$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa File: c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa (raw, json) Hash identifier: G7qifKkEzSdJLgaunqL4cLhDmDKNrjGw1Rw9NKNFUVQ= Subject key identifier: F2:3F:A4:7B:06:CA:8A:BD:75:CD:56:3E:47:3D:08:7B:77:B9:A5:2F Certificate issuer: /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Certificate serial: 010D0C9F4328584A49706CB6F8721FEE653AD440 Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 401474 IP address blocks: 23.130.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:6c:b6:f8:72:1f:ee:65:3a:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=791818e5-225f-45d0-ab04-a32eac4a3b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:49:9a:84:4b:e7:a2:29:4d:c4:fa:12:2c: 71:99:3f:21:46:53:d4:ff:0d:91:7e:2b:57:26:95: f1:64:f4:d3:38:8e:aa:27:98:ad:10:56:0e:93:8d: 71:eb:ab:02:30:78:9d:3e:4a:b9:b2:42:20:cd:fa: c9:12:5b:5a:74:dd:4d:0b:83:ec:0f:13:6f:85:47: 2d:6e:98:77:c7:b9:9d:80:57:c8:b6:b2:15:ba:8b: a6:39:dc:c2:0e:96:75:cd:d3:2b:6c:d4:f5:2e:ba: ba:28:e7:35:4b:b1:b1:74:fe:34:ef:b6:27:2c:92: 84:06:d6:06:ba:9f:df:7e:e1:1f:92:e4:69:f3:47: 6f:7a:2c:24:dd:c2:3c:78:c2:a9:a1:ad:52:f7:d0: fb:16:ac:6f:a1:f4:3c:4a:f5:c0:bc:b2:21:50:2a: a2:f6:66:bf:b6:3b:7e:c5:7e:46:95:bc:43:b8:a5: 4a:c2:cd:79:42:7b:21:22:85:92:ce:a1:1d:25:72: 81:79:97:de:fe:b4:0d:8f:e4:8c:79:7d:d5:66:36: 29:11:21:72:16:96:70:5e:76:10:60:ea:4d:6b:dd: 69:99:66:50:19:09:0d:27:d8:e6:bb:9f:b4:4f:e9: b9:a4:e9:dd:7c:82:b1:09:1b:54:89:29:0a:fa:97: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:A4:7B:06:CA:8A:BD:75:CD:56:3E:47:3D:08:7B:77:B9:A5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl X509v3 Authority Key Identifier: keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ce:e7:08:a0:d8:37:74:d5:5f:62:24:87:1d:1b:58:69:e7: 77:9e:0a:64:f6:e3:74:c1:5e:e6:f3:7b:2e:e1:06:1d:ed:2d: 0f:b6:4d:e2:92:4b:44:65:27:3d:1d:9b:40:14:ba:43:70:8a: 20:cb:fa:64:41:49:a6:57:40:e4:2b:ce:01:d3:cc:f5:7e:6c: 6d:d3:21:d9:24:10:18:3f:ad:ed:24:d2:d4:a9:83:ff:32:d9: b9:2b:7d:b1:ad:d4:73:21:d4:87:86:80:e6:b6:0d:f7:34:5f: 6e:d1:43:01:92:fa:55:a4:44:e2:83:6d:d7:af:d7:50:2b:c2: 18:52:ec:39:69:23:51:1f:d6:52:c2:a8:32:a4:c8:ca:e0:c3: 92:7d:ad:07:cd:fd:ee:e3:bc:22:ea:49:7a:8e:a0:4b:a3:74: 97:b1:fc:2f:6e:40:84:49:d3:ab:ff:68:3c:0f:97:21:50:89: 52:ac:29:8f:ef:4f:09:9b:f3:9b:b7:8c:a2:b1:a6:90:04:95: 80:fc:aa:eb:d5:18:f2:37:b8:b9:5e:4b:88:56:97:c3:e5:ba: 41:a6:a2:a7:d8:34:a8:3c:92:b7:a5:69:74:1d:39:15:0b:cd: 76:6f:22:74:c8:11:24:5e:64:00:da:19:a5:43:5e:f5:33:48: 64:2f:a4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGy2+HIf7mU61EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi MjUxMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NzkxODE4ZTUtMjI1Zi00NWQwLWFiMDQtYTMyZWFjNGEzYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzapJmoRL56IpTcT6EixxmT8hRlPU/w2RfitX JpXxZPTTOI6qJ5itEFYOk41x66sCMHidPkq5skIgzfrJEltadN1NC4PsDxNvhUct bph3x7mdgFfItrIVuoumOdzCDpZ1zdMrbNT1Lrq6KOc1S7GxdP4077YnLJKEBtYG up/ffuEfkuRp80dveiwk3cI8eMKpoa1S99D7FqxvofQ8SvXAvLIhUCqi9ma/tjt+ xX5GlbxDuKVKws15QnshIoWSzqEdJXKBeZfe/rQNj+SMeX3VZjYpESFyFpZwXnYQ YOpNa91pmWZQGQkNJ9jmu5+0T+m5pOndfIKxCRtUiSkK+pewTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI/pHsGyoq9dc1WPkc9CHt3uaUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5 NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvYzljOTBlMTItMGI0MC0z MjlkLWE1NjgtMzhiMWZmZGY0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1 YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0 ODIxNWIyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPO5wig2Dd01V9iJIcdG1hp53eeCmT243TBXubzey7hBh3tLQ+2TeKS S0RlJz0dm0AUukNwiiDL+mRBSaZXQOQrzgHTzPV+bG3TIdkkEBg/re0k0tSpg/8y 2bkrfbGt1HMh1IeGgOa2Dfc0X27RQwGS+lWkROKDbdev11ArwhhS7DlpI1Ef1lLC qDKkyMrgw5J9rQfN/e7jvCLqSXqOoEujdJex/C9uQIRJ06v/aDwPlyFQiVKsKY/v Twmb85u3jKKxppAElYD8quvVGPI3uLleS4hWl8PlukGmoqfYNKg8krelaXQdORUL zXZvInTIESReZADaGaVDXvUzSGQvpBY= -----END CERTIFICATE-----Generated at Tue Jul 1 10:17:14 2025 by rpki-client