$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json) Hash identifier: +D82RPRCGY6FM/O8E3b2v1dq9L26sjG/37ofvCLJMO4= Subject key identifier: 93:9C:EC:9F:42:B5:89:B2:05:39:A8:D2:2D:F0:5B:5D:C4:F6:3C:23 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A0C0561A4725B17D6A0EBCC00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 25645 IP address blocks: 23.249.96.0/21 maxlen: 21 23.249.104.0/21 maxlen: 21 23.249.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:61:a4:72:5b:17:d6:a0:eb:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=476e1607-2c39-4198-a59e-dce4a76064f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:0f:6e:cf:d4:10:6f:de:88:aa:44:cb:6a: fe:81:72:36:be:a1:25:5a:b9:7d:f4:fc:24:79:40: ca:18:7d:32:12:70:5e:d4:9a:d7:ac:a6:e3:a1:b2: 25:fb:d4:c4:bd:4e:0f:bc:e2:a2:3e:44:8b:b5:33: 62:dc:67:9c:f8:94:de:6e:29:a4:3b:ff:32:cd:8d: 63:ec:69:0b:6f:87:4e:26:dc:92:cf:8d:34:a9:e1: 23:7d:42:08:9a:41:6a:4a:01:cd:1a:ce:28:9a:c5: ed:04:7a:55:8c:6b:d7:67:bd:d3:f5:24:ed:31:8f: 20:e3:1c:e3:6a:73:4b:19:56:0c:75:80:db:9a:cb: 4e:57:e8:cc:f3:f0:dd:34:28:2d:c2:43:f7:05:38: f9:0d:fc:e6:cd:ad:cb:58:10:7d:13:4d:1e:82:48: 0d:43:7d:ea:44:42:a7:b3:f4:3c:4d:78:79:99:6f: 07:f8:f4:25:51:d8:e9:54:6e:b7:56:14:3f:2f:96: 12:f1:bf:62:8f:1f:e9:84:d4:28:43:cd:e8:7d:ca: 5d:52:53:7f:01:8d:88:81:f5:91:8a:c4:8f:35:8d: b3:89:fb:0a:ea:93:37:8b:63:1b:0b:74:c1:27:2f: c4:41:a2:fa:32:a3:6a:e6:74:99:90:70:28:f3:72: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:EC:9F:42:B5:89:B2:05:39:A8:D2:2D:F0:5B:5D:C4:F6:3C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 23.249.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:23:03:1f:71:66:fb:95:49:b7:e1:ff:39:50:b4:ca:9b:0b: b7:05:2c:73:6a:3d:f0:6e:b0:97:82:b1:28:45:2b:bf:ff:75: 10:04:7b:85:a6:2b:61:ff:5f:da:47:f0:76:aa:3a:bb:46:4b: e1:86:55:bb:1e:be:f4:5c:a2:03:a9:b4:b9:93:91:d3:05:f5: 91:79:db:3b:b9:7f:4a:8d:12:0a:44:3d:a1:11:70:0b:bd:e9: 8f:a6:6e:69:82:e5:41:ae:a4:d3:da:10:b3:4b:08:7b:0e:00: 1b:14:b1:60:98:84:62:73:07:d3:59:b4:8b:a7:1b:dd:56:03: 4a:94:57:12:fb:b6:3d:08:da:dd:be:48:0f:1d:49:62:0a:06: a5:f0:92:2d:93:5f:fb:87:be:d4:e7:5d:f9:92:30:d8:6a:b9: 93:67:1c:67:0b:00:de:5d:2a:3d:1f:0a:3c:f9:bd:06:bb:33: c4:55:c3:b9:6a:93:b3:d2:45:0e:96:ed:03:36:c0:92:77:68: f0:54:cd:30:81:c3:93:ce:44:98:cb:27:a0:96:ab:21:c7:b8: 66:ed:69:7f:5c:87:6e:5c:01:0c:ea:0e:d8:7a:93:97:28:39: e0:bf:04:da:d3:6b:4d:a6:05:b4:70:62:7f:63:75:2e:1f:a4: 17:bb:b8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWGkclsX1qDrzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDc2ZTE2MDctMmMzOS00MTk4LWE1OWUtZGNlNGE3NjA2NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmMPbs/UEG/eiKpEy2r+gXI2vqElWrl99Pwk eUDKGH0yEnBe1JrXrKbjobIl+9TEvU4PvOKiPkSLtTNi3Gec+JTebimkO/8yzY1j 7GkLb4dOJtySz400qeEjfUIImkFqSgHNGs4omsXtBHpVjGvXZ73T9STtMY8g4xzj anNLGVYMdYDbmstOV+jM8/DdNCgtwkP3BTj5Dfzmza3LWBB9E00egkgNQ33qREKn s/Q8TXh5mW8H+PQlUdjpVG63VhQ/L5YS8b9ijx/phNQoQ83ofcpdUlN/AY2IgfWR isSPNY2zifsK6pM3i2MbC3TBJy/EQaL6MqNq5nSZkHAo83KTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOc7J9CtYmyBTmo0i3wW13E9jwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTUyM2I1NGMtYjIyYy0z OGJmLWJiZjItZWEzNjQ0MTFjYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsjAx9xZvuVSbfh/zlQtMqbC7cFLHNqPfBusJeCsShFK7//dRAEe4Wm K2H/X9pH8HaqOrtGS+GGVbsevvRcogOptLmTkdMF9ZF52zu5f0qNEgpEPaERcAu9 6Y+mbmmC5UGupNPaELNLCHsOABsUsWCYhGJzB9NZtIunG91WA0qUVxL7tj0I2t2+ SA8dSWIKBqXwki2TX/uHvtTnXfmSMNhquZNnHGcLAN5dKj0fCjz5vQa7M8RVw7lq k7PSRQ6W7QM2wJJ3aPBUzTCBw5PORJjLJ6CWqyHHuGbtaX9ch25cAQzqDth6k5co OeC/BNrTa02mBbRwYn9jdS4fpBe7uOE= -----END CERTIFICATE-----Generated at Mon Jun 30 16:12:48 2025 by rpki-client