$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa File: ce5601fe-e061-3205-80ed-165a3269ddb3.roa (raw, json) Hash identifier: kE3IN7Kfytr1H1J/cjgVx5MbwPXrgDmS/aCMjbY1MWU= Subject key identifier: A5:C8:A0:6E:A4:C0:67:4F:F2:7B:34:6F:DA:9E:C4:88:30:CF:DD:AD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A3E45A2897222AAC535120000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 989 IP address blocks: 8.8.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a2:89:72:22:aa:c5:35:12:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=2d903fa5-80f0-45ee-b4dc-59657a119f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:a2:bf:a6:fc:23:18:fc:8b:39:99:e6:7d: 93:ed:25:76:47:65:9c:bd:cc:32:ed:ee:7b:43:c5: b9:7b:2b:8a:89:1d:ae:55:93:cd:02:34:bc:99:3f: 37:19:18:43:79:a1:78:6c:02:9c:75:8b:03:cd:25: 8e:b6:ac:71:51:f7:a7:c1:af:3e:c0:f0:61:63:5c: 8b:50:cc:7e:5a:4a:5c:cb:55:6c:a3:50:64:18:8c: 1e:a2:e6:58:f3:79:23:21:0e:e5:fd:b6:60:de:37: 5a:cd:4f:0b:dc:d2:e7:35:c8:d9:17:f8:ea:6a:60: 26:42:0d:85:17:4b:d8:8a:d0:0b:67:a6:a1:f5:4a: c8:69:06:b2:23:58:5c:d8:69:80:cc:80:a0:42:6a: c5:68:5b:f1:07:41:15:9b:4b:78:05:26:b1:98:f7: 7c:91:81:01:41:fe:0d:e9:38:d6:d3:17:d0:fe:74: 32:ed:22:6b:aa:87:b3:71:85:7d:5d:67:df:49:a8: d8:bb:f0:5c:b3:5a:f4:73:b1:b6:38:94:2d:f0:22: 38:d0:5a:92:b2:b1:c3:60:84:73:a6:ff:98:87:eb: 71:88:94:37:b2:c0:69:9f:3a:23:de:d2:78:40:1d: 68:95:1f:7a:b8:a4:1f:98:8e:5f:b9:dc:eb:08:f7: f3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:A0:6E:A4:C0:67:4F:F2:7B:34:6F:DA:9E:C4:88:30:CF:DD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7b:a5:24:2a:a7:25:66:71:33:76:70:08:b5:f5:87:b2:3e: 9d:e4:3f:4c:f7:94:e3:c9:ed:7e:8a:47:d2:48:b4:0b:7e:73: a4:90:a4:6e:d5:2f:49:61:24:be:3a:e5:c0:ef:39:77:0f:fa: 18:5f:4b:47:70:e5:f9:7e:3b:8b:d6:12:0e:5c:b1:1a:1f:36: 8f:8a:da:f7:a3:b2:32:a4:76:ac:dd:55:ad:a7:fe:34:90:68: c3:1d:a2:a2:9f:cd:40:4f:f2:6c:b5:e1:b8:63:5d:81:9c:56: db:a8:f2:87:6a:65:e6:96:af:12:c1:e8:4a:55:68:e2:07:e9: 24:40:88:27:9e:44:40:7c:a1:10:c8:72:89:8f:85:2f:30:39: 2e:a1:2c:7b:be:4f:ea:b5:d6:3f:15:15:e9:ce:54:64:cb:8d: 0c:83:5d:65:d5:09:9b:2d:01:ba:3a:6f:96:ab:5c:45:98:f3: 4c:46:d9:0f:66:df:6f:9e:a6:b5:9f:64:e2:2e:5e:9a:2e:35: 17:6e:44:4b:63:a3:9b:d9:42:00:4b:d0:da:8e:ca:53:78:8f: 28:f7:87:a0:ee:49:23:43:a9:bd:5e:97:3a:a6:f1:0e:b2:b1: 4b:01:c7:3f:11:88:be:d7:ad:eb:64:e0:c1:b2:67:07:52:9e: dc:37:fe:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaKJciKqxTUSAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MmQ5MDNmYTUtODBmMC00NWVlLWI0ZGMtNTk2NTdhMTE5ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAremiv6b8Ixj8izmZ5n2T7SV2R2Wcvcwy7e57 Q8W5eyuKiR2uVZPNAjS8mT83GRhDeaF4bAKcdYsDzSWOtqxxUfenwa8+wPBhY1yL UMx+Wkpcy1Vso1BkGIweouZY83kjIQ7l/bZg3jdazU8L3NLnNcjZF/jqamAmQg2F F0vYitALZ6ah9UrIaQayI1hc2GmAzICgQmrFaFvxB0EVm0t4BSaxmPd8kYEBQf4N 6TjW0xfQ/nQy7SJrqoezcYV9XWffSajYu/Bcs1r0c7G2OJQt8CI40FqSsrHDYIRz pv+Yh+txiJQ3ssBpnzoj3tJ4QB1olR96uKQfmI5fudzrCPfzfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXIoG6kwGdP8ns0b9qexIgwz92tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2U1NjAxZmUtZTA2MS0z MjA1LTgwZWQtMTY1YTMyNjlkZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC97pSQqpyVmcTN2cAi19YeyPp3kP0z3lOPJ7X6KR9JItAt+c6SQpG7V L0lhJL465cDvOXcP+hhfS0dw5fl+O4vWEg5csRofNo+K2vejsjKkdqzdVa2n/jSQ aMMdoqKfzUBP8my14bhjXYGcVtuo8odqZeaWrxLB6EpVaOIH6SRAiCeeREB8oRDI comPhS8wOS6hLHu+T+q11j8VFenOVGTLjQyDXWXVCZstAbo6b5arXEWY80xG2Q9m 32+eprWfZOIuXpouNRduREtjo5vZQgBL0NqOylN4jyj3h6DuSSNDqb1elzqm8Q6y sUsBxz8RiL7Xretk4MGyZwdSntw3/pI= -----END CERTIFICATE-----Generated at Wed Jul 2 15:26:00 2025 by rpki-client