$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa File: 252c79ea-8e09-336a-a0e3-096a0586430b.roa (raw, json) Hash identifier: ZoscnxN5LUSJaa0vmlMnThu3PB8H41Og4f9qWjusg8Y= Subject key identifier: E0:39:6C:E3:74:95:38:15:97:84:1C:6A:8D:3B:07:4D:70:31:82:02 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AD7D1112E2A7B4DB3D9894800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 31898 IP address blocks: 23.239.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:11:2e:2a:7b:4d:b3:d9:89:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=91f7966d-baf7-443a-a78d-1575d80ec580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:37:fb:79:1b:44:ad:c7:84:48:a7:5c:d4: 9c:cc:c4:7f:5d:4d:1e:92:d9:3b:c7:11:3b:47:4a: a1:1e:20:29:62:98:d6:99:b8:85:26:75:ec:7b:af: 48:12:41:6d:35:84:1d:44:25:18:6b:32:ac:66:03: 43:7a:6c:cc:df:94:5a:91:1a:f2:de:4d:59:02:83: 46:fe:37:56:76:34:91:20:a1:bf:c4:e6:e4:3e:e6: 47:8b:98:ee:87:b6:79:9e:7a:c4:a5:9e:1a:6b:0e: 86:e8:57:7f:7a:d1:ee:f9:34:79:08:64:fb:4d:85: 3f:e9:43:f7:65:ab:61:68:a2:9d:4c:d6:b1:17:55: bf:1b:22:04:2c:e1:4d:d7:da:7d:54:50:06:6a:d6: 36:6f:f0:15:82:ec:b5:be:98:e1:06:92:09:1a:97: 20:dd:9a:5b:74:19:ca:92:09:50:5a:fd:7b:ca:49: 6e:5b:68:2f:7c:59:d7:75:2b:1b:6a:37:c5:3b:6c: 4f:36:26:05:04:30:0b:a6:56:b7:76:6c:bf:e4:45: 1a:9a:ad:9d:8e:1b:5c:ca:df:82:79:f3:20:66:0d: 2a:78:f2:b0:9b:49:57:06:23:7b:20:7b:fa:f2:d9: 11:eb:37:d8:16:f8:24:46:b9:76:ad:80:ba:12:0e: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:6C:E3:74:95:38:15:97:84:1C:6A:8D:3B:07:4D:70:31:82:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d6:5c:42:4a:7c:be:fd:d0:1d:3c:c2:69:6f:07:10:4f:32: 54:d0:c8:f8:d8:2b:e5:66:15:fd:68:1d:bd:ef:eb:3f:90:93: 38:ac:6b:45:cf:1d:44:3a:91:b3:5b:37:53:95:87:39:d7:a7: a2:64:fc:62:f0:b4:98:4c:17:36:ea:b0:7e:7f:0a:f5:5d:e0: 00:57:37:b7:c4:7e:89:56:cf:2a:eb:55:9b:96:ac:c4:d9:bb: c0:31:cf:22:b1:ee:95:c3:a2:63:4c:bd:ba:99:df:8d:27:20: b5:3c:1d:0e:b6:a6:a4:44:79:73:9a:1d:ff:f8:55:af:69:d7: e7:5e:f6:81:91:a2:03:ad:c1:38:be:89:5e:5b:14:f8:1a:24: 36:5a:dc:37:18:50:01:0c:ee:45:cf:44:9b:c9:39:21:d8:c4: 9b:ee:4c:ce:1c:2c:90:69:ca:36:30:03:e5:9c:ed:ac:d0:91: f8:f3:94:f4:5c:66:f6:1f:33:3e:a6:31:19:b3:a3:0a:2d:dd: 39:e3:1b:f5:31:ca:2a:1e:b3:85:66:89:5f:f4:bd:6e:4a:39: 2c:7c:8a:b9:1e:73:e4:d2:29:5c:c5:0f:cc:28:36:24:18:60: 2b:c1:2c:71:55:0f:99:7b:ab:b2:cd:ac:de:ad:a8:81:9c:f7: c7:09:32:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0REuKntNs9mJSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTFmNzk2NmQtYmFmNy00NDNhLWE3OGQtMTU3NWQ4MGVjNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreY3+3kbRK3HhEinXNSczMR/XU0ektk7xxE7 R0qhHiApYpjWmbiFJnXse69IEkFtNYQdRCUYazKsZgNDemzM35RakRry3k1ZAoNG /jdWdjSRIKG/xObkPuZHi5juh7Z5nnrEpZ4aaw6G6Fd/etHu+TR5CGT7TYU/6UP3 ZathaKKdTNaxF1W/GyIELOFN19p9VFAGatY2b/AVguy1vpjhBpIJGpcg3ZpbdBnK kglQWv17ykluW2gvfFnXdSsbajfFO2xPNiYFBDALpla3dmy/5EUamq2djhtcyt+C efMgZg0qePKwm0lXBiN7IHv68tkR6zfYFvgkRrl2rYC6Eg69MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA5bON0lTgVl4Qcao07B01wMYICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjUyYzc5ZWEtOGUwOS0z MzZhLWEwZTMtMDk2YTA1ODY0MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfWXEJKfL790B08wmlvBxBPMlTQyPjYK+VmFf1oHb3v6z+Qkzisa0XP HUQ6kbNbN1OVhznXp6Jk/GLwtJhMFzbqsH5/CvVd4ABXN7fEfolWzyrrVZuWrMTZ u8AxzyKx7pXDomNMvbqZ340nILU8HQ62pqREeXOaHf/4Va9p1+de9oGRogOtwTi+ iV5bFPgaJDZa3DcYUAEM7kXPRJvJOSHYxJvuTM4cLJBpyjYwA+Wc7azQkfjzlPRc ZvYfMz6mMRmzowot3TnjG/Uxyioes4VmiV/0vW5KOSx8irkec+TSKVzFD8woNiQY YCvBLHFVD5l7q7LNrN6tqIGc98cJMgs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:20:57 2025 by rpki-client