$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json) Hash identifier: NEhLfdJRw6JcjnJLaxKARgDOQvUSYwkh9vg4dguCROQ= Subject key identifier: EF:51:D8:3D:C6:96:64:59:2F:DE:A6:E4:7F:D5:A4:B2:92:84:C6:6B Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584A3B7B04AB92FEF1F214290300 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 401560 IP address blocks: 23.131.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:04:ab:92:fe:f1:f2:14:29:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=9939d472-792f-46bb-84bc-b45672491878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:d6:4a:4a:1c:59:75:d1:dd:d6:4c:ce:21: 4c:28:84:a7:5e:d3:49:aa:39:a7:0c:7b:a3:4a:97: 7c:d0:12:30:99:93:c7:44:4d:0f:48:12:59:34:04: 2d:8c:23:79:80:a1:67:55:d0:64:0a:c0:94:46:c3: 4d:ba:02:91:83:05:3f:93:72:6d:0c:c1:77:fe:53: 52:1f:9e:4b:d2:11:69:dc:c3:28:00:db:6d:9d:62: 17:86:1d:a7:3f:18:aa:a7:1c:29:9f:f9:35:2d:32: 6b:a3:15:56:2f:3b:c4:e1:75:49:a0:82:f1:4c:b4: 6f:0c:71:c3:e5:12:40:09:57:8c:c3:76:16:e9:4f: 8a:f7:d0:14:44:50:86:13:f2:ef:1a:26:1b:3c:46: ce:40:af:d6:d0:10:d3:74:ff:d9:15:9b:66:cf:0d: b1:5f:6d:4f:41:30:79:aa:5a:14:33:75:6b:d2:b4: 63:3b:fb:3b:7a:00:8f:b8:72:74:fe:33:59:2c:87: c2:22:87:0c:7c:d9:cc:65:cf:5e:8e:c7:1b:16:11: ce:7f:e8:c2:ff:e6:1f:fd:1c:04:50:6e:a0:83:3e: 22:f6:a1:7c:1e:aa:cc:b2:ea:09:7f:6a:88:2d:4a: 5b:e3:a4:3f:76:23:0c:45:40:b1:4a:06:12:81:89: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:51:D8:3D:C6:96:64:59:2F:DE:A6:E4:7F:D5:A4:B2:92:84:C6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:74:77:19:28:d9:8b:03:fb:59:c2:fc:7c:60:04:3b:6b: 52:93:98:6f:c2:72:47:9b:32:5a:f1:0b:eb:c9:04:c7:c3:c8: d1:e9:18:d5:c8:67:08:ec:58:22:62:83:84:0a:95:30:09:01: cd:15:26:2d:e8:ec:f9:21:dd:73:77:75:a2:1d:be:7d:00:e6: 34:40:49:b6:72:0a:b8:03:28:80:c4:ad:0d:4f:0e:42:ad:57: a5:06:3e:31:f6:4e:18:00:c7:7c:bb:9f:2f:46:cb:2f:61:04: c4:fa:51:13:a2:60:b0:fd:45:bb:6b:09:a5:cb:ac:e1:3b:c1: 2e:41:4a:ec:05:c0:14:dc:fe:48:e3:b7:e9:ee:24:05:b5:50: eb:78:19:d9:91:67:c5:84:ea:c3:b9:9b:a8:58:dc:3d:43:8c: 71:c5:98:7c:d6:e6:33:55:5f:8e:67:9b:28:80:72:44:bd:86: 02:66:fc:97:27:00:c5:09:fe:14:41:f4:7b:42:15:3b:cf:07: ed:cb:fc:fc:90:6a:cd:2e:f8:ec:51:91:3f:3d:47:93:fe:12: 91:77:97:23:44:e7:d1:b2:4c:51:d9:a3:71:88:89:9d:cf:19: 61:be:29:67:e9:2f:0c:08:5e:83:78:85:94:7a:d9:f7:e0:95: 89:d1:e7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewSrkv7x8hQpAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OTkzOWQ0NzItNzkyZi00NmJiLTg0YmMtYjQ1NjcyNDkxODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyXWSkocWXXR3dZMziFMKISnXtNJqjmnDHuj Spd80BIwmZPHRE0PSBJZNAQtjCN5gKFnVdBkCsCURsNNugKRgwU/k3JtDMF3/lNS H55L0hFp3MMoANttnWIXhh2nPxiqpxwpn/k1LTJroxVWLzvE4XVJoILxTLRvDHHD 5RJACVeMw3YW6U+K99AURFCGE/LvGiYbPEbOQK/W0BDTdP/ZFZtmzw2xX21PQTB5 qloUM3Vr0rRjO/s7egCPuHJ0/jNZLIfCIocMfNnMZc9ejscbFhHOf+jC/+Yf/RwE UG6ggz4i9qF8HqrMsuoJf2qILUpb46Q/diMMRUCxSgYSgYnfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9R2D3GlmRZL96m5H/VpLKShMZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvNTEzMGJlZjktNWUyNC0z OTc1LTk5MTQtMDg5MmY4ZGVjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4P8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6hdHcZKNmLA/tZwvx8YAQ7a1KTmG/CckebMlrxC+vJBMfDyNHpGNXI ZwjsWCJig4QKlTAJAc0VJi3o7Pkh3XN3daIdvn0A5jRASbZyCrgDKIDErQ1PDkKt V6UGPjH2ThgAx3y7ny9Gyy9hBMT6UROiYLD9RbtrCaXLrOE7wS5BSuwFwBTc/kjj t+nuJAW1UOt4GdmRZ8WE6sO5m6hY3D1DjHHFmHzW5jNVX45nmyiAckS9hgJm/Jcn AMUJ/hRB9HtCFTvPB+3L/PyQas0u+OxRkT89R5P+EpF3lyNE59GyTFHZo3GIiZ3P GWG+KWfpLwwIXoN4hZR62ffglYnR51k= -----END CERTIFICATE-----Generated at Mon Jun 30 13:54:07 2025 by rpki-client