$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa File: b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (raw, json) Hash identifier: 7WcfsdcAl6eopcBCLYyLKCfxXsvJAlmyWaUYO5/RHPA= Subject key identifier: F7:D8:96:7E:15:BE:BC:D0:D6:89:32:A0:CE:1E:DE:1F:E3:36:13:82 Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584A2313666DBBA50928D1364680 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa Signing time: Wed 28 May 2025 22:54:30 +0000 ROA not before: Wed 28 May 2025 22:54:30 +0000 ROA not after: Tue 26 Aug 2025 22:54:30 +0000 asID: 19686 IP address blocks: 23.139.60.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:13:66:6d:bb:a5:09:28:d1:36:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: May 28 22:54:30 2025 GMT Not After : Aug 26 22:54:30 2025 GMT Subject: CN=641b4328-1c91-48b3-a4e5-ab82fc5a7767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:49:76:94:e7:cd:b7:43:a0:97:36:66:e6: 9a:6e:98:fd:86:86:ec:95:88:c7:ec:78:d0:5e:08: 56:84:05:76:1f:33:87:d1:63:8e:2e:48:80:90:1b: f2:58:b8:db:f1:ce:a2:f2:bf:a9:cd:60:b8:b4:ab: e4:a8:a0:41:2d:bc:5e:59:5f:52:8a:60:54:2b:46: 27:bf:03:05:02:ac:7f:94:b1:78:8b:26:f0:a4:fd: 58:35:e7:36:b7:29:75:94:de:ea:9d:20:13:d9:7a: 19:23:19:54:50:14:66:0c:a3:a2:6a:be:3b:45:b0: 5f:f4:2a:06:91:cc:35:b1:f8:16:c8:2d:9c:93:f0: dd:e6:b6:8f:af:db:20:4c:3d:e2:4e:ce:c4:22:c4: 66:27:0b:ef:03:64:66:1c:a7:70:2a:ec:b6:33:3d: 78:c7:ac:10:f0:21:6c:a2:65:27:b9:61:1a:0d:e0: 72:33:5f:9e:78:ad:27:94:b5:26:b4:b7:72:dc:10: ef:26:13:5d:18:4e:bf:6e:c9:36:5d:54:50:5b:77: 97:19:1c:be:92:d3:f7:db:66:2d:40:a9:30:c0:e5: e0:5d:bf:f1:a3:11:07:be:2b:45:a0:f2:99:7f:64: 43:51:a3:76:db:5a:40:8a:3c:01:11:a6:0d:ef:9f: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D8:96:7E:15:BE:BC:D0:D6:89:32:A0:CE:1E:DE:1F:E3:36:13:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/24 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f5:41:3b:bd:f8:d0:08:81:ca:b3:4c:27:7c:c3:7e:b4:d8: f0:1c:73:d4:47:70:18:cf:71:e9:ea:ae:47:10:6e:86:3a:eb: 49:08:e3:ad:6b:63:d9:f3:01:bd:fd:e3:8c:fa:df:51:b0:f4: cf:fb:30:a9:06:2d:02:e6:81:28:90:28:05:20:e9:02:40:7d: eb:5b:44:3a:47:47:22:89:f0:4d:71:b0:58:f1:61:e4:a6:71: e2:0c:aa:ea:fa:ce:ed:c7:bc:33:81:a6:f4:4b:39:dd:d2:42: c2:72:79:1b:3c:78:73:0b:69:43:f8:89:58:2e:03:63:90:e2: ee:19:36:79:8d:b3:83:e1:f3:6d:a6:75:d5:38:51:dd:05:c4: fc:57:4e:6f:69:c6:48:63:5f:21:cf:2a:70:b4:c1:02:af:b9: 11:16:3b:ed:fe:b0:e6:1a:bf:21:24:4b:0a:8e:5e:72:7e:57: 38:16:0c:7f:31:0c:55:73:d9:5a:ee:7b:a2:7d:01:d8:4f:9b: 2b:0e:1c:74:9c:18:96:a2:04:67:9f:3f:2f:4c:43:c2:69:06: 31:a2:f7:dc:6a:b5:f7:eb:e3:0a:f3:ec:de:b2:00:d9:c5:f3: 45:ce:7d:c2:4f:d4:aa:9d:9a:aa:b9:8d:04:c2:5a:54:23:82: b1:03:7d:d1 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEojE2Ztu6UJKNE2RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI1MDUyODIyNTQzMFoXDTI1MDgyNjIyNTQzMFowLzEtMCsGA1UEAxMk NjQxYjQzMjgtMWM5MS00OGIzLWE0ZTUtYWI4MmZjNWE3NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCVJdpTnzbdDoJc2Zuaabpj9hobslYjH7HjQ XghWhAV2HzOH0WOOLkiAkBvyWLjb8c6i8r+pzWC4tKvkqKBBLbxeWV9SimBUK0Yn vwMFAqx/lLF4iybwpP1YNec2tyl1lN7qnSAT2XoZIxlUUBRmDKOiar47RbBf9CoG kcw1sfgWyC2ck/Dd5raPr9sgTD3iTs7EIsRmJwvvA2RmHKdwKuy2Mz14x6wQ8CFs omUnuWEaDeByM1+eeK0nlLUmtLdy3BDvJhNdGE6/bsk2XVRQW3eXGRy+ktP322Yt QKkwwOXgXb/xoxEHvitFoPKZf2RDUaN221pAijwBEaYN758YLQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFPfYln4VvrzQ1okyoM4e3h/jNhOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvYjI1ZmIyZTUtM2M2Ny0z YmY3LWE1MGItZjA2MzVmYmE4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPfVBO7340AiByrNMJ3zDfrTY 8Bxz1EdwGM9x6equRxBuhjrrSQjjrWtj2fMBvf3jjPrfUbD0z/swqQYtAuaBKJAo BSDpAkB961tEOkdHIonwTXGwWPFh5KZx4gyq6vrO7ce8M4Gm9Es53dJCwnJ5Gzx4 cwtpQ/iJWC4DY5Di7hk2eY2zg+HzbaZ11ThR3QXE/FdOb2nGSGNfIc8qcLTBAq+5 ERY77f6w5hq/ISRLCo5ecn5XOBYMfzEMVXPZWu57on0B2E+bKw4cdJwYlqIEZ58/ L0xDwmkGMaL33Gq19+vjCvPs3rIA2cXzRc59wk/Uqp2aqrmNBMJaVCOCsQN90Q== -----END CERTIFICATE-----Generated at Thu Jul 3 22:59:39 2025 by rpki-client