$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa File: 0b696ea7-7910-34a0-95a4-03d356eda25b.roa (raw, json) Hash identifier: wd1kakXgU2Z0ExHse15skx/0optMhdiTirhPxhjZvic= Subject key identifier: 9D:D1:4D:41:06:1D:A4:38:F5:D1:D5:80:2F:D5:5B:B2:97:2E:E8:90 Certificate issuer: /CN=a36c31cd-64fa-4048-853b-eaea17e56691 Certificate serial: 010D0C9F4328584A4F47BF45DADD002DE4D42C80 Authority key identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa Signing time: Wed 25 Jun 2025 15:14:11 +0000 ROA not before: Wed 25 Jun 2025 15:14:11 +0000 ROA not after: Tue 23 Sep 2025 15:14:11 +0000 asID: 64079 IP address blocks: 23.139.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:47:bf:45:da:dd:00:2d:e4:d4:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36c31cd-64fa-4048-853b-eaea17e56691 Validity Not Before: Jun 25 15:14:11 2025 GMT Not After : Sep 23 15:14:11 2025 GMT Subject: CN=f2372c6a-bb30-46f5-b9fb-f0507c596a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:f9:09:08:5d:3f:e3:c9:2d:d7:0d:81:af: 80:10:9a:b0:63:20:16:a3:f3:82:87:5c:ac:cc:60: 88:48:1a:6f:3d:b1:1a:9e:94:49:34:f6:a2:68:15: 11:98:b2:44:e0:a1:29:b3:2e:bb:09:41:73:e6:1e: 01:94:94:d8:70:17:26:d5:d5:4c:3b:2e:eb:3c:46: 70:b7:8f:4b:d9:2a:96:8a:9b:4f:88:ce:ad:82:c5: 2c:b5:ff:34:6f:64:9f:28:5b:16:81:7c:0f:e6:b2: 2c:b0:52:66:d9:bc:8f:e5:f4:4e:7d:c3:32:77:eb: 06:34:26:98:e5:cc:99:6a:74:60:03:1c:47:38:fb: 99:0f:3c:32:91:27:b8:76:fd:4c:15:1e:05:4a:2b: 23:21:03:e0:03:66:f0:e4:65:ef:9b:70:22:8e:e7: 87:37:83:6d:ff:46:36:7a:0a:cc:01:e1:87:de:ad: 31:55:15:18:10:42:c8:81:1a:c0:57:d4:00:61:7e: ab:c9:f3:d5:4e:b4:41:ac:c6:f0:93:13:36:ea:5f: 17:17:2c:88:69:7c:c4:e2:26:e7:f2:ae:f6:df:5d: 0b:4f:fc:94:a9:94:29:44:fe:84:34:ca:3a:80:4c: f4:2b:dc:ec:a2:ee:98:44:c5:22:cd:42:20:8e:5a: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:4D:41:06:1D:A4:38:F5:D1:D5:80:2F:D5:5B:B2:97:2E:E8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.crl X509v3 Authority Key Identifier: keyid:A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer sbgp-ipAddrBlock: critical IPv4: 23.139.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:74:ac:a1:22:fc:e3:f6:a1:6c:f0:42:a4:8c:5b:e1:1d:c5: e6:5c:49:72:65:bc:ec:eb:7b:e6:16:83:d2:36:82:67:e3:e7: 31:4a:f1:63:1f:6f:16:7f:5e:d4:de:74:12:a0:ca:e3:75:97: df:e9:de:47:ba:2e:2f:27:22:f7:d1:df:6f:04:72:48:44:23: fa:84:c3:7c:34:ed:4d:92:52:0b:b8:93:af:7e:2b:ef:75:e7: bf:ce:b1:4d:f7:d2:c2:63:93:a7:f3:9a:3a:5e:d5:cc:cf:3a: b9:c1:4f:2a:d1:23:2a:f9:e0:15:42:44:0d:61:05:e1:4a:47: 04:8a:c4:2e:46:bf:f2:b2:1c:13:63:3a:23:87:65:19:c2:aa: 63:94:c7:4e:30:34:23:1e:38:d7:86:a7:b6:26:7b:3f:ac:06: 91:50:93:5d:a5:7d:b0:0d:76:60:f0:b0:24:ed:69:f7:dc:41: b2:9d:2f:d9:3e:89:e7:df:b0:c6:17:77:ca:ab:8b:b4:f7:ea: 79:14:31:64:bc:4a:fe:df:cc:99:fc:f4:2b:db:32:62:41:e6: 93:9a:7f:c7:8f:ad:1a:cf:67:e0:f1:6c:aa:61:0e:99:ef:58: c4:73:80:7c:67:a2:d9:3d:2a:96:94:e6:73:15:b0:dd:db:bf: 56:22:51:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPR79F2t0ALeTULIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2YzMxY2QtNjRmYS00MDQ4LTg1M2ItZWFlYTE3ZTU2 NjkxMB4XDTI1MDYyNTE1MTQxMVoXDTI1MDkyMzE1MTQxMVowLzEtMCsGA1UEAxMk ZjIzNzJjNmEtYmIzMC00NmY1LWI5ZmItZjA1MDdjNTk2YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xP5CQhdP+PJLdcNga+AEJqwYyAWo/OCh1ys zGCISBpvPbEanpRJNPaiaBURmLJE4KEpsy67CUFz5h4BlJTYcBcm1dVMOy7rPEZw t49L2SqWiptPiM6tgsUstf80b2SfKFsWgXwP5rIssFJm2byP5fROfcMyd+sGNCaY 5cyZanRgAxxHOPuZDzwykSe4dv1MFR4FSisjIQPgA2bw5GXvm3AijueHN4Nt/0Y2 egrMAeGH3q0xVRUYEELIgRrAV9QAYX6ryfPVTrRBrMbwkxM26l8XFyyIaXzE4ibn 8q72310LT/yUqZQpRP6ENMo6gEz0K9zsou6YRMUizUIgjloR4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3RTUEGHaQ49dHVgC/VW7KXLuiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzZj MzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdlNTY2OTEvMGI2OTZlYTctNzkxMC0z NGEwLTk1YTQtMDNkMzU2ZWRhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTM2YzMxY2QtNjRmYS00MDQ4LTg1 M2ItZWFlYTE3ZTU2NjkxL2EzNmMzMWNkLTY0ZmEtNDA0OC04NTNiLWVhZWExN2U1 NjY5MS5jcmwwHwYDVR0jBBgwFoAUpRN3TXmP6RBSe253Ri3Nn/5AwP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVh MTdlNTY2OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4v0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV0rKEi/OP2oWzwQqSMW+EdxeZcSXJlvOzre+YWg9I2gmfj5zFK8WMf bxZ/XtTedBKgyuN1l9/p3ke6Li8nIvfR328EckhEI/qEw3w07U2SUgu4k69+K+91 57/OsU330sJjk6fzmjpe1czPOrnBTyrRIyr54BVCRA1hBeFKRwSKxC5Gv/KyHBNj OiOHZRnCqmOUx04wNCMeONeGp7Ymez+sBpFQk12lfbANdmDwsCTtaffcQbKdL9k+ ieffsMYXd8qri7T36nkUMWS8Sv7fzJn89CvbMmJB5pOaf8ePrRrPZ+DxbKphDpnv WMRzgHxnotk9KpaU5nMVsN3bv1YiUek= -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:05 2025 by rpki-client