$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa File: c56c342d-12d7-376f-9120-568a7b965d35.roa (raw, json) Hash identifier: oZXkN77ni8sfkI4w+24mNDUO9oBSVtxPMxUaJcmBfy8= Subject key identifier: B6:F5:AE:9B:19:D4:46:21:D8:5A:A3:E2:0E:60:52:FE:82:D6:B6:96 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584A51D0664E328BD8635A897280 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 202044 IP address blocks: 23.129.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:66:4e:32:8b:d8:63:5a:89:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=5403b790-0f6a-45e4-ba16-f461d6e0eb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:24:2e:fc:c7:ed:5b:a4:74:1e:52:58:52: 7a:f0:c8:ad:36:b9:05:45:87:a1:69:79:08:02:87: 75:71:f5:de:9a:43:5e:3a:80:f9:13:4e:d4:37:3e: 71:bc:ad:17:0f:14:da:52:52:7a:5c:3c:56:59:0e: c0:a7:b3:a6:3d:d6:2a:99:86:00:70:9c:29:ca:53: 40:bb:5c:32:ad:41:90:89:57:5e:e1:19:56:08:fd: ca:1c:8c:c8:c3:0f:f0:3e:cc:46:e0:ac:c5:93:3e: 39:34:c1:66:ba:3f:ea:29:88:e3:42:05:59:aa:54: 07:50:80:07:a4:e9:16:6e:88:a4:49:ae:f3:dd:99: b8:8f:3c:46:3e:2e:3e:61:e1:f1:b9:78:69:c5:9f: cd:32:58:71:9e:7b:a9:00:a8:f2:10:f9:d6:52:d1: 08:76:08:98:ec:9b:79:8a:95:b3:eb:fd:c8:af:77: cb:18:f5:61:d3:03:87:69:83:71:ef:32:04:30:b0: fe:8d:34:03:07:12:c4:8f:4c:30:15:27:8d:54:5e: 38:65:42:a0:29:c0:65:48:a3:92:ad:ca:50:ad:0d: 4a:74:98:1e:fb:96:97:d1:06:a5:55:55:2f:2f:b2: 67:f4:10:82:81:85:a4:42:45:99:7b:99:33:e0:d1: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:AE:9B:19:D4:46:21:D8:5A:A3:E2:0E:60:52:FE:82:D6:B6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 23.129.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:53:55:47:59:db:f7:51:36:01:e6:03:92:77:37:4c:94:27: 0d:1e:25:10:04:1c:41:09:25:f9:86:1f:48:44:12:c4:54:15: 39:fd:8e:ec:76:71:18:0e:35:f9:05:36:46:25:35:d9:7c:89: 08:c2:43:c7:6c:20:e7:24:34:bc:58:ec:b5:f2:20:2b:2c:1f: 16:95:02:0f:d9:4a:ed:4b:5c:a7:a8:73:59:51:d0:f2:d7:30: 87:67:82:0c:de:a3:56:4d:0a:30:85:9e:fa:ce:02:64:4c:97: 2d:48:5b:fe:47:36:79:55:f0:f4:8e:37:dc:e4:b2:04:6c:b3: 05:cd:74:81:3d:04:6a:df:29:1f:39:1f:71:ab:d7:a1:45:f7: b2:7e:8b:2e:34:fb:c5:43:50:2a:0d:4c:b2:a6:d0:f4:a1:73: 21:ed:0b:83:6c:0c:b8:3f:a9:aa:53:d5:61:e7:af:8f:79:fe: 0f:cc:ea:5f:7b:51:35:ae:3a:94:c4:e1:2d:ac:a9:e1:c1:0b: 59:33:3d:70:45:1a:38:12:29:d1:9f:c1:de:f3:4e:a1:0c:df: 41:02:ea:ca:e3:1b:9c:0b:71:fc:f4:67:51:ff:cf:7e:ee:22: e1:75:b3:b1:67:89:a3:85:a8:65:bf:35:6d:c9:f6:b9:77:97: 0b:8f:ce:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GZOMovYY1qJcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTQwM2I3OTAtMGY2YS00NWU0LWJhMTYtZjQ2MWQ2ZTBlYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTwkLvzH7VukdB5SWFJ68MitNrkFRYehaXkI Aod1cfXemkNeOoD5E07UNz5xvK0XDxTaUlJ6XDxWWQ7Ap7OmPdYqmYYAcJwpylNA u1wyrUGQiVde4RlWCP3KHIzIww/wPsxG4KzFkz45NMFmuj/qKYjjQgVZqlQHUIAH pOkWboikSa7z3Zm4jzxGPi4+YeHxuXhpxZ/NMlhxnnupAKjyEPnWUtEIdgiY7Jt5 ipWz6/3Ir3fLGPVh0wOHaYNx7zIEMLD+jTQDBxLEj0wwFSeNVF44ZUKgKcBlSKOS rcpQrQ1KdJge+5aX0QalVVUvL7Jn9BCCgYWkQkWZe5kz4NH4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb1rpsZ1EYh2Fqj4g5gUv6C1raWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvYzU2YzM0MmQtMTJkNy0z NzZmLTkxMjAtNTY4YTdiOTY1ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNTVUdZ2/dRNgHmA5J3N0yUJw0eJRAEHEEJJfmGH0hEEsRUFTn9jux2 cRgONfkFNkYlNdl8iQjCQ8dsIOckNLxY7LXyICssHxaVAg/ZSu1LXKeoc1lR0PLX MIdnggzeo1ZNCjCFnvrOAmRMly1IW/5HNnlV8PSON9zksgRsswXNdIE9BGrfKR85 H3Gr16FF97J+iy40+8VDUCoNTLKm0PShcyHtC4NsDLg/qapT1WHnr495/g/M6l97 UTWuOpTE4S2sqeHBC1kzPXBFGjgSKdGfwd7zTqEM30EC6srjG5wLcfz0Z1H/z37u IuF1s7FniaOFqGW/NW3J9rl3lwuPzrw= -----END CERTIFICATE-----Generated at Tue Jul 1 22:44:26 2025 by rpki-client