$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa File: 273db7a5-9c03-359a-a2e5-4a4b553e8662.roa (raw, json) Hash identifier: u7tkzHQocJ+GTE/xGYuYTS8jlemCyu/4BeXBNG+jjHs= Subject key identifier: 54:0B:F8:49:0E:15:78:BA:8C:A5:2A:D3:43:81:DF:48:A0:68:F5:00 Certificate issuer: /CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951 Certificate serial: 010D0C9F4328584A41104C5505E4598552716480 Authority key identifier: A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 19303 IP address blocks: 23.141.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4c:55:05:e4:59:85:52:71:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=9607c364-6296-4e56-bb36-3ceb80fc80f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:89:a3:5f:d0:ba:d5:f5:f4:7e:03:88:13: 1e:15:b8:3c:97:8e:97:7a:80:b7:73:0d:67:a9:5d: ab:66:00:58:8d:8b:a2:3f:2b:4d:f5:c8:33:2e:bb: b4:2e:ac:5e:4f:fa:5f:50:44:5f:8f:6d:b7:f2:a2: a2:33:66:65:64:11:63:30:94:c1:6e:aa:d8:5f:ca: 09:a5:4e:6e:73:27:5e:44:b1:7e:b9:13:98:49:f4: 7f:5b:9c:61:d6:7a:57:c5:e2:62:45:ba:28:ca:1b: 36:12:fd:ca:45:a8:08:7e:cb:57:0e:46:8f:e2:c7: 59:81:e7:c9:5d:8a:1c:ea:00:1c:54:12:61:fb:02: 6c:71:8a:04:15:68:c2:bc:79:c5:e1:fe:ea:af:94: 4a:f6:82:27:36:de:0d:1c:d1:66:d2:eb:33:16:1a: d9:43:fb:fc:d7:a5:72:cf:23:ef:73:a3:93:fc:85: 48:db:72:8e:24:13:c5:d4:9a:ad:98:08:89:1b:0b: 65:3c:1b:90:80:7d:57:4b:3d:c6:8e:5f:59:a6:ae: ca:a1:7a:b1:95:ad:c5:f0:1d:72:43:4d:46:5a:cd: 16:67:6d:02:c6:33:82:6f:e0:e3:6a:0c:57:a7:16: b0:c8:8c:2f:21:7f:bd:2f:c4:26:c2:1d:dc:7e:1c: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:F8:49:0E:15:78:BA:8C:A5:2A:D3:43:81:DF:48:A0:68:F5:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/273db7a5-9c03-359a-a2e5-4a4b553e8662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl X509v3 Authority Key Identifier: keyid:A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer sbgp-ipAddrBlock: critical IPv4: 23.141.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:03:0c:4e:17:38:0d:a4:90:8e:f7:d1:a2:64:b5:82:ff:bf: 66:bd:78:58:35:7d:03:83:65:c2:70:2e:98:37:4c:43:41:88: 3c:c0:a6:ac:b3:8c:24:65:f5:7f:f3:9b:24:26:c7:f7:5b:00: 0f:d0:cb:af:51:47:11:fe:da:02:f9:1f:95:48:80:be:e3:b4: 9f:b8:a0:c0:8b:16:36:67:34:82:cc:63:f6:18:a0:20:c5:f3: d2:38:5c:f9:92:27:0c:fd:3a:3a:4e:b8:a7:f0:06:f3:7e:01: aa:37:d8:e9:58:4a:3d:e5:72:18:4f:c0:2f:bb:5f:00:b8:82: 02:74:35:b9:8a:21:d0:97:5e:85:d7:62:64:1e:62:10:33:d0: 87:0c:89:ad:4e:05:8a:2f:69:66:d5:8e:10:8e:8e:06:29:05: 73:77:ec:90:5b:7a:44:1e:33:3d:86:d1:65:04:cd:96:55:6f: e6:11:36:bb:a6:42:ab:ca:38:12:f3:e4:79:d7:d7:cf:ed:fb: 39:8b:5a:11:30:97:b3:aa:e9:02:68:aa:cc:4c:1b:47:e6:2f: 60:e3:63:d4:78:d3:3c:6b:0e:8f:96:70:10:cd:7b:a9:08:38: 96:0d:12:55:77:a9:f7:bd:d6:db:43:9c:6a:1c:82:4d:f1:4e: a2:08:88:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEExVBeRZhVJxZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlYmQ5NGUtODY4Ni00ZGEwLTg1ZDktM2QzOTM1Y2Mz OTUxMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk OTYwN2MzNjQtNjI5Ni00ZTU2LWJiMzYtM2NlYjgwZmM4MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI6Jo1/QutX19H4DiBMeFbg8l46XeoC3cw1n qV2rZgBYjYuiPytN9cgzLru0LqxeT/pfUERfj2238qKiM2ZlZBFjMJTBbqrYX8oJ pU5ucydeRLF+uROYSfR/W5xh1npXxeJiRbooyhs2Ev3KRagIfstXDkaP4sdZgefJ XYoc6gAcVBJh+wJscYoEFWjCvHnF4f7qr5RK9oInNt4NHNFm0uszFhrZQ/v816Vy zyPvc6OT/IVI23KOJBPF1JqtmAiJGwtlPBuQgH1XSz3Gjl9Zpq7KoXqxla3F8B1y Q01GWs0WZ20CxjOCb+DjagxXpxawyIwvIX+9L8Qmwh3cfhypjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQL+EkOFXi6jKUq00OB30igaPUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMWVi ZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5MzVjYzM5NTEvMjczZGI3YTUtOWMwMy0z NTlhLWEyZTUtNGE0YjU1M2U4NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTFlYmQ5NGUtODY4Ni00ZGEwLTg1 ZDktM2QzOTM1Y2MzOTUxL2ExZWJkOTRlLTg2ODYtNGRhMC04NWQ5LTNkMzkzNWNj Mzk1MS5jcmwwHwYDVR0jBBgwFoAUpH7kuZcgOuz0kSkXcjDt5lC5rpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMWViZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5 MzVjYzM5NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYDDE4XOA2kkI730aJktYL/v2a9eFg1fQODZcJwLpg3TENBiDzApqyz jCRl9X/zmyQmx/dbAA/Qy69RRxH+2gL5H5VIgL7jtJ+4oMCLFjZnNILMY/YYoCDF 89I4XPmSJwz9OjpOuKfwBvN+Aao32OlYSj3lchhPwC+7XwC4ggJ0NbmKIdCXXoXX YmQeYhAz0IcMia1OBYovaWbVjhCOjgYpBXN37JBbekQeMz2G0WUEzZZVb+YRNrum QqvKOBLz5HnX18/t+zmLWhEwl7Oq6QJoqsxMG0fmL2DjY9R40zxrDo+WcBDNe6kI OJYNElV3qfe91ttDnGocgk3xTqIIiKs= -----END CERTIFICATE-----Generated at Tue Jul 1 15:59:34 2025 by rpki-client