$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa File: 35c067f0-3efd-3363-93e0-a8537ed06e64.roa (raw, json) Hash identifier: ycVtFXk0SoM++BbWjj5cdwR6PW5En0IGN9zeHMoNr2M= Subject key identifier: C0:B5:32:7E:09:03:4B:7C:70:33:9B:6A:1F:B3:73:20:B9:69:FB:2A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A3E4595EE56053A4460914080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 989 IP address blocks: 8.18.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:95:ee:56:05:3a:44:60:91:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=284e5634-9564-40ed-8f05-00088cc1cc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:7e:b7:c9:d9:2d:ca:ac:e1:6c:54:d5:fe: 24:12:2e:ef:a3:7d:85:65:ef:93:d0:eb:a7:fd:96: e9:0e:86:36:05:69:29:0c:3d:4e:63:b3:da:24:ec: 35:a1:7d:5a:6d:f4:d8:d5:d5:16:97:47:68:86:3a: ef:a4:48:15:f1:3e:6d:2f:55:e2:be:e6:71:98:ae: 01:c5:60:8c:16:6f:06:75:dc:31:7d:f8:75:55:dc: d4:9c:b6:7d:78:3b:a5:bb:f6:43:38:64:9e:58:d8: a8:50:8f:43:97:f5:d0:17:07:72:04:bf:7d:0a:3d: 5a:c0:d1:2a:77:3e:84:02:a5:77:c0:da:da:5c:1f: 7d:5d:7f:51:da:7b:9f:fa:04:cd:5b:cc:84:de:8f: e3:4a:30:c8:78:6b:e2:8e:c5:0c:cc:e3:34:64:10: 02:29:68:3d:f9:dd:07:2f:31:d2:f3:23:00:b4:5c: 98:5b:cb:5d:d4:6d:8b:d4:a3:4f:7a:6a:c8:79:39: e0:5f:0b:b3:af:75:42:a9:8c:4f:64:bc:f8:1b:c0: 61:74:12:4d:82:02:e2:ab:9c:ef:2c:79:3e:d9:6f: 3a:92:ec:1b:c5:a2:13:c7:1a:fb:44:5f:20:0d:65: 57:26:b1:54:da:22:4b:f8:c0:43:5b:1e:26:87:01: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B5:32:7E:09:03:4B:7C:70:33:9B:6A:1F:B3:73:20:B9:69:FB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.18.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bf:a7:a3:ca:c9:b3:90:04:19:a2:a6:f6:6e:46:6e:37:c7: 16:6f:53:32:db:95:ce:6c:76:8e:74:38:10:3f:09:c7:55:6d: 95:a2:75:b4:1d:43:3d:6b:1d:2a:9e:64:90:cd:79:ff:78:f0: a6:be:b3:fc:81:2d:2a:dd:db:8d:31:49:b7:e4:02:4a:e8:96: c3:c7:d5:18:77:cf:48:9b:8e:09:e4:9a:d4:d2:d9:47:6e:5f: 12:78:5a:b4:b2:45:0f:90:65:5b:d0:5a:c9:38:dd:05:8d:10: 32:7f:a4:26:0f:18:d8:e6:d0:d3:2f:e4:c5:ed:9e:9c:d6:a0: a3:21:81:2d:92:4f:2b:46:37:a7:30:c4:1a:ea:06:90:4f:b3: 03:4e:67:bd:cc:2a:a4:f6:79:85:e8:7e:03:b8:05:26:83:cd: 90:cd:18:72:e0:55:c2:50:9c:f3:0e:3e:fa:a8:5f:3c:c0:23: 18:9f:ea:b6:39:ee:5f:ca:f6:8b:1f:1f:94:24:05:0d:0e:76: 91:9b:34:88:d2:93:ae:c2:6e:ed:1d:6f:bb:b7:7e:3e:11:b2: 52:7e:91:63:43:59:5e:a7:e7:35:20:40:c2:dd:f5:d1:e7:97: 90:60:3c:73:56:b4:7b:20:d4:24:4c:20:60:37:c2:c7:99:07: cd:1a:25:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZXuVgU6RGCRQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk Mjg0ZTU2MzQtOTU2NC00MGVkLThmMDUtMDAwODhjYzFjYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2h+t8nZLcqs4WxU1f4kEi7vo32FZe+T0Oun /ZbpDoY2BWkpDD1OY7PaJOw1oX1abfTY1dUWl0dohjrvpEgV8T5tL1XivuZxmK4B xWCMFm8Gddwxffh1VdzUnLZ9eDulu/ZDOGSeWNioUI9Dl/XQFwdyBL99Cj1awNEq dz6EAqV3wNraXB99XX9R2nuf+gTNW8yE3o/jSjDIeGvijsUMzOM0ZBACKWg9+d0H LzHS8yMAtFyYW8td1G2L1KNPemrIeTngXwuzr3VCqYxPZLz4G8BhdBJNggLiq5zv LHk+2W86kuwbxaITxxr7RF8gDWVXJrFU2iJL+MBDWx4mhwF4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC1Mn4JA0t8cDObah+zcyC5afsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzVjMDY3ZjAtM2VmZC0z MzYzLTkzZTAtYTg1MzdlZDA2ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO/p6PKybOQBBmipvZuRm43xxZvUzLblc5sdo50OBA/CcdVbZWidbQd Qz1rHSqeZJDNef948Ka+s/yBLSrd240xSbfkAkrolsPH1Rh3z0ibjgnkmtTS2Udu XxJ4WrSyRQ+QZVvQWsk43QWNEDJ/pCYPGNjm0NMv5MXtnpzWoKMhgS2STytGN6cw xBrqBpBPswNOZ73MKqT2eYXofgO4BSaDzZDNGHLgVcJQnPMOPvqoXzzAIxif6rY5 7l/K9osfH5QkBQ0OdpGbNIjSk67Cbu0db7u3fj4RslJ+kWNDWV6n5zUgQMLd9dHn l5BgPHNWtHsg1CRMIGA3wseZB80aJXU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:19:27 2025 by rpki-client