$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa File: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json) Hash identifier: UdwnwDw3+CV6S+hahAaCCxt8iFQanWZt7ya+aI/+s78= Subject key identifier: B8:C6:3D:F7:FA:1C:BF:82:E7:2B:AF:DF:7E:38:00:F7:05:07:7C:24 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584A454031D17494E62A0621CB80 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 13886 IP address blocks: 65.75.205.0/24 maxlen: 24 65.75.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:31:d1:74:94:e6:2a:06:21:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=ce1add1f-91fe-46a9-9e49-9fc62c355e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:48:bd:6b:88:b7:c8:47:76:44:9d:bc:1a: 61:4d:9e:2a:ee:90:f4:8d:b0:c3:b2:68:66:35:7b: d1:ef:b0:3c:4c:0e:c2:b7:e9:7a:f1:3e:5b:8f:65: 37:3f:af:e3:ba:d1:d7:f3:46:0a:bb:5a:d7:a5:c5: f8:61:35:59:4b:93:9b:1a:0d:ee:31:02:82:a2:61: 35:e4:96:39:da:c8:ec:00:69:d9:51:67:3c:e7:2b: 8c:4a:60:b1:d6:29:d1:8a:43:bc:ab:1f:ab:aa:04: 13:5a:c3:e5:ac:ca:bb:04:4d:54:6d:45:fc:8b:9a: 8c:c7:c7:d3:7b:b0:c2:06:b7:46:4b:84:d2:10:ba: 99:e5:be:a0:dc:60:40:1e:63:ea:87:71:de:96:75: 33:6e:7a:63:39:7a:34:53:81:5e:86:7e:07:0d:91: e9:5d:7a:ed:b5:35:26:df:79:b2:5b:ab:b7:a3:4d: ce:26:d4:63:58:83:b0:13:89:0e:e8:8c:bf:16:e9: ea:75:be:b5:99:f2:e8:42:58:ae:a2:cd:31:2b:4d: b7:61:27:d1:a9:86:5d:ae:cd:54:21:ef:c4:c2:e0: 60:f0:a3:89:b7:ec:a5:06:58:06:16:72:b9:d4:4b: d7:05:9f:16:47:a8:d4:80:05:49:20:19:9a:fe:d2: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:3D:F7:FA:1C:BF:82:E7:2B:AF:DF:7E:38:00:F7:05:07:7C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.205.0-65.75.206.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:78:31:94:69:5b:a1:f6:85:13:3e:4e:62:ef:d7:37:29:89: d2:ab:ff:56:bc:0d:db:a6:cb:0c:4d:18:72:fd:e0:de:ab:3d: 85:aa:ed:40:07:fa:f3:4e:bc:3e:86:6a:6e:8f:73:52:99:df: 8f:8a:ad:b1:28:27:e7:69:a1:48:33:d1:27:61:95:1e:aa:52: 8b:ae:c2:c7:1e:94:04:78:3d:92:be:73:4e:77:f3:b4:90:df: 8d:d4:a1:68:fb:28:9c:10:78:fe:4a:07:39:5b:4d:7e:64:72: 29:11:1a:75:80:c0:a0:57:b5:ca:bd:9d:fc:b1:54:6e:35:3b: ef:c2:9a:31:f8:13:4d:c7:9a:bf:fe:0d:e9:e1:dc:ee:fe:1d: 7d:9a:59:04:c0:e3:a6:5d:63:53:a9:61:ef:db:c6:ce:5b:09: f2:a3:33:1d:f8:d3:cf:9a:5f:f9:59:ef:fc:97:6f:24:28:7a: 41:e6:e9:e7:8a:1f:e1:73:dc:c9:87:19:94:fc:b2:53:41:73: 58:58:e9:af:2a:58:8c:ad:29:4d:66:5f:88:e6:56:8e:e0:5b: 0a:a9:f4:54:f8:5e:d0:e8:f7:62:05:44:a1:23:f5:5f:ca:8a: da:b5:df:32:12:00:fd:e8:d2:92:06:37:11:b5:8f:d2:c4:07: e6:0d:6d:f8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpFQDHRdJTmKgYhy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk Y2UxYWRkMWYtOTFmZS00NmE5LTllNDktOWZjNjJjMzU1ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc1IvWuIt8hHdkSdvBphTZ4q7pD0jbDDsmhm NXvR77A8TA7Ct+l68T5bj2U3P6/jutHX80YKu1rXpcX4YTVZS5ObGg3uMQKComE1 5JY52sjsAGnZUWc85yuMSmCx1inRikO8qx+rqgQTWsPlrMq7BE1UbUX8i5qMx8fT e7DCBrdGS4TSELqZ5b6g3GBAHmPqh3HelnUzbnpjOXo0U4Fehn4HDZHpXXrttTUm 33myW6u3o03OJtRjWIOwE4kO6Iy/Funqdb61mfLoQliuos0xK023YSfRqYZdrs1U Ie/EwuBg8KOJt+ylBlgGFnK51EvXBZ8WR6jUgAVJIBma/tJR+QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLjGPff6HL+C5yuv3344APcFB3wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMjNkODI1ZmEtYWJmNC0z ZjVjLWExMzgtZGVhNWM1Yzc0N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABBS80D BABBS84wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAP3gxlGlbofaFEz5OYu/XNymJ0qv/VrwN26bLDE0Ycv3g 3qs9hartQAf68068PoZqbo9zUpnfj4qtsSgn52mhSDPRJ2GVHqpSi67Cxx6UBHg9 kr5zTnfztJDfjdShaPsonBB4/koHOVtNfmRyKREadYDAoFe1yr2d/LFUbjU778Ka MfgTTceav/4N6eHc7v4dfZpZBMDjpl1jU6lh79vGzlsJ8qMzHfjTz5pf+Vnv/Jdv JCh6Qebp54of4XPcyYcZlPyyU0FzWFjprypYjK0pTWZfiOZWjuBbCqn0VPhe0Oj3 YgVEoSP1X8qK2rXfMhIA/ejSkgY3EbWP0sQH5g1t+A== -----END CERTIFICATE-----Generated at Tue Jul 1 10:28:12 2025 by rpki-client