$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa File: 252c79ea-8e09-336a-a0e3-096a0586430b.roa (raw, json) Hash identifier: QEADY06/PsmSmx6+5j6x53f+qADYcjr1Je8C9reg1eg= Subject key identifier: 73:62:39:01:34:78:DF:4D:8D:D8:12:F1:59:87:33:18:BA:C0:01:82 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849F715132EA4D1E08CA15F8780 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 31898 IP address blocks: 23.239.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:13:2e:a4:d1:e0:8c:a1:5f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=197ada36-e230-4d45-acfe-e9fdac8054bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:d2:7c:ff:d0:b5:58:fe:a2:52:84:db:aa: 6b:14:7e:94:ff:c3:7b:ad:51:df:6b:24:e6:5b:f5: 77:70:df:06:2e:69:3b:c5:6d:13:4c:c5:ed:bd:6f: 18:51:53:71:85:c7:87:f6:6a:1c:af:c0:8d:07:1d: 99:fe:81:66:70:48:ce:ab:c4:b5:87:3e:01:16:36: 32:ab:2d:ed:a3:2c:5f:c5:b4:0f:2e:8d:3d:21:c3: bb:f5:3c:79:aa:c3:57:25:43:57:fb:cd:dc:c9:64: 16:7c:d8:3e:13:e8:ab:d3:c1:dc:1c:f7:68:5f:5d: 08:c6:47:10:ef:bf:9e:82:3e:00:c3:e4:57:d2:6e: 6d:d3:69:43:bd:4a:e6:7d:f9:f8:1b:eb:0f:ac:c8: 9c:42:eb:3a:70:42:f8:48:f5:cf:36:71:94:34:e2: 18:1f:ed:37:01:9a:14:5b:ab:89:c1:d8:ea:5a:da: 89:b6:9c:1f:b7:88:18:e7:3a:45:33:2f:f8:6e:cc: 34:27:5c:b1:72:32:90:0c:d2:7a:69:b2:36:27:a3: 3a:96:3b:00:0b:9a:55:58:08:f4:5c:2d:d5:1b:a5: e2:82:64:65:9b:8b:c8:5f:fe:c4:71:f8:64:8e:f8: 1f:bb:6a:c2:73:6a:b6:b9:0d:9c:a9:e4:16:d3:b9: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:62:39:01:34:78:DF:4D:8D:D8:12:F1:59:87:33:18:BA:C0:01:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:ca:92:9e:af:0e:cf:1c:2c:ab:91:a8:4d:7d:fe:b9:01:2e: d6:30:fc:60:50:11:0a:e1:23:6c:a7:31:35:94:a6:3d:07:29: 1d:fc:8b:bf:a3:35:13:a2:bb:a8:0e:a9:00:bb:dc:9f:92:23: 90:09:35:1d:2f:e1:1e:9a:f4:d5:f2:be:a1:96:81:17:02:c4: 55:fb:33:20:21:bd:53:e3:4b:1a:61:fb:5d:8c:86:ee:df:1e: a9:ac:99:14:a8:98:80:40:91:97:b0:35:d8:2b:88:38:b7:8f: d7:2c:e3:ff:2c:1b:c7:19:2e:bf:00:96:30:a2:33:96:07:13: ff:fb:ae:cc:24:72:b6:be:68:f1:eb:16:38:81:91:4c:99:cc: 2c:3a:62:ea:7b:87:f9:7a:cf:53:74:00:cb:b8:1a:49:67:0a: 87:2c:16:17:c0:95:ad:fe:46:f0:4e:8f:4b:7e:a7:74:36:9e: 71:46:7b:61:04:f3:dc:e4:6a:f3:67:99:da:8f:9e:1b:f1:21: ae:36:3d:4d:bb:ea:b8:2b:7f:b3:09:42:3d:29:d4:34:6a:17: cd:1b:33:60:70:52:8e:b8:ab:6c:48:0d:dd:72:3c:0a:26:88: 11:2a:82:da:12:c3:b8:ee:5b:17:eb:ae:b5:5f:c1:a7:64:30: 84:aa:0a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRMupNHgjKFfh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTk3YWRhMzYtZTIzMC00ZDQ1LWFjZmUtZTlmZGFjODA1NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XzSfP/QtVj+olKE26prFH6U/8N7rVHfayTm W/V3cN8GLmk7xW0TTMXtvW8YUVNxhceH9mocr8CNBx2Z/oFmcEjOq8S1hz4BFjYy qy3toyxfxbQPLo09IcO79Tx5qsNXJUNX+83cyWQWfNg+E+ir08HcHPdoX10IxkcQ 77+egj4Aw+RX0m5t02lDvUrmffn4G+sPrMicQus6cEL4SPXPNnGUNOIYH+03AZoU W6uJwdjqWtqJtpwft4gY5zpFMy/4bsw0J1yxcjKQDNJ6abI2J6M6ljsAC5pVWAj0 XC3VG6XigmRlm4vIX/7Ecfhkjvgfu2rCc2q2uQ2cqeQW07kGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNiOQE0eN9NjdgS8VmHMxi6wAGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjUyYzc5ZWEtOGUwOS0z MzZhLWEwZTMtMDk2YTA1ODY0MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANnKkp6vDs8cLKuRqE19/rkBLtYw/GBQEQrhI2ynMTWUpj0HKR38i7+j NROiu6gOqQC73J+SI5AJNR0v4R6a9NXyvqGWgRcCxFX7MyAhvVPjSxph+12Mhu7f HqmsmRSomIBAkZewNdgriDi3j9cs4/8sG8cZLr8AljCiM5YHE//7rswkcra+aPHr FjiBkUyZzCw6Yup7h/l6z1N0AMu4GklnCocsFhfAla3+RvBOj0t+p3Q2nnFGe2EE 89zkavNnmdqPnhvxIa42PU276rgrf7MJQj0p1DRqF80bM2BwUo64q2xIDd1yPAom iBEqgtoSw7juWxfrrrVfwadkMISqCnQ= -----END CERTIFICATE-----Generated at Tue Jul 1 12:32:03 2025 by rpki-client