:35:99:39:8c:61:79:f8:28:04:c4:e0:45:b2: 7c:88:cd:a8:18:c4:99:6d:d7:4d:ca:49:20:1d:7c: 75:c2:83:49:d7:08:0e:23:d7:ed:83:01:03:e5:25: b7:78:3a:7a:a5:bb:60:e6:b9:5b:29:c3:4a:0c:5b: 7f:a7:50:df:a2:41:0d:9c:80:b9:22:65:d4:27:f6: 32:1f:2b:b6:d3:99:25:2f:c3:da:5d:09:d1:22:3a: ca:58:f0:e0:f7:e3:a2:82:e1:87:2c:0d:d8:e2:c2: a3:32:a8:db:38:2c:1c:1a:23:53:ac:26:75:db:78: 45:c2:6d:dd:8a:d7:e6:70:34:0b:a9:45:a9:46:e2: df:63:56:4f:2a:62:78:a1:ba:22:ac:05:b0:57:96: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:62:6A:A0:17:83:85:37:79:0D:5A:74:09:17:63:F4:99:5A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl X509v3 Authority Key Identifier: keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:66:2b:23:89:40:b7:e3:48:59:d3:e0:d6:b1:64:38:a3:b2: 50:17:bc:b4:91:72:a5:f7:56:56:11:75:c3:42:ba:c1:50:eb: 00:41:fb:b9:75:16:9d:0c:71:c4:b1:11:f6:f6:8b:bf:4b:b1: 8c:e6:7e:30:4c:7c:8d:4f:3a:c0:77:08:d6:8e:d8:cf:5f:90: 6e:6e:70:eb:92:03:05:52:f0:66:b6:fe:54:3d:63:2c:5a:57: ec:ee:1e:69:3a:e1:ef:9c:f4:5f:88:0a:1e:1d:bb:5f:53:65: a6:95:ef:8a:23:a4:c8:57:52:b5:90:98:7b:5a:09:eb:0f:ae: 1a:9c:35:02:98:cc:7f:c6:b6:13:f3:32:e3:26:08:1e:61:d7: 14:73:12:a3:24:df:c8:34:fe:c4:71:d9:c1:28:74:de:97:e2: 57:ea:a4:66:bc:05:67:66:c3:ac:68:6b:c8:34:8d:63:83:ea: ac:d5:fb:3f:63:69:d0:e1:af:5f:87:99:9e:09:5b:04:19:16: 03:86:05:1c:24:6d:31:4f:d0:13:01:42:dd:cc:74:df:71:ea: 3b:4a:8b:b2:1e:ae:63:68:d1:74:61:92:93:f8:02:64:40:70: 42:70:fd:3b:d9:de:dc:73:df:73:30:50:64:1f:e3:fd:2c:06: 51:dd:ac:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GaQ3kqm+FdQHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4 YTNlMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk N2I3NDI4MTAtNzFkMi00NDgwLThhNmItZTYyYTE1ZTNlMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OSyC8TgsNyZUKwuaiqtND3t1tJCGw5gA/HT EcmYWHFr6xqiK+U+58hgWZcHL/yHr1aAyvaOowwVhHDyC/8YeZSUc4uZIk4WQXdx w1qDr+lt0X12iKx6NEEHhbKNd3eQacszsJ5fdDi8vTWZOYxhefgoBMTgRbJ8iM2o GMSZbddNykkgHXx1woNJ1wgOI9ftgwED5SW3eDp6pbtg5rlbKcNKDFt/p1DfokEN nIC5ImXUJ/YyHyu205klL8PaXQnRIjrKWPDg9+OiguGHLA3Y4sKjMqjbOCwcGiNT rCZ123hFwm3ditfmcDQLqUWpRuLfY1ZPKmJ4oboirAWwV5b6wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO3YmqgF4OFN3kNWnQJF2P0mVozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvNjVjMTNkN2ItYWNlZS0z MGY0LWE1ZGEtNDYxNTJjMWI1ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1 NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4 OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdmKyOJQLfjSFnT4NaxZDijslAXvLSRcqX3VlYRdcNCusFQ6wBB+7l1 Fp0MccSxEfb2i79LsYzmfjBMfI1POsB3CNaO2M9fkG5ucOuSAwVS8Ga2/lQ9Yyxa V+zuHmk64e+c9F+ICh4du19TZaaV74ojpMhXUrWQmHtaCesPrhqcNQKYzH/GthPz MuMmCB5h1xRzEqMk38g0/sRx2cEodN6X4lfqpGa8BWdmw6xoa8g0jWOD6qzV+z9j adDhr1+HmZ4JWwQZFgOGBRwkbTFP0BMBQt3MdN9x6jtKi7IermNo0XRhkpP4AmRA cEJw/TvZ3txz33MwUGQf4/0sBlHdrGk= -----END CERTIFICATE-----Generated at Mon Jun 30 22:31:57 2025 by rpki-client