$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa File: 25017e4e-9850-38bf-a8e4-a96d2341037c.roa (raw, json) Hash identifier: yWVwQHev7Oya2zt6VNf60Dud6b7P2Y6Nsj0qPbUSL7A= Subject key identifier: 48:C8:DF:E3:EA:D0:C5:54:E5:B2:4D:F3:A8:67:10:B2:6B:4A:C4:6F Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584A4970704BA2ECF2D524AC27A0 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 201217 IP address blocks: 23.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:70:4b:a2:ec:f2:d5:24:ac:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=ed660ccd-8327-41a1-966a-335afad4f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:25:67:cb:fe:2a:04:a5:7a:4b:dd:dd:9a: 69:c5:7b:1e:f8:c9:0a:28:72:66:2b:fe:04:bd:fc: 67:fe:dd:e9:15:24:e4:40:c1:9c:7e:7c:f5:d8:7d: 73:d9:f3:04:05:5b:90:f8:4d:d3:86:ca:b7:a8:d9: a0:4a:d7:f3:11:0f:7f:a6:9e:cf:96:2f:14:0f:d7: d2:34:77:69:3e:6d:a9:d0:32:36:f4:a5:2d:7a:79: 28:6d:ee:f3:17:14:c1:db:9e:f3:da:f7:5e:1e:31: 91:79:4b:9d:66:7a:8c:8a:3a:8e:a2:03:2d:f2:c5: 07:44:c3:04:fa:cd:4b:21:9c:88:60:a1:86:bf:7d: fe:bf:8c:57:8c:a3:a2:ac:d3:57:c7:f5:4a:fc:a7: a4:93:39:08:6d:1c:a9:96:0f:1e:18:b3:b7:e4:af: d6:02:47:f9:a1:05:e0:66:cf:4f:39:18:00:f7:23: 4d:88:1a:c5:52:4d:03:8f:35:59:aa:52:8b:cb:ad: c9:5e:34:b1:25:fb:c2:b9:25:ad:24:38:d2:56:46: ca:e9:6f:5e:73:4d:64:11:1b:4f:67:df:15:50:e9: 0a:6c:cd:44:32:84:c2:b7:bc:1d:0f:ab:fe:47:05: 20:19:a8:91:86:e1:78:41:84:48:0a:a5:9b:dc:2e: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:DF:E3:EA:D0:C5:54:E5:B2:4D:F3:A8:67:10:B2:6B:4A:C4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e7:f5:06:2b:8a:47:d6:a0:02:b1:ea:3b:36:fc:5f:d1:22: f8:16:af:75:18:cf:9a:0a:2c:38:50:df:b7:20:84:08:ea:d5: b4:f1:3e:06:d5:86:9b:b0:e8:a9:d9:da:51:80:8f:e9:16:87: f8:80:ff:ed:72:5d:01:63:eb:7c:bb:49:03:ec:64:ba:ee:ea: 7f:af:9c:b2:7f:53:76:5f:4b:0e:3c:aa:56:af:5b:58:30:cf: 31:9b:1c:15:9b:95:e1:0b:c9:fe:43:ce:2d:bd:cd:69:0a:6b: ae:fc:c6:f6:bc:7c:87:1c:3a:1f:aa:af:bd:e4:2a:d5:0f:45: 6d:9b:87:6c:9b:bd:41:4d:dd:b8:7c:73:71:fc:aa:b5:5b:4f: d2:77:53:b0:f0:d9:10:39:85:b8:ac:f4:c1:a9:42:e3:74:dc: e5:61:48:1b:9c:dd:6e:84:f4:03:b8:f1:c6:cc:d0:09:c9:e1: 9d:48:56:34:ad:cf:c4:c5:cf:25:dd:48:ef:96:2d:e2:35:a8: 56:30:14:4b:d6:55:8b:33:0a:e0:78:53:cf:49:10:01:ef:b3: e1:dd:39:44:56:83:69:7c:88:af:98:1c:90:77:a1:39:68:1b: e0:e0:b5:0d:92:19:d3:94:6d:13:01:c5:59:75:5e:25:4c:c7: 64:c1:85:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHBLouzy1SSsJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZWQ2NjBjY2QtODMyNy00MWExLTk2NmEtMzM1YWZhZDRmMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLslZ8v+KgSlekvd3ZppxXse+MkKKHJmK/4E vfxn/t3pFSTkQMGcfnz12H1z2fMEBVuQ+E3Thsq3qNmgStfzEQ9/pp7Pli8UD9fS NHdpPm2p0DI29KUtenkobe7zFxTB257z2vdeHjGReUudZnqMijqOogMt8sUHRMME +s1LIZyIYKGGv33+v4xXjKOirNNXx/VK/KekkzkIbRyplg8eGLO35K/WAkf5oQXg Zs9PORgA9yNNiBrFUk0DjzVZqlKLy63JXjSxJfvCuSWtJDjSVkbK6W9ec01kERtP Z98VUOkKbM1EMoTCt7wdD6v+RwUgGaiRhuF4QYRICqWb3C6wjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjI3+Pq0MVU5bJN86hnELJrSsRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvMjUwMTdlNGUtOTg1MC0z OGJmLWE4ZTQtYTk2ZDIzNDEwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTn9QYrikfWoAKx6js2/F/RIvgWr3UYz5oKLDhQ37cghAjq1bTxPgbV hpuw6KnZ2lGAj+kWh/iA/+1yXQFj63y7SQPsZLru6n+vnLJ/U3ZfSw48qlavW1gw zzGbHBWbleELyf5Dzi29zWkKa678xva8fIccOh+qr73kKtUPRW2bh2ybvUFN3bh8 c3H8qrVbT9J3U7Dw2RA5hbis9MGpQuN03OVhSBuc3W6E9AO48cbM0AnJ4Z1IVjSt z8TFzyXdSO+WLeI1qFYwFEvWVYszCuB4U89JEAHvs+HdOURWg2l8iK+YHJB3oTlo G+DgtQ2SGdOUbRMBxVl1XiVMx2TBhTM= -----END CERTIFICATE-----Generated at Sun Jun 29 21:01:46 2025 by rpki-client