$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa File: c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa (raw, json) Hash identifier: pzSNB6nhSG6Dg7OSsoi86HVc9ahj1/Tkth2qL4MkO8I= Subject key identifier: 34:FC:8A:10:11:F7:13:4E:D9:F0:0B:59:81:AA:80:8F:0B:99:BA:6F Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584A51D06ED5C881A0A1D5748600 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 400304 IP address blocks: 23.147.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6e:d5:c8:81:a0:a1:d5:74:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=17303c0d-1b12-43af-9b7c-bcee849eea9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:27:cd:d2:38:7f:5a:b4:f3:cf:ff:64:63: 5b:e8:a7:4c:eb:10:8c:46:f6:83:f9:6d:cc:65:d3: 35:aa:71:21:8b:df:01:17:c6:52:85:93:21:22:b8: a0:05:a2:00:36:2c:95:50:f8:4b:89:f5:64:9f:06: f8:60:b8:03:ed:2b:00:68:0d:b0:9f:03:bb:ef:9c: 09:4c:f9:9c:6c:aa:8a:15:3b:38:9a:20:06:7c:9a: c5:71:2c:92:e8:9c:8a:58:82:36:88:99:f3:32:01: 0e:18:8c:00:69:fa:c0:2d:cd:a8:aa:99:e0:af:7d: 2c:86:7d:a1:4e:aa:5f:a5:b8:fd:82:cd:e8:ac:ac: 6c:99:d0:e7:ab:07:7f:4b:c5:45:52:15:df:a7:6f: 05:72:4f:72:40:c5:ef:b7:de:42:57:10:42:f8:f2: 96:67:b8:83:e3:fc:03:2a:e4:78:95:b8:ed:ec:87: 2a:ac:fd:70:de:02:2e:93:62:9f:ce:86:02:3c:eb: aa:78:fd:b8:b1:58:dc:5c:cc:2c:f2:f1:a8:a1:76: e1:91:e6:8d:8c:72:38:68:d6:14:a1:a7:10:01:f1: 98:e2:f4:0e:11:7e:48:fe:27:d3:13:7c:37:65:56: c3:9a:4c:5c:3e:f6:79:ca:6b:27:a4:0c:91:d8:b6: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FC:8A:10:11:F7:13:4E:D9:F0:0B:59:81:AA:80:8F:0B:99:BA:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:49:05:d5:bc:63:c7:07:37:8e:83:c9:70:e9:4e:56:7f: 0a:70:d9:2b:01:64:a4:25:50:32:57:e8:d3:50:b9:06:62:62: 36:7b:6a:48:53:44:e9:2a:67:6c:dd:d0:85:df:5b:24:ec:c7: 8d:93:3c:2c:ec:93:8f:23:c1:4a:1b:2a:46:d6:3e:48:82:72: cd:39:87:54:d4:43:27:24:a9:72:11:e2:40:2b:83:e0:db:25: e0:b1:f0:08:33:98:99:91:42:0a:0b:02:f4:bc:cf:91:d4:56: 36:fe:be:4a:17:86:5d:12:2f:80:89:ad:c7:e6:c8:ae:4a:bd: 3a:9b:b0:eb:86:94:9f:d7:b4:e0:f3:9e:40:08:4f:90:dc:f4: 2d:7b:78:82:6b:8c:6d:71:fc:75:db:f0:9b:df:20:43:03:5c: 74:77:f2:46:96:bf:71:7a:7e:81:8a:8b:1d:5b:c3:30:d8:4b: 97:17:a7:eb:a7:be:f7:e5:f2:20:63:c3:5e:82:30:ad:28:36: 21:82:c9:a1:bb:18:df:ab:9d:21:67:16:7a:c4:9d:d3:ef:f4: ea:1b:78:56:79:ae:24:01:91:af:a3:25:04:74:76:01:00:9b: 3f:7c:57:da:c2:e2:13:50:0a:9c:71:25:43:99:af:c3:d6:0b: 2b:2e:62:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0G7VyIGgodV0hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MTczMDNjMGQtMWIxMi00M2FmLTliN2MtYmNlZTg0OWVlYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46gnzdI4f1q088//ZGNb6KdM6xCMRvaD+W3M ZdM1qnEhi98BF8ZShZMhIrigBaIANiyVUPhLifVknwb4YLgD7SsAaA2wnwO775wJ TPmcbKqKFTs4miAGfJrFcSyS6JyKWII2iJnzMgEOGIwAafrALc2oqpngr30shn2h Tqpfpbj9gs3orKxsmdDnqwd/S8VFUhXfp28Fck9yQMXvt95CVxBC+PKWZ7iD4/wD KuR4lbjt7IcqrP1w3gIuk2KfzoYCPOuqeP24sVjcXMws8vGooXbhkeaNjHI4aNYU oacQAfGY4vQOEX5I/ifTE3w3ZVbDmkxcPvZ5ymsnpAyR2LYFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT8ihAR9xNO2fALWYGqgI8LmbpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvYzFmZmVkNDMtOGIzYS0z OWUyLWE1MzctZmUzMTQzMjBmNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84SQXVvGPHBzeOg8lw6U5Wfwpw2SsBZKQlUDJX6NNQuQZiYjZ7akhT ROkqZ2zd0IXfWyTsx42TPCzsk48jwUobKkbWPkiCcs05h1TUQyckqXIR4kArg+Db JeCx8AgzmJmRQgoLAvS8z5HUVjb+vkoXhl0SL4CJrcfmyK5KvTqbsOuGlJ/XtODz nkAIT5Dc9C17eIJrjG1x/HXb8JvfIEMDXHR38kaWv3F6foGKix1bwzDYS5cXp+un vvfl8iBjw16CMK0oNiGCyaG7GN+rnSFnFnrEndPv9OobeFZ5riQBka+jJQR0dgEA mz98V9rC4hNQCpxxJUOZr8PWCysuYmo= -----END CERTIFICATE-----Generated at Mon Jun 30 15:14:17 2025 by rpki-client