$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa File: 7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa (raw, json) Hash identifier: xYaBTePxVvxj2baymt6dwkhorELIDlTcOsb7K1Z1e1k= Subject key identifier: 51:75:26:97:7F:90:E6:6C:0B:F7:2A:A6:BC:06:AF:CC:89:7F:64:01 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849D5185842E5AE9E28EA4ED280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa Signing time: Mon 12 May 2025 20:50:03 +0000 ROA not before: Mon 12 May 2025 20:50:03 +0000 ROA not after: Sun 10 Aug 2025 20:50:03 +0000 asID: 396982 IP address blocks: 8.34.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:18:58:42:e5:ae:9e:28:ea:4e:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 12 20:50:03 2025 GMT Not After : Aug 10 20:50:03 2025 GMT Subject: CN=c5ce5713-b54a-4af7-b577-b3d897647220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:02:21:77:e5:94:65:e9:7f:b6:de:69:e8: 50:84:a1:63:61:a3:de:0c:87:78:bd:e0:e5:ff:52: 59:ad:4b:e2:b2:56:07:c5:78:45:ff:88:16:92:88: 3a:92:13:c1:2e:e4:af:61:c7:b3:29:1a:86:e6:d0: 0e:e0:7d:e9:f3:16:0e:ad:ab:24:82:dd:8f:73:e6: 6d:f5:02:3f:c2:80:65:be:bd:a0:2f:3e:94:45:a1: 4d:2b:0b:f3:8e:7a:db:01:0e:dc:93:3a:51:c6:bd: eb:00:05:39:55:31:82:d6:ee:4c:7c:a0:95:59:1b: 07:0a:7a:ab:a6:c7:38:9b:8b:ee:f5:3b:24:e6:7f: 6f:ce:0f:f1:7c:74:d5:9d:a1:61:44:ea:fc:c0:6e: 9c:99:c8:43:cb:e7:49:00:78:e4:49:4a:6a:03:dd: 5a:16:dc:1c:d4:54:00:f8:bc:10:1d:8d:9d:de:59: c6:f0:67:be:b1:74:c7:ab:7e:d7:aa:8c:a5:c8:e9: d3:e7:ea:31:d3:b5:5b:dd:60:26:5c:c5:9a:59:8a: 0c:0b:98:a3:a2:e7:c1:66:75:70:31:a7:73:59:51: 67:a5:55:40:c7:32:17:3d:d4:0f:ff:6e:bb:ef:64: 27:39:10:97:55:f0:32:ce:d5:e3:09:9b:b4:e3:99: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:26:97:7F:90:E6:6C:0B:F7:2A:A6:BC:06:AF:CC:89:7F:64:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.34.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:03:93:dc:61:ba:1b:2f:3c:93:13:52:d9:eb:0f:94:18:00: 1a:fa:84:8d:d9:50:34:6a:00:09:60:58:96:3c:c9:8f:ae:80: ed:5d:69:76:0a:06:f5:49:f8:20:b6:e6:5b:84:f7:c0:d7:7d: 3c:69:e3:82:12:ee:a8:99:21:2a:b0:26:78:82:03:00:ef:e1: 51:77:61:dd:70:0c:f3:a1:50:01:ae:29:0e:9a:d9:b0:45:b8: fe:d9:5f:54:5f:b9:1c:c1:c2:2b:35:0a:b1:22:fc:b5:4e:23: 8e:6d:14:c5:60:ed:cf:dc:06:40:27:0e:03:d1:60:08:c8:ad: 19:40:17:9b:de:6d:be:52:2e:4f:c1:a2:aa:ee:97:cb:ba:96: fb:db:8e:78:04:05:18:b3:bc:95:45:11:3d:4c:b1:56:1d:e5: e8:0d:ea:50:26:7e:ff:4d:22:e9:6b:94:61:bd:e9:47:16:dc: 25:4b:6e:a4:be:31:fc:67:06:79:3f:6d:4d:a5:b2:2b:85:1b: 7f:4c:57:fd:90:3c:3f:2c:27:17:86:82:86:2c:bb:6d:01:d0: 3e:2b:cc:8b:0f:47:19:c3:6f:ec:52:22:f7:3b:a6:72:8a:20: bd:31:b2:34:80:48:76:e2:43:ad:6a:d5:75:e7:68:68:24:2f: bd:41:56:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVGFhC5a6eKOpO0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUxMjIwNTAwM1oXDTI1MDgxMDIwNTAwM1owLzEtMCsGA1UEAxMk YzVjZTU3MTMtYjU0YS00YWY3LWI1NzctYjNkODk3NjQ3MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOcCIXfllGXpf7beaehQhKFjYaPeDId4veDl /1JZrUvislYHxXhF/4gWkog6khPBLuSvYcezKRqG5tAO4H3p8xYOraskgt2Pc+Zt 9QI/woBlvr2gLz6URaFNKwvzjnrbAQ7ckzpRxr3rAAU5VTGC1u5MfKCVWRsHCnqr psc4m4vu9Tsk5n9vzg/xfHTVnaFhROr8wG6cmchDy+dJAHjkSUpqA91aFtwc1FQA +LwQHY2d3lnG8Ge+sXTHq37XqoylyOnT5+ox07Vb3WAmXMWaWYoMC5ijoufBZnVw MadzWVFnpVVAxzIXPdQP/26772QnORCXVfAyztXjCZu045lgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF1Jpd/kOZsC/cqprwGr8yJf2QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2Y5Yjk4YzktZmUyOS0z Njg2LWIzMjYtZmNiMTlkZTJiZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkDk9xhuhsvPJMTUtnrD5QYABr6hI3ZUDRqAAlgWJY8yY+ugO1daXYK BvVJ+CC25luE98DXfTxp44IS7qiZISqwJniCAwDv4VF3Yd1wDPOhUAGuKQ6a2bBF uP7ZX1RfuRzBwis1CrEi/LVOI45tFMVg7c/cBkAnDgPRYAjIrRlAF5vebb5SLk/B oqrul8u6lvvbjngEBRizvJVFET1MsVYd5egN6lAmfv9NIulrlGG96UcW3CVLbqS+ MfxnBnk/bU2lsiuFG39MV/2QPD8sJxeGgoYsu20B0D4rzIsPRxnDb+xSIvc7pnKK IL0xsjSASHbiQ61q1XXnaGgkL71BVnM= -----END CERTIFICATE-----Generated at Wed Jul 2 16:27:32 2025 by rpki-client