$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa File: dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa (raw, json) Hash identifier: TZHkdETH15zSy9k9O4is5LtDH/ycWUHa6we4EjTiR0s= Subject key identifier: 35:B9:41:75:79:87:1B:E9:FE:93:47:1A:5C:45:6E:91:9B:82:7C:2A Certificate issuer: /CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d Certificate serial: 010D0C9F4328584A549B160FC419EF33780FBA80 Authority key identifier: 74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63023 IP address blocks: 23.136.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:16:0f:c4:19:ef:33:78:0f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=3331c000-2fe9-402b-802d-7079b2320bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:7c:f2:eb:57:a5:45:5e:95:be:a6:52:89: 4c:2b:db:db:99:f3:c8:a6:96:5f:bd:35:c0:9d:e3: e6:e2:d4:5c:f4:94:0b:4f:74:09:6a:7d:02:21:b5: b4:f9:32:42:e6:b0:c3:2a:79:fb:40:27:57:9f:7b: 64:06:66:6a:e7:a4:a2:5d:1a:e4:78:e1:58:79:43: bb:97:b3:08:39:87:e8:b5:18:ea:26:fc:e6:82:d3: 31:96:f4:c7:61:d8:da:29:bb:99:36:17:6d:70:8e: 92:e4:5e:32:f6:f5:f8:5c:98:b2:4a:43:72:48:ca: a9:7e:9d:4d:c3:47:a6:f3:3e:57:ae:e3:a9:8f:35: 9b:b0:2c:fa:71:5b:c1:1d:1d:75:1f:ed:40:b8:1f: a9:9f:cb:79:2e:3e:56:97:79:29:e3:0c:7c:7f:ac: bb:d7:11:e1:8f:9e:a9:71:96:60:bf:ad:2c:79:59: cc:06:80:db:11:6d:35:ae:d4:a7:61:78:3a:68:f4: 5c:c6:53:a1:de:3e:cb:ac:65:8e:8d:20:fa:ec:78: b8:e1:43:ed:75:e8:7e:be:b6:b3:1f:28:3a:df:c1: 71:d4:74:d7:a5:f4:96:ed:4e:c0:3b:e4:ad:e7:7f: 51:75:5d:f2:3f:8b:bf:43:d0:b1:a8:9c:36:53:e0: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:41:75:79:87:1B:E9:FE:93:47:1A:5C:45:6E:91:9B:82:7C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl X509v3 Authority Key Identifier: keyid:74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c9:ae:b8:15:f4:2f:e4:e2:9b:8b:ae:ff:7a:62:a8:69:d0: 80:ab:dd:69:ce:a7:6e:8f:57:27:cc:af:d5:7f:b7:57:b4:2a: f4:dd:31:2a:b6:6f:f7:da:36:93:f7:61:32:06:1d:b2:ef:a9: 54:29:41:f8:78:1e:01:e6:4e:f0:97:a3:f6:13:35:d0:29:9b: 6c:90:78:76:63:fc:86:b0:90:be:dc:9c:12:32:8f:85:70:8c: 1b:81:27:8a:f7:fd:fc:28:e8:62:04:56:18:44:55:47:e1:48: 79:23:ac:f8:1c:4a:96:4d:54:df:2a:3f:84:4d:ae:12:eb:d4: 7b:ad:f1:cc:d0:9a:9e:ac:a9:c0:be:4c:ce:b1:05:78:c6:62: 1c:1e:5d:ba:3b:23:cf:11:18:c0:18:96:93:22:af:29:b3:5a: b5:1c:63:30:4c:a1:ba:93:02:b2:c8:1e:71:a7:1b:2d:bc:70: 4e:2a:23:46:18:08:e1:e5:13:9d:af:b4:4d:42:8c:4d:a2:48: e8:8d:76:c8:4c:4e:19:54:c2:bf:42:ae:f5:0c:dc:94:9f:f2: 80:ed:9d:47:19:55:c8:49:c6:0d:69:e9:b3:e2:f9:81:a8:3e: eb:39:9d:29:62:c0:cd:6f:69:15:93:57:7c:b8:05:26:9d:e5: 80:22:f4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxYPxBnvM3gPuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjN2YzZjYtMjhmNy00ZTM3LTk1ZjktMzg1NTgzOTA5 YjJkMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzMzMWMwMDAtMmZlOS00MDJiLTgwMmQtNzA3OWIyMzIwYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcl88utXpUVelb6mUolMK9vbmfPIppZfvTXA nePm4tRc9JQLT3QJan0CIbW0+TJC5rDDKnn7QCdXn3tkBmZq56SiXRrkeOFYeUO7 l7MIOYfotRjqJvzmgtMxlvTHYdjaKbuZNhdtcI6S5F4y9vX4XJiySkNySMqpfp1N w0em8z5XruOpjzWbsCz6cVvBHR11H+1AuB+pn8t5Lj5Wl3kp4wx8f6y71xHhj56p cZZgv60seVnMBoDbEW01rtSnYXg6aPRcxlOh3j7LrGWOjSD67Hi44UPtdeh+vraz Hyg638Fx1HTXpfSW7U7AO+St539RdV3yP4u/Q9CxqJw2U+Bf9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW5QXV5hxvp/pNHGlxFbpGbgnwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWM3 ZjNmNi0yOGY3LTRlMzctOTVmOS0zODU1ODM5MDliMmQvZGJjZDYzM2YtZDg2YS0z YzQ0LWJlYzEtMWI4MTI0M2MxYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVjN2YzZjYtMjhmNy00ZTM3LTk1 ZjktMzg1NTgzOTA5YjJkL2I1YzdmM2Y2LTI4ZjctNGUzNy05NWY5LTM4NTU4Mzkw OWIyZC5jcmwwHwYDVR0jBBgwFoAUdFyCGlInkGHgZFgsImEvaSddMAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWM3ZjNmNi0yOGY3LTRlMzctOTVmOS0zODU1 ODM5MDliMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7JrrgV9C/k4puLrv96Yqhp0ICr3WnOp26PVyfMr9V/t1e0KvTdMSq2 b/faNpP3YTIGHbLvqVQpQfh4HgHmTvCXo/YTNdApm2yQeHZj/IawkL7cnBIyj4Vw jBuBJ4r3/fwo6GIEVhhEVUfhSHkjrPgcSpZNVN8qP4RNrhLr1Hut8czQmp6sqcC+ TM6xBXjGYhweXbo7I88RGMAYlpMirymzWrUcYzBMobqTArLIHnGnGy28cE4qI0YY COHlE52vtE1CjE2iSOiNdshMThlUwr9CrvUM3JSf8oDtnUcZVchJxg1p6bPi+YGo Pus5nSliwM1vaRWTV3y4BSad5YAi9KI= -----END CERTIFICATE-----Generated at Sun Jun 29 07:46:12 2025 by rpki-client