$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa File: aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa (raw, json) Hash identifier: Amr/XFRCflqtLdhlDczYNxgvbvXLYZ800MteH4JuBCg= Subject key identifier: 14:B0:3D:D0:86:C8:0F:8C:2C:88:82:B0:42:4E:30:53:02:B6:6B:E7 Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Certificate serial: 010D0C9F43285849B14A0C51AEF75673797D4F80 Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 18615 IP address blocks: 23.252.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0c:51:ae:f7:56:73:79:7d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=42db7655-d528-43bf-a7d2-9d47e0c9c1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:0e:12:a3:33:af:4a:55:e4:ef:da:ea:ac: 17:48:3b:63:53:73:c9:fb:e3:cf:b7:53:e3:e4:22: 02:3b:2b:c1:1e:e6:a5:b5:28:34:39:bc:d7:68:c1: d0:03:c6:63:8f:37:0b:b1:8f:29:86:fd:f2:f2:e3: e4:f6:c9:10:d9:56:85:06:a4:8d:7b:6c:2e:82:15: 3d:46:91:28:5b:f1:be:08:79:71:8a:92:51:b2:4b: 20:3f:df:24:14:2c:ee:53:30:21:45:0f:20:6b:27: 2b:d9:f7:12:ca:b4:33:12:43:84:d9:8c:fd:41:34: c4:42:c1:21:97:95:7b:77:d7:3f:a3:a4:69:7e:55: dc:1d:61:6b:90:02:cc:64:dd:cb:87:71:26:e4:89: 52:79:61:29:38:82:ba:d8:fb:6c:2d:f6:d2:10:06: 3a:2f:67:b1:21:34:b3:43:97:6d:3f:77:06:a0:4c: 54:a6:e9:ff:ce:00:c8:bb:ae:1b:e1:eb:c8:9b:28: 92:f8:c5:53:af:0a:bf:2c:3f:19:9c:1a:22:29:7c: dd:a5:2c:f1:98:cb:9f:0f:b9:8e:36:97:1f:3b:64: 5d:52:fb:4f:73:4a:21:56:d9:52:c0:f0:84:e0:86: 3b:aa:50:22:08:ed:3e:37:30:8b:d7:06:6f:f7:ff: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:3D:D0:86:C8:0F:8C:2C:88:82:B0:42:4E:30:53:02:B6:6B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl X509v3 Authority Key Identifier: keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer sbgp-ipAddrBlock: critical IPv4: 23.252.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:05:4f:87:78:31:f3:df:9f:a5:fc:e2:e5:0f:b4:16:f8:3f: 53:96:b3:f2:dd:7d:f7:f8:1f:73:c2:9f:67:68:ae:fe:da:12: 06:29:08:31:30:b5:ef:10:54:cf:2e:d6:c6:db:94:4c:19:d5: 97:ae:36:bc:01:b9:dc:47:62:3d:10:e4:91:62:90:fc:33:0f: 82:f2:17:0d:2d:f3:15:09:26:27:6e:24:dd:5a:ae:b7:5a:8d: a8:57:cb:3d:62:b2:a4:98:28:ad:45:24:1a:16:10:85:6a:ca: d5:46:60:fc:c9:41:66:1b:5e:91:81:8c:5b:c2:d5:b0:0b:d5: f1:7d:74:d9:5d:a5:b8:2c:c8:d3:06:b7:b3:10:98:01:e6:d2: 65:59:86:23:a0:da:db:3a:20:21:a5:6b:02:8f:57:e0:79:73: 0c:4e:4a:33:38:9c:42:ae:62:5c:ff:a1:22:37:b9:4c:b2:6d: 1f:6e:4f:bb:c2:da:74:8a:9a:f1:8d:87:7c:f0:6d:d8:43:f3: f2:d6:6e:89:43:fd:43:37:93:7a:25:6d:89:e0:80:4c:26:64: 55:b7:14:9c:3b:c5:be:c7:6e:63:26:10:32:a0:1d:b5:12:22: 65:86:65:44:e3:bd:4a:3e:05:9c:e4:5d:11:c3:b2:62:3c:50: fa:49:6d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgxRrvdWc3l9T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx MDg2MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDJkYjc2NTUtZDUyOC00M2JmLWE3ZDItOWQ0N2UwYzljMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nEOEqMzr0pV5O/a6qwXSDtjU3PJ++PPt1Pj 5CICOyvBHualtSg0ObzXaMHQA8ZjjzcLsY8phv3y8uPk9skQ2VaFBqSNe2wughU9 RpEoW/G+CHlxipJRsksgP98kFCzuUzAhRQ8gaycr2fcSyrQzEkOE2Yz9QTTEQsEh l5V7d9c/o6RpflXcHWFrkALMZN3Lh3Em5IlSeWEpOIK62PtsLfbSEAY6L2exITSz Q5dtP3cGoExUpun/zgDIu64b4evImyiS+MVTrwq/LD8ZnBoiKXzdpSzxmMufD7mO NpcfO2RdUvtPc0ohVtlSwPCE4IY7qlAiCO0+NzCL1wZv9/8xXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSwPdCGyA+MLIiCsEJOMFMCtmvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvYWFhZGQzODktYTU3NC0z OWYwLThlNzktNmY2ZGRjOGY4NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0 MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0FT4d4MfPfn6X84uUPtBb4P1OWs/Ldfff4H3PCn2dorv7aEgYpCDEw te8QVM8u1sbblEwZ1ZeuNrwBudxHYj0Q5JFikPwzD4LyFw0t8xUJJiduJN1arrda jahXyz1isqSYKK1FJBoWEIVqytVGYPzJQWYbXpGBjFvC1bAL1fF9dNldpbgsyNMG t7MQmAHm0mVZhiOg2ts6ICGlawKPV+B5cwxOSjM4nEKuYlz/oSI3uUyybR9uT7vC 2nSKmvGNh3zwbdhD8/LWbolD/UM3k3olbYnggEwmZFW3FJw7xb7HbmMmEDKgHbUS ImWGZUTjvUo+BZzkXRHDsmI8UPpJbVM= -----END CERTIFICATE-----Generated at Thu May 15 04:41:28 2025 by rpki-client