$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa File: 7a78821a-8f23-3da9-bc7f-917597af54ea.roa (raw, json) Hash identifier: kZH+zGsIOZSAJXMRctLIShhxuZXXcCfI0rbqH0UcpxQ= Subject key identifier: EB:66:4A:C7:97:7B:25:56:D3:73:43:8A:57:62:04:92:E0:7C:E0:7E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A374ACAD0BF4F3F53C0952440 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 22898 IP address blocks: 8.40.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ca:d0:bf:4f:3f:53:c0:95:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=58e991f9-bc36-456d-9214-ccc7fc21aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:9c:04:f8:e3:06:2a:9d:09:da:fe:f3:99: de:57:c8:ec:18:c3:cf:0e:3c:c4:cd:26:20:45:58: e4:f8:66:13:8d:81:67:52:ab:ec:55:07:70:dc:35: 3e:4f:58:a8:c8:e7:39:be:42:25:08:ca:12:ba:bd: 06:f1:96:c2:a3:13:6f:e6:71:41:fa:55:43:ee:9c: b7:c1:a0:20:00:17:5a:bc:67:c1:32:53:e0:b0:07: 5b:0f:11:a3:4b:38:4e:2b:89:55:97:53:e9:b9:ab: 96:b7:91:91:97:cf:a8:39:fa:ef:53:2d:c4:84:11: d4:69:2a:d2:e8:72:cf:fd:e0:ab:22:21:4e:25:11: b1:97:e3:cc:af:15:48:aa:97:06:01:e3:4c:a7:43: 7b:8a:c6:4a:3a:5f:2a:68:10:cb:e9:8a:49:70:bb: ca:5c:24:fe:cf:dd:8d:15:ca:df:bb:c7:a7:57:dc: 0b:01:78:2d:ce:d6:b9:f8:d8:74:a5:53:ee:05:a8: bc:cd:3f:5c:1f:36:a7:91:25:a7:de:40:a7:ab:50: 62:91:cf:9f:1a:e3:62:3c:a1:cf:74:f1:33:4a:6b: b9:e5:70:5b:c4:72:30:c0:82:fb:40:c3:d8:c5:59: 2f:69:47:f4:59:75:db:b6:b1:ad:ed:ac:b0:b4:dd: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:66:4A:C7:97:7B:25:56:D3:73:43:8A:57:62:04:92:E0:7C:E0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.40.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:02:08:60:c1:0d:5a:55:7e:d6:a6:55:9c:14:ea:ef:97:ba: 27:53:57:a9:75:cf:86:70:59:8d:90:b9:73:7c:a8:e1:54:ba: eb:dc:07:af:11:91:4c:6c:f5:19:c7:5c:fe:2e:5f:3a:9a:79: c6:e6:d7:a9:24:d8:88:1f:c5:3a:2b:c0:cd:cd:bf:49:8a:90: 0c:37:98:f8:db:37:cd:69:eb:71:55:c6:5c:ab:64:da:07:75: c7:f3:94:2f:ec:a2:12:8c:e1:aa:ea:4f:8f:ff:8d:90:e1:76: a7:21:94:6e:44:52:8c:1f:da:ed:79:a1:b9:2e:1c:7a:dd:73: bf:37:bf:73:d6:d7:e9:99:ad:09:4f:ba:a3:4e:d1:0b:71:34: e0:eb:39:d9:43:0a:85:29:03:42:18:82:70:45:81:61:ef:59: 10:df:e4:24:3e:37:db:2b:5f:5e:04:1f:e8:ff:d5:fe:7f:0f: 69:26:40:d7:a7:9b:4f:64:3a:76:dc:8a:12:61:ee:e4:88:d9: 2e:6d:c3:8e:2d:28:ae:44:5a:f3:e2:8c:03:5b:81:55:44:5c: 34:a2:86:84:ec:fe:18:d6:90:24:1f:c5:e7:9d:aa:df:bc:b6: dc:11:a9:a8:23:bf:56:e6:96:64:5f:b5:ec:83:6d:f4:fe:92: 3d:cd:51:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsrQv08/U8CVJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NThlOTkxZjktYmMzNi00NTZkLTkyMTQtY2NjN2ZjMjFhYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIycBPjjBiqdCdr+85neV8jsGMPPDjzEzSYg RVjk+GYTjYFnUqvsVQdw3DU+T1ioyOc5vkIlCMoSur0G8ZbCoxNv5nFB+lVD7py3 waAgABdavGfBMlPgsAdbDxGjSzhOK4lVl1PpuauWt5GRl8+oOfrvUy3EhBHUaSrS 6HLP/eCrIiFOJRGxl+PMrxVIqpcGAeNMp0N7isZKOl8qaBDL6YpJcLvKXCT+z92N Fcrfu8enV9wLAXgtzta5+Nh0pVPuBai8zT9cHzankSWn3kCnq1Bikc+fGuNiPKHP dPEzSmu55XBbxHIwwIL7QMPYxVkvaUf0WXXbtrGt7aywtN33JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtmSseXeyVW03NDildiBJLgfOB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2E3ODgyMWEtOGYyMy0z ZGE5LWJjN2YtOTE3NTk3YWY1NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcCCGDBDVpVftamVZwU6u+XuidTV6l1z4ZwWY2QuXN8qOFUuuvcB68R kUxs9RnHXP4uXzqaecbm16kk2IgfxTorwM3Nv0mKkAw3mPjbN81p63FVxlyrZNoH dcfzlC/sohKM4arqT4//jZDhdqchlG5EUowf2u15obkuHHrdc783v3PW1+mZrQlP uqNO0QtxNODrOdlDCoUpA0IYgnBFgWHvWRDf5CQ+N9srX14EH+j/1f5/D2kmQNen m09kOnbcihJh7uSI2S5tw44tKK5EWvPijANbgVVEXDSihoTs/hjWkCQfxeedqt+8 ttwRqagjv1bmlmRfteyDbfT+kj3NUTg= -----END CERTIFICATE-----Generated at Tue Jul 1 02:31:48 2025 by rpki-client