$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa File: 1203ff35-cf10-3bb4-9155-fbd9a78becde.roa (raw, json) Hash identifier: imaPlshth/qi/oS0Pv+L53f1i0fnzZcOTxWlV0X4naM= Subject key identifier: 92:ED:B6:3D:22:E1:84:3F:20:4F:B3:EE:7D:20:3E:62:FF:AF:7F:41 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584A1B600065B3F9F4964E8A8480 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 23.150.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:00:65:b3:f9:f4:96:4e:8a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=1ac863a2-e9ac-440b-b836-f8d5a651e667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:fc:9d:13:f2:f6:ad:df:75:15:6b:d9:9f: 6a:d8:17:d5:1a:db:df:3b:44:2d:f2:fa:21:8b:84: e1:f4:4b:57:1d:c5:19:78:a8:c6:18:f1:20:ba:87: ad:c1:d3:f0:d5:e7:86:80:99:01:c7:76:ca:06:f2: 03:c9:15:fd:a1:2c:78:c7:1a:47:1f:da:c1:a9:80: d6:88:fe:42:13:17:f3:db:c8:1b:fe:ab:49:4f:6c: 83:09:a5:56:0d:1d:97:b5:c7:21:96:d3:86:40:49: 81:de:20:c7:ce:c4:b4:51:12:48:0e:ad:ee:60:fc: 97:6a:38:29:dc:67:6f:c1:37:ef:c5:00:b5:30:1e: 4c:12:dc:47:79:e4:d0:fa:0f:55:ff:c1:f9:c0:f3: d2:16:a6:52:9e:c0:ac:f5:14:27:99:95:c0:5e:44: da:8b:75:d7:54:66:1c:5f:0b:46:79:86:76:c9:14: d4:dc:c4:bc:95:ff:da:d8:53:df:a4:f5:99:17:d0: de:aa:33:ff:fc:80:f8:22:6b:aa:0b:c7:8d:95:90: 03:68:2e:81:f3:67:f6:dc:82:78:0a:fb:e3:a8:ba: ec:b4:56:46:86:96:40:ce:05:1f:ee:88:c1:c5:9b: b9:3f:0d:13:95:ed:e5:c1:33:14:6b:84:b6:eb:86: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:B6:3D:22:E1:84:3F:20:4F:B3:EE:7D:20:3E:62:FF:AF:7F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 23.150.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a2:5d:02:38:cb:b7:66:44:53:f6:09:64:48:c5:1f:16:cf: 41:1d:da:58:7d:7b:c0:d8:f6:9a:3e:5e:f2:7e:ea:5a:0b:5d: 4b:14:02:91:69:f4:8c:0d:ee:dd:04:a4:f4:29:c4:90:10:33: 42:33:29:00:37:b6:55:3d:f2:87:db:ac:f6:43:f6:8f:c8:a1: 4a:d5:21:01:1e:96:de:cb:c5:84:e0:1d:1e:22:28:6a:4a:c9: ed:5f:10:bd:c0:8f:d0:75:3a:75:21:df:51:c0:12:30:17:77: 86:c9:7f:df:cd:76:c2:e1:bf:ca:89:84:6d:81:3b:3d:e0:8d: e7:6e:f3:01:8b:49:c2:01:7c:c8:ad:64:6a:73:ef:78:df:9b: 3d:4f:9a:2e:e5:8a:53:ca:6a:d1:7d:fc:bf:dd:b1:7d:f6:fe: 3f:50:5d:da:69:a5:13:c7:20:51:f5:0c:c2:79:4f:1c:1e:91: 71:18:f9:d7:01:47:23:58:92:93:60:08:de:2a:6a:e4:c0:b1: dd:ba:6c:a7:bf:19:cd:c6:26:f8:a2:d2:02:d6:18:3c:75:8d: d1:c1:fe:a7:ae:b8:63:5a:8a:c3:7d:4f:41:90:26:94:7b:38: 63:d6:8a:88:b6:2b:90:47:b5:71:a6:5e:62:4f:ff:fd:93:8d: 96:79:f3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYABls/n0lk6KhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MWFjODYzYTItZTlhYy00NDBiLWI4MzYtZjhkNWE2NTFlNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYj8nRPy9q3fdRVr2Z9q2BfVGtvfO0Qt8voh i4Th9EtXHcUZeKjGGPEguoetwdPw1eeGgJkBx3bKBvIDyRX9oSx4xxpHH9rBqYDW iP5CExfz28gb/qtJT2yDCaVWDR2XtcchltOGQEmB3iDHzsS0URJIDq3uYPyXajgp 3GdvwTfvxQC1MB5MEtxHeeTQ+g9V/8H5wPPSFqZSnsCs9RQnmZXAXkTai3XXVGYc XwtGeYZ2yRTU3MS8lf/a2FPfpPWZF9DeqjP//ID4ImuqC8eNlZADaC6B82f23IJ4 CvvjqLrstFZGhpZAzgUf7ojBxZu5Pw0Tle3lwTMUa4S264beewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLttj0i4YQ/IE+z7n0gPmL/r39BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMTIwM2ZmMzUtY2YxMC0z YmI0LTkxNTUtZmJkOWE3OGJlY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5boMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2iXQI4y7dmRFP2CWRIxR8Wz0Ed2lh9e8DY9po+XvJ+6loLXUsUApFp 9IwN7t0EpPQpxJAQM0IzKQA3tlU98ofbrPZD9o/IoUrVIQEelt7LxYTgHR4iKGpK ye1fEL3Aj9B1OnUh31HAEjAXd4bJf9/NdsLhv8qJhG2BOz3gjedu8wGLScIBfMit ZGpz73jfmz1Pmi7lilPKatF9/L/dsX32/j9QXdpppRPHIFH1DMJ5TxwekXEY+dcB RyNYkpNgCN4qauTAsd26bKe/Gc3GJvii0gLWGDx1jdHB/qeuuGNaisN9T0GQJpR7 OGPWioi2K5BHtXGmXmJP//2TjZZ588M= -----END CERTIFICATE-----Generated at Wed Jul 2 15:16:53 2025 by rpki-client