$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa File: 1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa (raw, json) Hash identifier: nJTKX2djAr3rx80cifnaYcqrokg24Is+nPmRnxBZSMI= Subject key identifier: DD:2D:BF:5D:4E:AD:FA:06:03:19:84:E6:C2:EF:78:17:F1:88:C8:68 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584A34801B0F3410A3810FEA9580 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 53727 IP address blocks: 23.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1b:0f:34:10:a3:81:0f:ea:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=3b27cc38-8cfa-4b5f-b8ba-57e0db5ecafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:2a:67:a8:77:e1:8a:1e:e5:19:5b:bd:76: 60:b5:54:c1:58:a5:be:a3:9e:0b:7c:3d:c5:1e:fc: f1:79:85:34:7b:e6:11:46:f6:b5:ea:69:4b:08:4a: d4:f6:f1:da:43:a8:49:39:e9:6f:c2:ec:d6:7b:bc: 44:79:b7:eb:12:46:ab:07:c1:dc:bb:8c:4e:4f:26: 30:18:bd:48:42:75:b0:74:95:ab:77:73:91:98:d7: e4:31:69:9e:41:6b:f0:58:6a:e4:1a:42:0a:c8:53: fc:a3:05:09:86:51:13:24:b2:70:9e:3d:1c:5b:8c: 4e:94:b7:79:dd:6c:47:21:19:0b:27:d5:df:a9:45: 2d:06:49:11:34:df:d2:1e:8d:0c:68:46:93:8e:d0: 63:17:7c:c0:58:12:70:7d:a4:9d:6e:31:c1:49:9e: ad:1f:9a:f8:c3:89:9b:d3:f8:a7:a6:23:bc:bb:ef: dc:48:1d:3f:72:3f:54:29:51:cf:87:40:02:fb:9f: 65:c4:a5:4a:48:d3:f7:de:c7:6b:6f:ba:07:5b:04: 7e:00:29:0c:9f:74:f6:04:69:97:b2:a9:76:13:c2: e5:fe:a2:b2:8d:3f:91:09:c4:de:56:5d:21:62:73: b0:c5:e8:c6:1f:d6:c7:1b:c2:91:d0:d4:8c:b1:ee: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:BF:5D:4E:AD:FA:06:03:19:84:E6:C2:EF:78:17:F1:88:C8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2c:1f:02:02:de:13:20:31:9d:86:e2:21:54:d8:db:83:a6: 70:07:e4:0b:6e:04:0a:78:56:38:fd:61:aa:d8:e4:37:df:cf: ce:41:47:46:7e:19:8f:94:e4:d9:50:6a:b6:74:31:ee:1b:51: 70:79:9d:f8:2c:11:76:cc:52:45:55:36:cc:48:99:77:9a:38: 59:9e:14:90:f4:03:63:99:53:bb:b3:01:09:f3:46:83:a9:98: e7:be:6f:e6:c5:c3:40:53:e3:4b:19:fa:bc:ab:55:94:2f:fc: 3c:f6:4a:f4:36:0d:cb:71:5f:4f:72:33:c2:1b:93:7f:d1:cd: 1a:01:d1:bd:b3:91:93:61:e9:fa:e7:1a:c5:58:32:b8:31:7e: c9:2e:fe:da:ab:0f:4c:8d:d3:f6:c2:0f:c9:c3:08:cb:f6:01: 33:12:09:2d:a5:0a:d2:f6:7b:ce:55:ba:62:de:80:28:d9:90: 34:5a:e8:31:b6:74:1f:be:b8:64:a0:66:2c:30:c5:ae:17:59: d1:8e:54:7f:31:3e:c0:a8:43:c3:c5:ff:17:26:13:79:5c:64: 2d:d4:a0:6f:e3:0f:93:49:63:f9:03:71:9f:b5:b7:0c:88:2d: d5:6c:e1:b0:78:fd:4e:dc:d2:44:7f:f3:94:0b:df:fa:20:45: 98:3e:7e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBsPNBCjgQ/qlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk M2IyN2NjMzgtOGNmYS00YjVmLWI4YmEtNTdlMGRiNWVjYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi58qZ6h34Yoe5RlbvXZgtVTBWKW+o54LfD3F HvzxeYU0e+YRRva16mlLCErU9vHaQ6hJOelvwuzWe7xEebfrEkarB8Hcu4xOTyYw GL1IQnWwdJWrd3ORmNfkMWmeQWvwWGrkGkIKyFP8owUJhlETJLJwnj0cW4xOlLd5 3WxHIRkLJ9XfqUUtBkkRNN/SHo0MaEaTjtBjF3zAWBJwfaSdbjHBSZ6tH5r4w4mb 0/inpiO8u+/cSB0/cj9UKVHPh0AC+59lxKVKSNP33sdrb7oHWwR+ACkMn3T2BGmX sql2E8Ll/qKyjT+RCcTeVl0hYnOwxejGH9bHG8KR0NSMse5pBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0tv11OrfoGAxmE5sLveBfxiMhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMTY1MmZkYjktMDVkMC0z YzRjLWEzZjYtMWRlYmZjZmI5MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQsHwIC3hMgMZ2G4iFU2NuDpnAH5AtuBAp4Vjj9YarY5Dffz85BR0Z+ GY+U5NlQarZ0Me4bUXB5nfgsEXbMUkVVNsxImXeaOFmeFJD0A2OZU7uzAQnzRoOp mOe+b+bFw0BT40sZ+ryrVZQv/Dz2SvQ2DctxX09yM8Ibk3/RzRoB0b2zkZNh6frn GsVYMrgxfsku/tqrD0yN0/bCD8nDCMv2ATMSCS2lCtL2e85VumLegCjZkDRa6DG2 dB++uGSgZiwwxa4XWdGOVH8xPsCoQ8PF/xcmE3lcZC3UoG/jD5NJY/kDcZ+1twyI LdVs4bB4/U7c0kR/85QL3/ogRZg+fkA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:17 2025 by rpki-client