$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa File: b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa (raw, json) Hash identifier: w7gmPtxX3epGYm41pp0kKx4JSpONpz7GeE48eOlxYIE= Subject key identifier: 2D:E0:6E:79:56:68:2B:0D:7C:55:F5:F8:42:E4:E3:A1:2E:F1:A0:9E Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584A146566E0A6D7AFE32B0B8E80 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 23.150.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:66:e0:a6:d7:af:e3:2b:0b:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=1ec1abb7-4c9d-4b60-ae14-96d13e732c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:8b:88:97:ef:65:ea:c6:1e:e1:33:9c:c0: 7d:3b:47:08:6e:9a:b5:7d:90:8c:a3:6e:9d:9c:ba: ed:5f:e1:83:b4:34:c4:6f:92:5d:cd:50:dc:19:c0: 5c:ee:cb:29:d3:34:9a:3a:78:0c:91:3d:5d:dd:80: 22:29:b8:da:9c:20:88:cc:58:ca:89:16:57:81:6a: 87:f5:97:22:c6:85:75:a5:43:81:ef:60:4e:8e:72: af:1e:75:81:93:69:dd:57:9d:2d:5e:3d:fa:86:90: b7:ad:d2:fa:fc:8c:54:8d:1d:76:81:65:0d:76:d2: 12:8a:5a:71:9e:87:dc:0b:ce:2f:48:19:ee:12:2e: 3a:ba:92:3f:00:3d:e5:2f:8c:f8:81:cb:60:2a:f8: 5c:ea:f9:0d:ec:05:7b:75:59:27:da:c1:9e:87:8e: 6b:d7:03:17:ea:9d:6c:b0:62:6e:ef:07:1a:19:72: 94:5a:a6:25:49:a2:e6:6b:21:ed:ac:7f:af:ea:73: 9e:92:57:1f:79:0a:b5:93:33:e7:47:45:0d:9c:f0: e0:31:95:44:5a:9a:e0:84:a8:64:81:1a:31:31:71: 12:4e:68:d0:b6:1a:79:5e:89:28:18:87:da:22:73: 64:c9:44:79:a3:c7:67:47:54:bc:c7:57:72:5a:25: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:6E:79:56:68:2B:0D:7C:55:F5:F8:42:E4:E3:A1:2E:F1:A0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/b5c499b2-5be6-3cc5-aae9-72d4faa336a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 23.150.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:99:85:c4:58:20:c2:f0:2d:21:58:5a:17:a8:46:0c:4d:68: d0:2c:b9:ae:97:3f:4d:c9:07:ee:36:7e:ed:25:3d:49:2a:c2: f7:aa:dd:6d:57:75:1e:49:a2:72:ed:ec:32:a6:d9:42:2b:70: 0d:5b:5e:24:62:c5:c5:52:34:15:8a:24:8a:8d:bf:94:83:25: 24:53:9c:b2:32:a0:7e:55:fb:29:57:1b:e2:72:4c:28:a0:68: fd:0a:aa:25:59:e4:78:94:94:b5:ba:cf:a6:c4:8f:76:49:59: 66:1b:d6:a2:45:dd:e7:95:9c:ca:86:18:84:b7:c9:dd:16:87: 8b:65:96:84:27:21:dc:fc:51:c8:f2:cc:a8:5f:c8:f5:05:f2: 24:3e:7f:d3:07:f0:68:2e:86:2f:26:91:ea:ec:6a:87:ac:9a: e7:6a:2c:c9:b5:dd:a3:56:82:a9:17:4a:02:fa:ab:b9:fa:66: 08:3e:b8:4d:f7:00:a9:47:bd:b6:7c:71:c1:c9:0a:2c:b9:3d: 97:0d:ac:16:c5:79:21:be:6e:cd:3a:1e:3c:b3:db:0e:5a:2b: 81:16:6e:9d:31:ca:59:87:ce:2b:2d:cd:af:6c:e8:34:fb:b5: 83:b1:14:58:e7:6f:ef:9c:e1:65:98:f2:da:05:ca:34:23:a0: 06:9c:a4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWbgptev4ysLjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MWVjMWFiYjctNGM5ZC00YjYwLWFlMTQtOTZkMTNlNzMyYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yaLiJfvZerGHuEznMB9O0cIbpq1fZCMo26d nLrtX+GDtDTEb5JdzVDcGcBc7ssp0zSaOngMkT1d3YAiKbjanCCIzFjKiRZXgWqH 9ZcixoV1pUOB72BOjnKvHnWBk2ndV50tXj36hpC3rdL6/IxUjR12gWUNdtISilpx nofcC84vSBnuEi46upI/AD3lL4z4gctgKvhc6vkN7AV7dVkn2sGeh45r1wMX6p1s sGJu7wcaGXKUWqYlSaLmayHtrH+v6nOeklcfeQq1kzPnR0UNnPDgMZVEWprghKhk gRoxMXESTmjQthp5XokoGIfaInNkyUR5o8dnR1S8x1dyWiWd/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3gbnlWaCsNfFX1+ELk46Eu8aCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYjVjNDk5YjItNWJlNi0z Y2M1LWFhZTktNzJkNGZhYTMzNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5boMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeZhcRYIMLwLSFYWheoRgxNaNAsua6XP03JB+42fu0lPUkqwveq3W1X dR5JonLt7DKm2UIrcA1bXiRixcVSNBWKJIqNv5SDJSRTnLIyoH5V+ylXG+JyTCig aP0KqiVZ5HiUlLW6z6bEj3ZJWWYb1qJF3eeVnMqGGIS3yd0Wh4tlloQnIdz8Ucjy zKhfyPUF8iQ+f9MH8Gguhi8mkersaoesmudqLMm13aNWgqkXSgL6q7n6Zgg+uE33 AKlHvbZ8ccHJCiy5PZcNrBbFeSG+bs06Hjyz2w5aK4EWbp0xylmHzistza9s6DT7 tYOxFFjnb++c4WWY8toFyjQjoAacpIk= -----END CERTIFICATE-----Generated at Tue Jul 1 06:08:57 2025 by rpki-client