$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa File: a1bc269a-e265-3234-b628-e9d71b3d725d.roa (raw, json) Hash identifier: I1bfbp8TWK0IJSfOE9WxrAn6yWmiU2P5aXhTdHfzWfk= Subject key identifier: C6:0D:15:9E:CD:6F:ED:8A:CD:E3:7A:B2:13:86:8C:33:E9:F7:5D:79 Certificate issuer: /CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Certificate serial: 010D0C9F4328584A0C0555DBA23A52520DBECC80 Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 25639 IP address blocks: 23.152.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:55:db:a2:3a:52:52:0d:be:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=13d30a5f-da6f-4a01-93f1-ba2b4cef01fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1e:dd:22:d9:21:70:eb:eb:02:91:a1:79:6c: ec:57:e4:59:56:4c:1d:d6:74:1d:c6:55:94:e8:1c: b8:27:36:bc:20:95:92:95:3b:a4:91:67:ef:ad:2d: 49:69:70:62:81:5f:81:8f:00:db:89:a4:a0:83:ff: 8f:8a:3c:f0:08:03:84:4f:29:fd:77:90:c3:9a:32: 52:31:09:23:7c:49:76:16:44:49:f7:52:79:21:6e: 73:37:c1:0c:e4:08:cd:f6:7d:e4:d2:16:85:44:ae: a5:25:ae:78:6c:da:36:3e:9e:05:c0:d1:44:14:37: 00:46:5e:df:d0:01:ad:12:80:c6:da:c2:e1:a4:b2: ee:30:5b:89:03:5f:25:68:db:b9:b2:81:81:6f:32: 26:c0:d6:31:64:85:a0:f8:bd:dc:1e:55:ad:e6:10: 8c:6a:f7:37:93:3b:e3:49:28:d4:55:f5:b3:a4:f0: 4c:63:9a:ba:f1:f3:cb:e5:11:18:ac:a9:ac:d9:bc: eb:2c:47:c3:31:73:c1:1f:03:a6:11:b3:0c:84:2b: e1:20:1e:1d:1b:49:da:9f:fb:92:4a:ac:c1:f2:91: 0f:03:d9:d8:0e:d8:1b:68:a1:84:19:82:78:8e:13: fa:5b:56:7b:7f:1e:d2:11:f0:bc:09:90:19:cc:26: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:15:9E:CD:6F:ED:8A:CD:E3:7A:B2:13:86:8C:33:E9:F7:5D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl X509v3 Authority Key Identifier: keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer sbgp-ipAddrBlock: critical IPv4: 23.152.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3c:05:87:33:71:de:34:77:5e:86:85:fb:72:c4:31:a8:43: e5:cf:b7:38:19:08:e1:e8:55:8c:de:11:5f:c0:9c:6d:a0:04: 76:f1:19:40:da:36:03:d1:bd:17:6b:c6:1c:a2:57:a3:51:34: 57:a0:51:14:bd:64:8d:35:eb:14:2b:ca:b4:9f:78:48:64:65: ac:49:55:75:c5:ac:b4:01:a3:73:15:91:9c:56:e9:83:a6:81: d4:ec:2a:11:21:e3:de:54:7f:d9:9a:c8:36:23:e3:78:47:7f: 70:2e:cb:3a:68:59:6c:72:0e:1e:ce:a5:3e:a8:5c:73:f4:66: da:ae:ec:cb:13:7c:6c:cd:86:bc:81:70:e4:26:26:81:bf:d0: c7:fd:b3:67:a8:3e:19:7f:37:3e:62:e1:13:95:ee:99:74:4c: 1d:48:23:95:e9:6c:2b:ac:77:45:e2:0c:6f:22:fd:0d:25:b2: 69:8d:14:8d:e1:cf:77:98:2e:25:cd:80:35:28:e4:c4:e1:2e: 67:aa:67:f6:9c:f1:be:8c:a9:a4:b0:ac:d8:54:01:c1:77:16: c2:e6:bb:8b:be:02:fb:8f:92:65:83:17:1f:d0:27:da:0a:e0: b9:82:c1:77:51:53:8e:d8:e7:93:b5:1b:25:4a:4e:85:4a:35: af:df:9b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVXbojpSUg2+zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzgyNTIyMTQtODhhMy00ODA3LWJiZTItYjM0NGMzYmU3 ZjE5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTNkMzBhNWYtZGE2Zi00YTAxLTkzZjEtYmEyYjRjZWYwMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh7dItkhcOvrApGheWzsV+RZVkwd1nQdxlWU 6By4Jza8IJWSlTukkWfvrS1JaXBigV+BjwDbiaSgg/+PijzwCAOETyn9d5DDmjJS MQkjfEl2FkRJ91J5IW5zN8EM5AjN9n3k0haFRK6lJa54bNo2Pp4FwNFEFDcARl7f 0AGtEoDG2sLhpLLuMFuJA18laNu5soGBbzImwNYxZIWg+L3cHlWt5hCMavc3kzvj SSjUVfWzpPBMY5q68fPL5REYrKms2bzrLEfDMXPBHwOmEbMMhCvhIB4dG0nan/uS SqzB8pEPA9nYDtgbaKGEGYJ4jhP6W1Z7fx7SEfC8CZAZzCblzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYNFZ7Nb+2KzeN6shOGjDPp9115MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1 MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0YzNiZTdmMTkvYTFiYzI2OWEtZTI2NS0z MjM0LWI2MjgtZTlkNzFiM2Q3MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzgyNTIyMTQtODhhMy00ODA3LWJi ZTItYjM0NGMzYmU3ZjE5L2M4MjUyMjE0LTg4YTMtNDgwNy1iYmUyLWIzNDRjM2Jl N2YxOS5jcmwwHwYDVR0jBBgwFoAUYlz5NoMoFKjjBEMWFfWE0PzWzxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0 YzNiZTdmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY8BYczcd40d16GhftyxDGoQ+XPtzgZCOHoVYzeEV/AnG2gBHbxGUDa NgPRvRdrxhyiV6NRNFegURS9ZI016xQryrSfeEhkZaxJVXXFrLQBo3MVkZxW6YOm gdTsKhEh495Uf9mayDYj43hHf3AuyzpoWWxyDh7OpT6oXHP0Ztqu7MsTfGzNhryB cOQmJoG/0Mf9s2eoPhl/Nz5i4ROV7pl0TB1II5XpbCusd0XiDG8i/Q0lsmmNFI3h z3eYLiXNgDUo5MThLmeqZ/ac8b6MqaSwrNhUAcF3FsLmu4u+AvuPkmWDFx/QJ9oK 4LmCwXdRU47Y55O1GyVKToVKNa/fm+U= -----END CERTIFICATE-----Generated at Wed Jul 2 14:42:36 2025 by rpki-client