$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa File: be57316a-e536-36f6-980b-fd2fa53779d0.roa (raw, json) Hash identifier: Gbw2mOjGDN4FAVL8WYLwYgwd1p2kiHVlh8Btkn+ZsMs= Subject key identifier: 49:CA:1B:9E:17:38:5C:77:35:5B:ED:1D:F5:E8:97:E0:D1:A6:46:1B Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584A4F05CF47D5CF47E8D0206100 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 152156 IP address blocks: 23.249.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cf:47:d5:cf:47:e8:d0:20:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=342d1118-dcb8-463c-bd2f-611eca147574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:75:2a:57:21:02:1f:f2:fb:e1:fe:32:b2: a1:f0:22:38:a2:65:72:6d:bc:b8:ee:af:4d:1f:77: 84:12:86:19:5d:c9:d8:ff:58:e8:c6:bc:11:9c:05: 9d:00:80:3f:c6:b8:0c:1e:05:76:af:e7:55:dd:a0: 6e:77:40:4c:fc:92:34:f8:5f:63:6c:3f:af:14:72: 8e:a6:c8:38:fc:79:92:6e:f0:8e:56:0f:98:2e:32: aa:da:93:aa:f6:09:6a:e7:74:8d:4a:11:a4:6b:64: 43:51:d9:70:13:00:31:58:45:37:fc:82:b6:b0:c8: ea:cd:1a:bc:0a:d9:20:be:ad:94:cb:80:a6:9c:02: d1:59:f5:26:91:9c:b8:e6:8f:2d:b8:71:0b:73:d5: 43:e5:45:b2:a4:1c:e0:1b:5a:b4:e3:c0:ae:d2:4f: 23:21:ef:77:3f:13:aa:18:2e:42:8a:68:59:40:95: 37:eb:5d:0b:10:2a:0a:d7:b0:7c:70:bf:55:94:26: ef:48:7e:0c:04:b2:62:87:43:0d:ed:5b:a9:d5:1f: 03:b2:44:2d:cb:5f:f9:ad:65:9e:41:d4:a3:ea:72: 4c:85:9b:39:8e:8e:de:36:28:94:19:33:cc:f4:f4: a5:6f:ae:29:4b:49:c6:7c:e1:5e:48:28:66:8b:c1: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:1B:9E:17:38:5C:77:35:5B:ED:1D:F5:E8:97:E0:D1:A6:46:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2d:8b:b6:d0:bf:a9:21:9f:ec:95:a1:03:49:64:38:8a:51: 19:74:4d:ed:2d:e2:30:03:0d:d2:ee:4a:e8:13:6f:e2:f8:5c: d0:c1:1b:81:9d:5c:cd:d1:b3:1a:19:3f:45:32:4b:ee:24:a6: 5d:c2:53:5e:08:de:4a:7a:e4:34:90:c7:54:62:11:f4:8d:d6: d1:5e:32:a2:2e:ef:de:06:b2:87:32:1d:48:1b:c2:3e:93:27: f5:a3:f9:6c:b0:2a:e0:5c:10:ee:a0:d2:6b:03:84:8e:a3:c8: a8:24:ce:ef:2d:71:0d:a3:d7:0e:b9:33:59:96:29:cc:eb:d2: 50:4d:85:0f:28:80:67:72:b9:91:ad:69:e0:b3:51:c7:d6:71: 90:be:5c:03:7b:38:3e:6a:86:38:60:d7:58:96:d1:d6:8f:37: 01:0a:aa:2a:e9:e6:04:e5:8e:b4:65:a9:40:25:11:9c:74:eb: 37:cc:c5:06:e8:21:b4:94:79:d2:3c:63:d5:3b:f3:42:07:05: 39:c0:e0:8a:69:50:f2:03:80:b9:0f:66:eb:bf:85:c7:f4:b2: 95:f3:8a:c9:5a:5a:f3:74:d5:c5:fc:bc:80:b0:c2:5b:bc:8a: d9:d0:b6:a7:ec:60:a5:71:95:10:47:54:cd:b2:f5:3c:6c:dc: 46:43:ff:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc9H1c9H6NAgYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzQyZDExMTgtZGNiOC00NjNjLWJkMmYtNjExZWNhMTQ3NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIx1KlchAh/y++H+MrKh8CI4omVybby47q9N H3eEEoYZXcnY/1joxrwRnAWdAIA/xrgMHgV2r+dV3aBud0BM/JI0+F9jbD+vFHKO psg4/HmSbvCOVg+YLjKq2pOq9glq53SNShGka2RDUdlwEwAxWEU3/IK2sMjqzRq8 Ctkgvq2Uy4CmnALRWfUmkZy45o8tuHELc9VD5UWypBzgG1q048Cu0k8jIe93PxOq GC5CimhZQJU3610LECoK17B8cL9VlCbvSH4MBLJih0MN7Vup1R8DskQty1/5rWWe QdSj6nJMhZs5jo7eNiiUGTPM9PSlb64pS0nGfOFeSChmi8Gu1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnKG54XOFx3NVvtHfXol+DRpkYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYmU1NzMxNmEtZTUzNi0z NmY2LTk4MGItZmQyZmE1Mzc3OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYti7bQv6khn+yVoQNJZDiKURl0Te0t4jADDdLuSugTb+L4XNDBG4Gd XM3RsxoZP0UyS+4kpl3CU14I3kp65DSQx1RiEfSN1tFeMqIu794GsocyHUgbwj6T J/Wj+WywKuBcEO6g0msDhI6jyKgkzu8tcQ2j1w65M1mWKczr0lBNhQ8ogGdyuZGt aeCzUcfWcZC+XAN7OD5qhjhg11iW0daPNwEKqirp5gTljrRlqUAlEZx06zfMxQbo IbSUedI8Y9U780IHBTnA4IppUPIDgLkPZuu/hcf0spXzislaWvN01cX8vICwwlu8 itnQtqfsYKVxlRBHVM2y9Txs3EZD/5o= -----END CERTIFICATE-----Generated at Tue Jul 1 21:31:43 2025 by rpki-client