$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa File: aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa (raw, json) Hash identifier: rAftZLfZBnNvVzfqxSGinwiAQZ7X+xC28gqByvoA2xI= Subject key identifier: E8:55:65:C0:87:9C:07:22:E6:E5:8B:C8:75:CE:7B:28:62:08:EB:22 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A3B59B099BBC9BB385C86DE80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa Signing time: Wed 18 Jun 2025 11:54:10 +0000 ROA not before: Wed 18 Jun 2025 11:54:10 +0000 ROA not after: Tue 16 Sep 2025 11:54:10 +0000 asID: 400866 IP address blocks: 23.251.53.0/24 maxlen: 24 23.251.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:59:b0:99:bb:c9:bb:38:5c:86:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jun 18 11:54:10 2025 GMT Not After : Sep 16 11:54:10 2025 GMT Subject: CN=c2c975f0-4d63-4b90-9714-112270d87bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:f0:7f:2a:82:41:41:be:60:52:58:6f:f1: ea:20:1c:e1:2c:b7:01:f7:92:d1:09:03:97:ce:02: 39:9f:dc:c7:bb:25:03:d8:8c:89:ee:66:a4:d8:36: 38:00:b0:8d:ab:e8:5d:7d:a2:28:44:8f:d3:da:01: 7b:76:b8:53:6f:3b:6c:28:fd:95:55:f7:bc:2f:9b: aa:8e:ea:f6:d6:b0:48:a8:fa:df:55:d8:50:56:47: a0:ae:1b:9f:79:88:23:e8:29:92:9e:fd:17:0e:41: e6:96:34:8b:05:0e:15:ff:e7:05:18:d2:d3:2b:49: bb:8c:c4:56:b3:85:7b:3e:f6:fd:7c:88:1b:a9:8c: 20:e1:1c:15:04:ee:b7:90:e1:31:d4:28:e8:c7:4c: a9:02:b9:e1:10:96:e9:00:c2:40:e2:35:50:03:5d: 06:21:b3:27:81:4e:97:7a:e8:02:9d:5f:09:e0:45: 08:06:7c:7f:d9:11:f1:54:2d:ac:9b:d2:e3:bf:5a: 39:34:77:91:b5:7a:df:f9:f5:ee:51:53:e6:af:bb: ab:bb:6d:13:da:19:7c:06:8c:2c:ed:61:82:fd:c2: 94:fa:eb:f9:01:f4:1f:1b:45:cb:ef:9b:1f:dc:eb: 92:f2:27:39:41:48:85:75:fc:9a:67:e7:09:3c:36: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:65:C0:87:9C:07:22:E6:E5:8B:C8:75:CE:7B:28:62:08:EB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.53.0-23.251.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2f:4c:9d:a8:f8:0b:20:a8:f9:4e:0e:ba:67:d5:e3:2c:ff: 87:81:d8:33:b4:db:33:8e:fb:f0:dc:b7:61:57:0c:e3:0e:4e: 57:35:e2:89:f1:60:d8:12:e5:b8:3c:9a:1d:a3:37:3a:3d:1b: 96:42:14:02:11:62:83:d5:ca:26:fb:31:e5:14:51:a5:17:be: cd:34:00:b7:92:50:d0:cd:b7:bb:d2:17:ba:2a:ed:84:37:30: d4:33:c5:78:09:54:44:e9:fa:39:07:d1:19:5c:c9:c0:60:3a: b0:dc:15:16:eb:f3:4c:27:55:66:8d:8b:b4:e5:b3:40:57:b6: f0:97:6f:7c:8a:be:d9:2d:f4:28:ff:03:69:7f:5c:20:86:7b: 9c:d5:50:08:8b:1e:ab:ad:0b:53:5d:e9:4e:39:12:4b:cf:e4: 0e:49:6a:14:a9:00:d2:d0:5b:f2:52:c0:3e:38:7e:09:24:42: fc:87:12:e9:cc:27:82:ad:bc:c4:d8:57:46:b7:3d:3d:dd:9f: 48:a0:de:80:cb:d3:92:f2:05:db:20:bc:2c:6b:95:2c:a6:a9: 26:7e:75:8a:62:b6:06:ed:0c:d6:e9:f2:e9:0b:7a:77:74:f7: 76:26:cb:c0:0b:b5:25:eb:1e:23:b4:41:4d:0e:73:e3:64:3f: b6:ce:ac:88 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEo7WbCZu8m7OFyG3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDYxODExNTQxMFoXDTI1MDkxNjExNTQxMFowLzEtMCsGA1UEAxMk YzJjOTc1ZjAtNGQ2My00YjkwLTk3MTQtMTEyMjcwZDg3YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3wfyqCQUG+YFJYb/HqIBzhLLcB95LRCQOX zgI5n9zHuyUD2IyJ7mak2DY4ALCNq+hdfaIoRI/T2gF7drhTbztsKP2VVfe8L5uq jur21rBIqPrfVdhQVkegrhufeYgj6CmSnv0XDkHmljSLBQ4V/+cFGNLTK0m7jMRW s4V7Pvb9fIgbqYwg4RwVBO63kOEx1Cjox0ypArnhEJbpAMJA4jVQA10GIbMngU6X eugCnV8J4EUIBnx/2RHxVC2sm9Ljv1o5NHeRtXrf+fXuUVPmr7uru20T2hl8Bows 7WGC/cKU+uv5AfQfG0XL75sf3OuS8ic5QUiFdfyaZ+cJPDZcjwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOhVZcCHnAci5uWLyHXOeyhiCOsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYWFiN2I0MmQtZmE3YS0z ZGRmLTg1MmItNTE1ZjJjZTQ4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX+zUD BAAX+zYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASy9Mnaj4CyCo+U4OumfV4yz/h4HYM7TbM4778Ny3YVcM 4w5OVzXiifFg2BLluDyaHaM3Oj0blkIUAhFig9XKJvsx5RRRpRe+zTQAt5JQ0M23 u9IXuirthDcw1DPFeAlUROn6OQfRGVzJwGA6sNwVFuvzTCdVZo2LtOWzQFe28Jdv fIq+2S30KP8DaX9cIIZ7nNVQCIseq60LU13pTjkSS8/kDklqFKkA0tBb8lLAPjh+ CSRC/IcS6cwngq28xNhXRrc9Pd2fSKDegMvTkvIF2yC8LGuVLKapJn51imK2Bu0M 1uny6Qt6d3T3dibLwAu1JeseI7RBTQ5z42Q/ts6siA== -----END CERTIFICATE-----Generated at Tue Jul 1 01:08:16 2025 by rpki-client