$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa File: cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa (raw, json) Hash identifier: iWty4ytouKUmq/cxfs2yMc4n+Vij5gjEXuyVlOanz+I= Subject key identifier: 00:A4:51:54:C5:57:EC:2D:E7:94:8D:03:46:5E:3C:39:9A:7B:D4:AD Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F4328584A4413A7BF1EA0F56616029220 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa Signing time: Sat 21 Jun 2025 14:55:20 +0000 ROA not before: Sat 21 Jun 2025 14:55:20 +0000 ROA not after: Fri 19 Sep 2025 14:55:20 +0000 asID: 399861 IP address blocks: 23.134.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:44:13:a7:bf:1e:a0:f5:66:16:02:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Jun 21 14:55:20 2025 GMT Not After : Sep 19 14:55:20 2025 GMT Subject: CN=215e8c0d-03c4-437b-be08-23ce54ff46da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:04:4d:f3:ce:65:78:32:0a:62:ed:7a:67:e7: 99:f8:5d:45:f5:8c:b4:40:9a:1f:b2:91:c2:95:b6: 78:03:a3:3c:64:08:29:83:76:b4:14:2e:63:5a:51: 94:e6:08:80:ba:e1:4b:94:33:f3:e5:51:11:4a:b8: 81:25:fa:98:1d:d4:2f:ff:71:ae:22:67:c7:fb:51: 5b:8b:39:67:d3:45:68:ea:ad:5e:d4:5e:86:58:2f: cc:56:6f:54:50:d5:96:1a:91:66:ce:13:6b:7f:21: 31:b0:98:2a:31:25:8e:ac:38:4e:70:15:13:b2:2e: 81:c1:6d:f1:08:c0:7c:29:8d:ad:8d:96:c8:ce:50: 60:17:81:72:19:17:6b:8b:58:9c:64:3b:ec:02:e9: c4:aa:48:e3:ec:56:9a:80:4f:c8:2f:6c:01:fd:8b: 81:f5:c8:82:7a:b0:07:a3:9c:9b:aa:04:99:f5:26: bd:3c:d9:e2:ab:7b:81:55:30:01:3d:26:e4:b1:2b: ff:31:46:82:a6:d9:71:4d:b2:a5:c7:de:2d:aa:6f: a2:9b:db:fe:1c:75:e6:dd:d5:89:4a:61:e3:4b:8e: 26:43:1c:e4:ec:43:31:9d:a0:94:94:b9:14:c0:42: 3e:0b:6c:86:0b:82:cf:3b:70:76:c9:14:a1:7c:35: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A4:51:54:C5:57:EC:2D:E7:94:8D:03:46:5E:3C:39:9A:7B:D4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5c:69:e0:a3:02:f4:d1:22:63:e3:35:c5:1e:92:5a:25:97: 1c:97:f5:72:b1:d9:5a:d5:27:df:4b:e0:a0:18:12:a2:b7:2a: 8c:7e:ed:96:d4:7c:94:2c:2e:85:af:59:2f:3a:2c:ca:91:be: 5b:c7:26:bd:3e:42:07:04:a5:a3:48:4f:90:7b:ef:93:65:bd: 14:e8:41:3a:4e:cc:ec:9e:2b:ee:92:14:94:8d:70:85:84:15: 78:33:0a:af:b9:e4:cd:d4:54:68:97:a7:ea:31:89:42:fd:87: 93:11:f6:b8:f1:62:14:df:f5:68:40:b0:64:23:de:95:ab:67: 52:37:8a:c1:cb:46:b7:b8:ee:9e:22:1c:7d:23:36:41:d4:b5: f2:85:c5:02:60:79:6f:d9:f3:b0:31:91:f3:ed:79:44:2f:b3: de:c3:e5:3c:30:c7:32:51:40:bc:95:c6:f5:1f:9f:91:a2:bb: a8:1a:ec:d3:b1:44:7f:75:a7:77:5c:32:39:30:30:7f:3f:9a: e3:eb:fb:46:25:be:60:5c:53:a7:10:6e:d1:af:ba:9b:38:38: 1c:93:b3:05:9a:a3:3b:5c:37:c9:57:e0:93:5b:ef:64:50:e7: 65:56:cf:61:b1:44:37:34:61:9d:ed:85:58:a0:b0:1d:0f:56: 5d:ba:af:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpEE6e/HqD1ZhYCkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI1MDYyMTE0NTUyMFoXDTI1MDkxOTE0NTUyMFowLzEtMCsGA1UEAxMk MjE1ZThjMGQtMDNjNC00MzdiLWJlMDgtMjNjZTU0ZmY0NmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQRN885leDIKYu16Z+eZ+F1F9Yy0QJofspHC lbZ4A6M8ZAgpg3a0FC5jWlGU5giAuuFLlDPz5VERSriBJfqYHdQv/3GuImfH+1Fb izln00Vo6q1e1F6GWC/MVm9UUNWWGpFmzhNrfyExsJgqMSWOrDhOcBUTsi6BwW3x CMB8KY2tjZbIzlBgF4FyGRdri1icZDvsAunEqkjj7FaagE/IL2wB/YuB9ciCerAH o5ybqgSZ9Sa9PNniq3uBVTABPSbksSv/MUaCptlxTbKlx94tqm+im9v+HHXm3dWJ SmHjS44mQxzk7EMxnaCUlLkUwEI+C2yGC4LPO3B2yRShfDWU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACkUVTFV+wt55SNA0ZePDmae9StMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvY2ZjMzJlOGItNGQ2ZC0z MTYzLTk0YTItN2VjMWFmZjQ1MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4b0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpcaeCjAvTRImPjNcUeklollxyX9XKx2VrVJ99L4KAYEqK3Kox+7ZbU fJQsLoWvWS86LMqRvlvHJr0+QgcEpaNIT5B775NlvRToQTpOzOyeK+6SFJSNcIWE FXgzCq+55M3UVGiXp+oxiUL9h5MR9rjxYhTf9WhAsGQj3pWrZ1I3isHLRre47p4i HH0jNkHUtfKFxQJgeW/Z87AxkfPteUQvs97D5TwwxzJRQLyVxvUfn5Giu6ga7NOx RH91p3dcMjkwMH8/muPr+0YlvmBcU6cQbtGvups4OByTswWaoztcN8lX4JNb72RQ 52VWz2GxRDc0YZ3thVigsB0PVl26r1Q= -----END CERTIFICATE-----Generated at Mon Jun 30 19:51:49 2025 by rpki-client