$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa File: 287a2a23-ee50-3199-aa52-e050b1ad449e.roa (raw, json) Hash identifier: fmWvC/Amm7zVDT6qotQuREOsP4mxK3dm9Yi+YC1k1z8= Subject key identifier: 55:1A:35:B6:99:5D:99:AC:51:B3:A9:7E:7E:AE:3D:C9:A9:B1:26:BC Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F43285849E7BA704CD879B116819035C0 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 31775 IP address blocks: 23.175.80.0/24 maxlen: 24 23.226.80.0/20 maxlen: 24 204.80.232.0/24 maxlen: 24 209.94.32.0/20 maxlen: 24 2606:29c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:70:4c:d8:79:b1:16:81:90:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=c06ab6aa-0a8e-4b80-846b-ba832b04756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:3b:39:97:68:96:02:67:13:59:33:8d:99: 2b:9e:37:16:d8:46:2e:e3:de:5f:5b:6d:01:88:5f: 29:7d:3f:69:9d:79:59:81:f7:d9:77:f0:48:fe:ee: cb:b2:7f:19:9e:20:80:f3:60:f9:93:1b:08:3f:76: 09:0a:e6:0f:2f:19:e4:be:f5:a9:be:76:b7:3a:1b: 0d:c1:57:c2:95:13:8e:95:b3:98:02:bb:9e:42:5f: 4f:54:bc:b4:da:47:9e:d4:d3:c8:31:d7:66:42:0b: 27:e3:de:3d:5a:2e:46:71:5b:c2:11:f4:13:f9:b8: 26:70:5c:b7:f6:dd:37:35:7e:1a:60:a9:a1:e7:15: 71:7b:cb:ad:3a:d3:5e:40:c4:da:d1:b3:1c:9d:8f: 3b:69:c1:91:5e:21:1e:06:d3:d2:32:11:71:86:3f: c8:67:01:fc:13:6c:9b:61:c6:72:33:63:a2:e8:b9: 3f:07:74:29:d6:f1:aa:a4:ac:0a:ed:c7:95:aa:96: c5:d8:ca:20:c2:3e:ed:b9:19:3c:0b:83:ee:62:cf: 57:80:f4:61:28:c5:5e:f0:4d:2c:26:20:e9:d9:01: 84:58:fd:5d:c4:97:f7:1f:17:4d:dd:a1:87:fb:0b: b1:9b:7c:88:bb:cf:5e:fd:e3:5a:70:eb:7f:f7:51: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1A:35:B6:99:5D:99:AC:51:B3:A9:7E:7E:AE:3D:C9:A9:B1:26:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 23.175.80.0/24 23.226.80.0/20 204.80.232.0/24 209.94.32.0/20 IPv6: 2606:29c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fa:ae:08:8e:20:33:3b:34:22:35:6f:d4:9d:5c:97:7b:17: ea:8d:17:60:c3:25:0d:cd:09:c9:6f:ed:2d:6b:12:3f:da:df: 5a:3e:5e:35:e4:40:6b:8b:95:31:1e:3a:0d:b8:8f:dc:0e:2f: 8d:a1:28:56:a0:7d:8f:2a:ad:70:73:a9:fb:e6:aa:bf:1a:d1: 7b:cc:ed:ad:76:a2:3e:f3:3b:93:6e:5d:24:f1:5e:ce:21:58: 04:0e:94:e5:27:fd:cd:43:86:46:fb:08:0b:e3:ac:0f:63:b9: 59:a3:61:fc:c4:96:c3:e0:b5:c5:e9:02:0b:83:f6:20:46:da: e3:3c:6c:48:a6:24:4f:1d:af:38:4a:9d:ee:65:c5:6f:01:62: ec:7d:da:cc:a6:da:84:9f:b1:6d:be:e9:ff:65:48:5f:b1:a3: 09:6d:29:f7:11:31:42:4c:95:16:95:c2:aa:c2:5d:76:9c:89: d5:b4:db:c7:c2:0f:93:98:b7:30:cd:03:fd:11:40:45:9d:a7: 5a:a9:7e:53:9c:f9:45:6b:7c:04:7e:30:df:f9:78:9f:13:8c: 72:95:33:01:23:1a:9e:05:20:c7:4c:1e:2b:82:82:3e:20:d1: e7:f0:e1:d1:72:fa:ae:68:0d:9e:8e:33:4d:16:f0:70:03:53: dc:0e:b9:d0 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEnnunBM2HmxFoGQNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YzA2YWI2YWEtMGE4ZS00YjgwLTg0NmItYmE4MzJiMDQ3NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNQ7OZdolgJnE1kzjZkrnjcW2EYu495fW20B iF8pfT9pnXlZgffZd/BI/u7Lsn8ZniCA82D5kxsIP3YJCuYPLxnkvvWpvna3OhsN wVfClROOlbOYArueQl9PVLy02kee1NPIMddmQgsn4949Wi5GcVvCEfQT+bgmcFy3 9t03NX4aYKmh5xVxe8utOtNeQMTa0bMcnY87acGRXiEeBtPSMhFxhj/IZwH8E2yb YcZyM2Oi6Lk/B3Qp1vGqpKwK7ceVqpbF2Mogwj7tuRk8C4PuYs9XgPRhKMVe8E0s JiDp2QGEWP1dxJf3HxdN3aGH+wuxm3yIu89e/eNacOt/91E7OwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFFUaNbaZXZmsUbOpfn6uPcmpsSa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjg3YTJhMjMtZWU1MC0z MTk5LWFhNTItZTA1MGIxYWQ0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF69QAwQE F+JQAwQAzFDoAwQE0V4gMA0EAgACMAcDBQAmBinAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHH6rgiOIDM7 NCI1b9SdXJd7F+qNF2DDJQ3NCclv7S1rEj/a31o+XjXkQGuLlTEeOg24j9wOL42h KFagfY8qrXBzqfvmqr8a0XvM7a12oj7zO5NuXSTxXs4hWAQOlOUn/c1Dhkb7CAvj rA9juVmjYfzElsPgtcXpAguD9iBG2uM8bEimJE8drzhKne5lxW8BYux92sym2oSf sW2+6f9lSF+xowltKfcRMUJMlRaVwqrCXXacidW028fCD5OYtzDNA/0RQEWdp1qp flOc+UVrfAR+MN/5eJ8TjHKVMwEjGp4FIMdMHiuCgj4g0efw4dFy+q5oDZ6OM00W 8HADU9wOudA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:51:54 2025 by rpki-client