$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa File: df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa (raw, json) Hash identifier: lhIqGXTcWmHceZUeHktwGtPhIx3ujPIc4oxBh4F4zqg= Subject key identifier: 24:3C:42:F9:D3:D9:73:2E:02:C5:74:21:A5:D7:DF:3D:5B:9A:E1:F7 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AE4611EDBCC7FA1359229D580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 21928 IP address blocks: 2001:4870:150::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1e:db:cc:7f:a1:35:92:29:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ac72e021-9e68-4018-9783-9de904913d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:71:4c:fb:9a:59:37:f8:85:38:e5:64:85: eb:3d:eb:ef:9e:36:51:e2:3b:bd:37:1b:8c:f6:f1: ac:43:ea:7e:a4:61:ca:1f:33:88:19:29:99:94:b0: 0f:d0:de:86:ba:ea:89:ea:07:8a:8a:c0:a0:3f:d8: 9d:d1:ce:d3:a5:af:2f:da:36:c6:32:0c:45:d9:a6: 34:24:ac:5b:bb:31:8d:5d:04:29:5f:11:99:72:ca: 02:4d:fd:ea:1d:9c:56:56:ab:e0:d2:8d:53:68:a0: 57:be:c1:b8:d9:e4:99:fb:cc:70:45:fd:92:5e:a8: e6:a4:de:40:ab:77:ba:e5:fc:da:32:b1:3e:e5:fb: 5d:65:73:6a:46:81:09:ab:10:75:be:c5:a3:7e:aa: 8e:69:75:17:9b:8d:03:73:16:ba:57:13:46:1d:ec: ae:6d:44:eb:cc:02:6d:70:96:aa:08:0f:51:67:14: 52:c8:94:d6:f4:6d:08:3f:ee:2e:c0:54:49:a0:4e: af:50:7e:70:08:5c:45:73:d5:2c:22:9b:59:3b:c4: a2:79:3e:3e:4c:01:42:20:3a:af:fc:d6:02:86:dc: 61:d7:9d:e5:b9:7c:cb:29:11:db:07:27:64:72:7e: 3c:80:65:94:a6:c3:d1:6a:d5:56:8a:7c:8f:9e:c2: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:42:F9:D3:D9:73:2E:02:C5:74:21:A5:D7:DF:3D:5B:9A:E1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4870:150::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:11:a2:bb:e4:7f:06:12:8f:08:48:24:8c:a2:fb:6e:88:91: cb:73:ca:d1:77:e8:10:2e:af:11:74:02:7e:bd:30:24:bd:34: 54:87:4e:2d:c3:bb:0a:f2:18:8e:8f:5e:96:a5:f1:c8:97:c5: 87:94:87:e8:c6:d0:87:f7:a6:09:16:18:33:8f:84:9f:bc:a8: e8:4e:96:f7:87:70:a2:74:33:11:c9:6f:95:78:26:f4:b6:29: aa:9b:c0:02:ba:b1:f5:30:02:5b:d0:aa:da:5d:d5:80:aa:21: a0:60:10:f1:00:0b:5b:ad:4a:68:03:dc:b2:d4:7e:04:9a:2a: cb:b3:cb:36:03:7f:25:03:bb:6b:48:db:f8:35:5c:bc:d6:80: e1:c3:ac:09:26:3e:22:9c:21:74:28:9c:7e:7d:88:03:18:00: fa:b1:0a:ac:aa:ad:3d:78:f9:46:ab:77:07:12:3c:da:4a:4e: 99:2e:16:21:b6:75:4a:76:50:b0:76:f5:d8:2d:45:17:fd:b0: 0e:70:77:c3:45:47:dd:a2:d8:2d:66:5b:1f:b0:a6:66:a2:50: 83:84:90:ab:89:a5:ca:bc:f4:32:d6:d9:a5:e7:c7:20:42:ff: 7b:39:87:5e:bb:00:bf:e2:22:e2:a8:1a:c2:ab:f2:45:4f:ed: 1b:8d:30:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErkYR7bzH+hNZIp1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWM3MmUwMjEtOWU2OC00MDE4LTk3ODMtOWRlOTA0OTEzZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47JxTPuaWTf4hTjlZIXrPevvnjZR4ju9NxuM 9vGsQ+p+pGHKHzOIGSmZlLAP0N6GuuqJ6geKisCgP9id0c7Tpa8v2jbGMgxF2aY0 JKxbuzGNXQQpXxGZcsoCTf3qHZxWVqvg0o1TaKBXvsG42eSZ+8xwRf2SXqjmpN5A q3e65fzaMrE+5ftdZXNqRoEJqxB1vsWjfqqOaXUXm40Dcxa6VxNGHeyubUTrzAJt cJaqCA9RZxRSyJTW9G0IP+4uwFRJoE6vUH5wCFxFc9UsIptZO8SieT4+TAFCIDqv /NYChtxh153luXzLKRHbBydkcn48gGWUpsPRatVWinyPnsIUrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQ8QvnT2XMuAsV0IaXX3z1bmuH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGY3ZWNmZDctMzk3ZC0z MWQzLWIyMDMtOWM1ZGQyODczYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIcAFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJMRorvkfwYSjwhIJIyi+26IkctzytF36BAurxF0An69MCS9NFSH Ti3DuwryGI6PXpal8ciXxYeUh+jG0If3pgkWGDOPhJ+8qOhOlveHcKJ0MxHJb5V4 JvS2KaqbwAK6sfUwAlvQqtpd1YCqIaBgEPEAC1utSmgD3LLUfgSaKsuzyzYDfyUD u2tI2/g1XLzWgOHDrAkmPiKcIXQonH59iAMYAPqxCqyqrT14+UardwcSPNpKTpku FiG2dUp2ULB29dgtRRf9sA5wd8NFR92i2C1mWx+wpmaiUIOEkKuJpcq89DLW2aXn xyBC/3s5h167AL/iIuKoGsKr8kVP7RuNMO0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:25 2025 by rpki-client