$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa File: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (raw, json) Hash identifier: BPqpXKN/Jb5/mrIGLZMjqjau7rGIt5rXc9/Pb/Sxs6E= Subject key identifier: 5A:90:DA:42:BA:E0:51:02:84:DC:A6:16:5D:55:E6:EA:5A:8F:80:37 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F4328584A497069A575ECE170A34AA180 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 54041 IP address blocks: 23.142.232.0/24 maxlen: 25 2602:faf5::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:69:a5:75:ec:e1:70:a3:4a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=2cc90c1e-e283-42fd-b903-8c4b5e28f6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:f5:65:58:a6:0b:c6:8b:b9:b5:b9:bd:97: 95:8c:32:d0:8d:f5:32:3b:45:4c:f9:2d:32:e6:d9: 96:d2:b7:0a:04:3a:b4:01:0b:f4:97:75:3d:23:21: db:7f:57:90:67:ac:17:5b:bd:b7:98:85:58:3d:80: e3:09:58:f2:61:01:32:dc:61:c6:dc:e0:8d:ad:7b: d8:27:9b:4f:93:d3:2c:b3:ec:16:ba:e2:7f:62:75: f5:5b:c0:a8:ac:be:ce:97:a9:98:ac:e9:e6:33:e2: d9:06:bd:6f:72:5b:e1:25:f8:59:2c:1b:f7:c7:83: 27:41:b1:d9:8d:57:4d:76:93:1f:94:c8:8d:be:11: a4:da:0f:25:52:43:f9:2e:7a:e6:cb:75:02:53:b4: e4:d8:2e:16:c2:4d:5e:f2:cf:56:ec:eb:f6:49:9b: 3d:66:ce:20:d4:38:3d:c7:49:bc:cb:f4:1d:d4:37: 6c:82:23:1c:fb:97:13:c4:69:0c:e8:33:52:fc:aa: b2:a1:67:34:0d:a1:d2:f9:20:e1:65:3e:02:5f:a9: 3b:e4:3c:62:df:48:90:99:f8:ec:d8:e1:8a:c7:65: 70:70:9f:83:d9:7c:04:2f:08:28:24:49:34:20:46: 0f:a5:b4:13:be:b4:4a:4a:fb:fe:37:a2:b2:af:e4: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:DA:42:BA:E0:51:02:84:DC:A6:16:5D:55:E6:EA:5A:8F:80:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.232.0/24 IPv6: 2602:faf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c2:dd:c4:aa:e3:93:ee:d7:ba:18:22:69:7d:ab:94:14:65: ff:c1:5e:69:d9:09:f3:e9:26:27:4a:03:f4:df:84:aa:06:cc: 6b:3b:89:51:22:a8:0c:b6:d6:62:87:66:9c:9b:ee:ba:57:16: f3:34:8b:2f:45:d7:b8:58:dd:9d:9b:54:3d:eb:f0:bc:a6:75: 8c:1a:4c:55:90:0b:6f:56:b8:8f:d7:a4:92:06:8b:a3:98:6d: 9b:18:c6:58:9a:ee:c7:e9:7a:0b:ad:3f:a7:b3:bc:fe:16:a5: 99:1e:b7:94:31:c4:b1:b4:5b:e4:27:dc:42:6d:68:1c:6c:b8: 1c:58:97:7c:32:93:31:50:6f:ce:9f:46:8c:81:70:7e:15:a5: 05:31:18:6a:8a:dd:58:17:e6:c8:51:6b:6c:56:c9:65:0d:9d: e8:2c:5e:fe:3a:d5:6d:3a:01:1c:5c:ce:7a:f2:57:c6:cc:84: 41:86:1a:fe:28:b2:b8:07:a4:11:02:df:06:e6:c6:d5:48:0d: bb:d2:bb:e3:52:1f:a8:4b:6e:82:cc:a4:64:5d:96:88:a5:b7: b1:a8:b7:2e:53:aa:91:6f:00:de:3d:fd:aa:1d:a1:48:b1:72: bd:6c:bd:13:f8:a7:a3:52:34:f2:26:bf:d5:18:d0:12:13:bd: 86:34:16:dd -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpJcGmldezhcKNKoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MmNjOTBjMWUtZTI4My00MmZkLWI5MDMtOGM0YjVlMjhmNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6/1ZVimC8aLubW5vZeVjDLQjfUyO0VM+S0y 5tmW0rcKBDq0AQv0l3U9IyHbf1eQZ6wXW723mIVYPYDjCVjyYQEy3GHG3OCNrXvY J5tPk9Mss+wWuuJ/YnX1W8CorL7Ol6mYrOnmM+LZBr1vclvhJfhZLBv3x4MnQbHZ jVdNdpMflMiNvhGk2g8lUkP5Lnrmy3UCU7Tk2C4Wwk1e8s9W7Ov2SZs9Zs4g1Dg9 x0m8y/Qd1DdsgiMc+5cTxGkM6DNS/KqyoWc0DaHS+SDhZT4CX6k75Dxi30iQmfjs 2OGKx2VwcJ+D2XwELwgoJEk0IEYPpbQTvrRKSvv+N6Kyr+SStwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFqQ2kK64FEChNymFl1V5upaj4A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvNTY3YTBjN2ItM2Y4Ni0z MWVhLTg3OTEtZjM5NDBlMzA2YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF47oMA4E AgACMAgDBgAmAvr1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGwt3EquOT7te6GCJpfauUFGX/wV5p2Qnz 6SYnSgP034SqBsxrO4lRIqgMttZih2acm+66VxbzNIsvRde4WN2dm1Q96/C8pnWM GkxVkAtvVriP16SSBoujmG2bGMZYmu7H6XoLrT+ns7z+FqWZHreUMcSxtFvkJ9xC bWgcbLgcWJd8MpMxUG/On0aMgXB+FaUFMRhqit1YF+bIUWtsVsllDZ3oLF7+OtVt OgEcXM568lfGzIRBhhr+KLK4B6QRAt8G5sbVSA270rvjUh+oS26CzKRkXZaIpbex qLcuU6qRbwDePf2qHaFIsXK9bL0T+KejUjTyJr/VGNASE72GNBbd -----END CERTIFICATE-----Generated at Mon Jun 30 18:11:30 2025 by rpki-client