$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: ErjLS/16OhsEUf55D7TEXXDGgmk4M2NqKN6Q8W5oDjc= Subject key identifier: 0E:36:5D:29:2E:CF:64:52:5A:66:7F:FF:83:62:6C:4B:7D:60:C9:0E Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584A4C3B1A2D6EC10618F1F17800 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1a:2d:6e:c1:06:18:f1:f1:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=957ca8e0-e5c9-42a0-88d5-d9266c1a955b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:5a:1f:6a:3e:69:1d:0b:0c:2b:3b:49:77: 95:bb:93:7a:25:8b:ae:61:d0:03:fb:04:b5:c9:b8: 7f:1c:c3:2f:3a:4b:23:b2:a7:06:d3:2c:98:8c:d3: 4d:25:79:f0:97:3e:33:51:94:81:1a:7a:10:e2:b7: 76:99:00:19:21:cb:00:26:f8:cc:37:ce:35:8b:6d: ec:fe:6a:39:d3:0b:82:e4:33:7c:d9:4b:58:ff:1a: 52:c8:28:65:35:9a:85:01:b6:50:91:e2:24:f7:47: 35:b4:fd:3d:b2:e0:5a:1f:fa:26:83:42:30:f9:8b: fa:8d:04:a5:1f:d6:e2:b2:8c:7d:4f:c8:94:96:56: 69:ca:17:1a:a7:55:1a:1f:93:13:26:ad:fd:31:c4: 8e:bb:b4:e5:5b:0a:da:c6:a2:6f:09:63:76:50:cc: 44:d2:7e:2f:bf:e5:15:86:77:4c:f9:42:75:47:06: 62:dd:99:46:17:f1:b1:9e:1d:57:ec:c7:3f:a8:0d: 9e:5c:fc:6d:31:d0:30:85:6b:a5:c7:54:18:ed:0f: 22:35:ce:67:cf:87:c4:b0:c0:4d:00:90:15:0a:70: 97:cb:4d:ae:9f:5d:3f:f5:c6:b3:1c:57:3d:08:2d: be:36:b0:07:1a:7c:e9:54:ad:6a:7c:a7:fd:a0:a1: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:5D:29:2E:CF:64:52:5A:66:7F:FF:83:62:6C:4B:7D:60:C9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:25:0f:77:ad:05:14:df:80:e8:70:20:47:8c:41:c9:22:6c: 79:3f:a2:33:a1:3d:36:59:2d:cf:00:63:ac:55:e5:35:4c:21: 94:23:3a:61:b6:83:bd:12:37:ee:98:a6:e2:4e:02:51:84:3a: c3:06:b6:28:f3:32:27:c2:cc:51:8b:86:6a:2f:2b:17:0d:a9: b3:4f:91:76:47:10:0e:69:f7:2d:06:22:12:c1:20:2a:2d:56: 4d:5b:2d:23:0a:70:9f:5a:2c:23:d7:de:e2:16:1f:c1:b3:7a: 49:9b:8e:09:8c:ad:e5:2d:c1:ed:ee:9d:fc:42:96:a6:3b:b7: aa:72:62:74:75:41:75:76:a8:40:0c:ba:18:a2:e8:81:93:dd: 55:e4:1d:3d:27:0b:91:1a:f3:33:49:7b:01:f1:44:5c:4e:5a: 77:e1:da:fa:8a:14:66:b3:95:79:27:07:f7:d7:25:31:8a:91: de:4a:66:44:a1:c4:80:6f:da:48:4a:20:a3:9d:67:e2:d3:f4: 64:60:4f:6d:ca:6b:90:74:c7:a9:bb:9f:a2:29:4d:bf:c7:59: b2:3e:5b:b0:4b:1e:10:5a:ff:3c:5f:ae:8f:00:16:66:cb:16: 48:22:8f:7c:bb:31:40:57:9c:f5:56:5c:3e:20:8c:e8:b9:a8: 30:81:8a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxotbsEGGPHxeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OTU3Y2E4ZTAtZTVjOS00MmEwLTg4ZDUtZDkyNjZjMWE5NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws5aH2o+aR0LDCs7SXeVu5N6JYuuYdAD+wS1 ybh/HMMvOksjsqcG0yyYjNNNJXnwlz4zUZSBGnoQ4rd2mQAZIcsAJvjMN841i23s /mo50wuC5DN82UtY/xpSyChlNZqFAbZQkeIk90c1tP09suBaH/omg0Iw+Yv6jQSl H9bisox9T8iUllZpyhcap1UaH5MTJq39McSOu7TlWwraxqJvCWN2UMxE0n4vv+UV hndM+UJ1RwZi3ZlGF/Gxnh1X7Mc/qA2eXPxtMdAwhWulx1QY7Q8iNc5nz4fEsMBN AJAVCnCXy02un10/9cazHFc9CC2+NrAHGnzpVK1qfKf9oKGEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA42XSkuz2RSWmZ//4NibEt9YMkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMlD3etBRTfgOhwIEeMQckibHk/ojOhPTZZLc8AY6xV5TVMIZQjOmG2 g70SN+6YpuJOAlGEOsMGtijzMifCzFGLhmovKxcNqbNPkXZHEA5p9y0GIhLBICot Vk1bLSMKcJ9aLCPX3uIWH8GzekmbjgmMreUtwe3unfxClqY7t6pyYnR1QXV2qEAM uhii6IGT3VXkHT0nC5Ea8zNJewHxRFxOWnfh2vqKFGazlXknB/fXJTGKkd5KZkSh xIBv2khKIKOdZ+LT9GRgT23Ka5B0x6m7n6IpTb/HWbI+W7BLHhBa/zxfro8AFmbL Fkgij3y7MUBXnPVWXD4gjOi5qDCBisA= -----END CERTIFICATE-----Generated at Tue Jul 1 12:04:43 2025 by rpki-client