$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa File: 803425ff-9b24-3d04-9059-0cc3f2a853f1.roa (raw, json) Hash identifier: /+Y4fDZRjvbD7qQKeTtCSnY7r51jORzF9/eX0aaUXbU= Subject key identifier: 95:5B:60:6B:60:C5:93:0C:83:D7:62:F8:01:22:C6:2C:04:3A:2B:B2 Certificate issuer: /CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf Certificate serial: 010D0C9F4328584A44CECB1061D0EE395E9270A0 Authority key identifier: 36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa Signing time: Sat 21 Jun 2025 21:12:24 +0000 ROA not before: Sat 21 Jun 2025 21:12:24 +0000 ROA not after: Fri 19 Sep 2025 21:12:24 +0000 asID: 401608 IP address blocks: 23.135.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:44:ce:cb:10:61:d0:ee:39:5e:92:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf Validity Not Before: Jun 21 21:12:24 2025 GMT Not After : Sep 19 21:12:24 2025 GMT Subject: CN=4fa9cb6d-cd72-495a-8916-6adb04ffb594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:21:59:c3:c9:7d:54:be:2f:52:95:5a:f6: f4:b0:14:1c:2f:45:0e:a0:97:60:76:96:dd:3d:25: 13:6b:62:8f:e1:28:07:64:73:34:36:43:8f:f3:ab: a6:6b:61:44:41:8f:40:90:06:66:18:e4:a7:b7:c0: 58:2b:ab:ce:27:65:b9:d1:91:87:44:17:58:bd:35: 0e:54:eb:5a:a5:66:11:98:64:d9:26:2c:30:2a:89: af:f2:85:79:f7:09:e2:d6:74:52:52:eb:b1:6e:4b: 3e:18:54:d4:f2:bf:ad:66:9d:40:91:da:ca:9c:25: a9:5d:43:b7:78:0f:66:8b:c1:34:ad:73:51:00:a2: 00:24:67:49:98:51:9d:1f:b1:b7:52:b4:69:62:1a: 61:ab:c6:e3:90:5a:ce:41:fa:f0:13:e7:ec:bf:9f: 73:2a:22:a4:ad:66:2a:c2:45:4d:b4:30:81:9b:39: 0a:83:6a:1c:51:b8:8a:8a:a4:2d:8f:bf:9e:f6:c8: 3a:4f:60:05:d3:cd:ed:79:ae:f0:48:60:ad:bd:7a: ae:d4:1c:a7:3b:7a:b8:90:98:f8:65:cf:ea:a9:35: af:8f:9e:d5:b4:74:69:1c:a3:1d:44:2d:25:1d:95: 97:56:d3:1f:78:05:06:61:8d:56:ad:e8:1c:d0:3c: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:60:6B:60:C5:93:0C:83:D7:62:F8:01:22:C6:2C:04:3A:2B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.crl X509v3 Authority Key Identifier: keyid:36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:34:32:27:b4:8d:ce:ae:0d:c3:9e:84:44:ca:7f:d0:5c:88: eb:7b:ed:6e:ac:65:3e:32:16:7c:9a:a3:51:f6:e3:1a:0d:99: f7:25:a4:5b:b8:b2:d3:08:aa:84:12:b7:27:73:11:b4:3b:ee: d0:84:89:fc:5c:4f:2c:d0:32:43:c5:9e:f5:05:17:c3:6a:26: d0:05:30:bc:30:80:ad:0d:53:6f:00:b0:88:4e:d7:34:34:35: 1e:d8:2f:86:20:ae:6c:0f:a3:8f:5f:c4:bc:6e:9f:67:27:7b: c4:bd:ea:1c:fd:0e:9f:a7:84:83:c7:1e:e1:f3:08:24:22:99: 75:a1:4d:5e:44:6b:e7:e5:36:5d:a8:05:9a:94:f8:76:e4:56: 72:df:19:23:99:be:06:37:09:30:4e:1e:53:d8:92:79:eb:71: db:89:ed:c3:f3:71:b3:d3:85:c9:58:59:42:fd:ab:66:52:fa: 8b:43:b6:59:fc:dd:91:c1:38:8c:cd:e7:b0:bd:cb:b8:0b:3a: cd:0d:bc:cd:c6:61:f7:04:7f:b1:2d:3c:65:23:47:35:88:02: dc:70:0f:87:7c:43:8d:2a:64:be:b6:d1:43:2f:26:5f:9d:4f: b1:b0:ce:41:20:db:67:54:0d:fa:e7:06:41:e6:f8:cf:4b:f1: d3:8f:87:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpEzssQYdDuOV6ScKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFjOWZjMTctY2I3YS00MmQwLWFkM2MtZGRhZWY5MGM4 YmJmMB4XDTI1MDYyMTIxMTIyNFoXDTI1MDkxOTIxMTIyNFowLzEtMCsGA1UEAxMk NGZhOWNiNmQtY2Q3Mi00OTVhLTg5MTYtNmFkYjA0ZmZiNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq0hWcPJfVS+L1KVWvb0sBQcL0UOoJdgdpbd PSUTa2KP4SgHZHM0NkOP86uma2FEQY9AkAZmGOSnt8BYK6vOJ2W50ZGHRBdYvTUO VOtapWYRmGTZJiwwKomv8oV59wni1nRSUuuxbks+GFTU8r+tZp1AkdrKnCWpXUO3 eA9mi8E0rXNRAKIAJGdJmFGdH7G3UrRpYhphq8bjkFrOQfrwE+fsv59zKiKkrWYq wkVNtDCBmzkKg2ocUbiKiqQtj7+e9sg6T2AF083tea7wSGCtvXqu1BynO3q4kJj4 Zc/qqTWvj57VtHRpHKMdRC0lHZWXVtMfeAUGYY1Wregc0DwhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVbYGtgxZMMg9di+AEixiwEOiuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMWM5 ZmMxNy1jYjdhLTQyZDAtYWQzYy1kZGFlZjkwYzhiYmYvODAzNDI1ZmYtOWIyNC0z ZDA0LTkwNTktMGNjM2YyYTg1M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDFjOWZjMTctY2I3YS00MmQwLWFk M2MtZGRhZWY5MGM4YmJmLzAxYzlmYzE3LWNiN2EtNDJkMC1hZDNjLWRkYWVmOTBj OGJiZi5jcmwwHwYDVR0jBBgwFoAUNsIy2+97UsLgKPSfAzNCXsDApAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMWM5ZmMxNy1jYjdhLTQyZDAtYWQzYy1kZGFl ZjkwYzhiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk0Mie0jc6uDcOehETKf9BciOt77W6sZT4yFnyao1H24xoNmfclpFu4 stMIqoQStydzEbQ77tCEifxcTyzQMkPFnvUFF8NqJtAFMLwwgK0NU28AsIhO1zQ0 NR7YL4YgrmwPo49fxLxun2cne8S96hz9Dp+nhIPHHuHzCCQimXWhTV5Ea+flNl2o BZqU+HbkVnLfGSOZvgY3CTBOHlPYknnrcduJ7cPzcbPThclYWUL9q2ZS+otDtln8 3ZHBOIzN57C9y7gLOs0NvM3GYfcEf7EtPGUjRzWIAtxwD4d8Q40qZL620UMvJl+d T7GwzkEg22dUDfrnBkHm+M9L8dOPh9Q= -----END CERTIFICATE-----Generated at Mon Jun 30 10:18:41 2025 by rpki-client