$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa File: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (raw, json) Hash identifier: Zp2oXrqyw7zc0xQqMfrEfPviyq3wO6eFH6ypTciz2QY= Subject key identifier: E2:E4:E1:91:1C:E1:FC:5E:52:28:4F:AD:7F:52:71:A7:D8:0F:F2:27 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584A14655FE80B981BB7F6E0A180 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 64272 IP address blocks: 23.134.64.0/24 maxlen: 24 2602:fecb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5f:e8:0b:98:1b:b7:f6:e0:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=420060a1-6368-41cf-ad47-fe319daa746d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:bd:22:d5:50:ec:f8:6b:9f:0f:e4:e8:ba: 1c:fb:3f:12:eb:57:11:cc:b2:26:dd:ca:1c:52:54: d8:31:ea:44:d3:f7:0b:55:85:c7:36:e2:c7:b6:11: d3:66:cf:d7:7d:00:c5:1e:18:b3:d3:3a:03:1e:2a: 3e:da:09:59:bb:6f:4d:eb:3f:fd:7d:b0:a3:29:47: a4:72:21:2b:7f:ea:44:e3:f7:bf:9a:73:47:f8:f6: 0d:77:9e:7c:43:47:2f:2a:d0:02:bf:54:2a:d9:93: 22:56:32:0b:8a:5c:50:0c:a1:04:df:3d:95:80:52: af:9f:76:30:18:57:99:e0:87:0c:4a:6e:a7:a9:32: 3f:31:96:51:bc:d9:06:3d:10:ec:54:a2:42:a8:da: 62:fa:ac:e5:9d:26:e1:b5:2f:fd:39:d2:f0:56:59: 29:8d:45:f5:05:58:80:ac:6c:e6:11:8f:45:7e:29: 19:14:1e:32:fa:44:84:73:5c:30:0b:bb:0c:f6:ed: 92:c5:b7:77:13:e9:0f:ee:33:a8:0e:9d:b7:6d:b6: b7:86:a7:83:c1:d9:1a:24:90:79:bb:4a:dc:72:b1: db:44:dd:f6:f4:b4:77:1e:3d:ac:00:38:11:26:bc: dc:7e:54:0c:56:77:37:3b:7b:d8:82:56:e4:b4:74: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:E1:91:1C:E1:FC:5E:52:28:4F:AD:7F:52:71:A7:D8:0F:F2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:59:22:a6:21:ce:10:52:b7:69:3b:0b:20:64:41:f9:99:fd: 86:57:4f:4e:0b:a6:69:20:27:ea:d6:de:b3:5a:97:a7:9f:c0: 5c:56:a7:5f:2b:c1:37:07:83:98:53:f0:a6:5d:5b:98:39:38: f8:c9:49:b4:e2:8a:00:1d:b1:e2:ac:87:eb:98:ab:a3:ec:25: ef:33:dc:b1:af:3d:1b:45:35:b2:72:db:d8:c2:e1:a8:ee:de: 21:5b:57:67:e0:53:32:b0:0f:93:f3:99:ff:97:20:8e:57:df: be:23:39:7d:a4:64:0f:94:26:04:79:04:cc:5d:93:31:89:a4: 8b:ed:6f:16:9f:cf:11:6f:81:cb:3e:f8:ed:98:a4:cb:6a:96: d4:2d:d6:32:04:2d:16:6e:6d:f3:91:30:60:ff:15:87:da:a8: 8f:50:7d:a0:54:64:1d:cb:46:60:a3:a0:dd:84:27:33:7f:6f: 70:ef:62:92:d1:57:a3:1c:47:a2:6e:4f:82:f0:2f:ea:a1:06: 12:5e:4b:3b:84:5c:e8:de:8d:01:eb:b6:de:0f:04:5c:28:1a: 56:c5:d5:87:9a:4f:09:45:46:d3:0c:ce:48:a8:64:79:9a:ec: 35:61:55:74:aa:12:a2:f7:c7:e1:58:19:36:46:8f:d1:0c:d7: 37:c6:5d:f6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoUZV/oC5gbt/bgoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NDIwMDYwYTEtNjM2OC00MWNmLWFkNDctZmUzMTlkYWE3NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9m9ItVQ7Phrnw/k6Loc+z8S61cRzLIm3coc UlTYMepE0/cLVYXHNuLHthHTZs/XfQDFHhiz0zoDHio+2glZu29N6z/9fbCjKUek ciErf+pE4/e/mnNH+PYNd558Q0cvKtACv1Qq2ZMiVjILilxQDKEE3z2VgFKvn3Yw GFeZ4IcMSm6nqTI/MZZRvNkGPRDsVKJCqNpi+qzlnSbhtS/9OdLwVlkpjUX1BViA rGzmEY9FfikZFB4y+kSEc1wwC7sM9u2Sxbd3E+kP7jOoDp23bba3hqeDwdkaJJB5 u0rccrHbRN329LR3Hj2sADgRJrzcflQMVnc3O3vYglbktHTeTQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOLk4ZEc4fxeUihPrX9ScafYD/InMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvYTliMDkwYmEtNGUyZS0z ZmQwLWJkYTItZjViMGU3MzhlNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZAMA4E AgACMAgDBgQmAv7LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvWSKmIc4QUrdpOwsgZEH5mf2GV09OC6Zp ICfq1t6zWpenn8BcVqdfK8E3B4OYU/CmXVuYOTj4yUm04ooAHbHirIfrmKuj7CXv M9yxrz0bRTWyctvYwuGo7t4hW1dn4FMysA+T85n/lyCOV9++Izl9pGQPlCYEeQTM XZMxiaSL7W8Wn88Rb4HLPvjtmKTLapbULdYyBC0Wbm3zkTBg/xWH2qiPUH2gVGQd y0Zgo6DdhCczf29w72KS0VejHEeibk+C8C/qoQYSXks7hFzo3o0B67beDwRcKBpW xdWHmk8JRUbTDM5IqGR5muw1YVV0qhKi98fhWBk2Ro/RDNc3xl32 -----END CERTIFICATE-----Generated at Wed Jul 2 14:21:59 2025 by rpki-client