$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa File: f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa (raw, json) Hash identifier: P6XjaIUxQeKADVGQkuwZn9t7jsNThFPY1WQJDFIWHXM= Subject key identifier: 6D:58:18:81:E4:7B:FE:BD:F6:BD:74:D2:BA:41:83:FE:E9:C3:D5:D9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A4970688C1B7BEFE9C9BF1D00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 19905 IP address blocks: 207.218.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:68:8c:1b:7b:ef:e9:c9:bf:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=ab4cf4a3-f505-43e9-a88d-05fa9b4401be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:aa:a4:6e:cd:8a:79:a8:b6:c7:db:bf:d2:ae: a8:76:ed:a4:24:e1:d6:98:d3:b7:ce:1a:13:c8:ab: 8c:cc:73:b1:e3:58:c8:16:0e:c5:29:b2:0d:7b:33: da:0f:8d:99:08:df:06:0d:39:b4:70:e4:17:5e:88: bb:bf:19:04:af:ac:9d:3b:bd:85:4d:21:53:ad:1d: 5b:97:27:be:73:89:57:87:3b:ed:b4:66:40:30:f9: 0c:aa:a7:85:6b:96:40:5b:37:ae:98:3b:d4:25:e2: 33:6d:85:18:47:7c:82:57:8b:67:39:91:08:fe:65: fa:32:36:f0:b2:13:a2:9a:20:a0:c8:65:2c:78:39: 29:6d:37:b0:64:34:b7:c6:a9:a8:ef:83:9c:68:30: 7d:6d:93:d6:f3:23:6b:e6:d2:a9:79:d4:80:6c:9c: 1e:bb:b3:9a:98:00:c1:cd:7b:9b:0e:b1:7b:70:f3: 5a:19:29:b4:c7:7a:02:7a:f2:dd:58:6b:7b:3d:98: 6e:9e:05:7c:81:af:ae:f1:9a:d1:4e:68:23:21:95: fd:49:b2:3c:b2:d5:73:72:77:ce:aa:18:5b:8e:73: 4c:33:09:81:77:49:be:6c:0e:a8:14:de:1c:b4:85: 8d:04:84:2d:b2:c4:83:ad:2d:4a:95:ef:74:61:4f: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:58:18:81:E4:7B:FE:BD:F6:BD:74:D2:BA:41:83:FE:E9:C3:D5:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.218.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f3:c9:6a:c8:4e:33:ce:2a:08:33:d0:b6:9b:a0:55:c1:4a: 7e:b8:1b:3b:a0:0b:6a:cf:03:e0:6c:d2:29:71:5e:3a:e2:17: 52:6c:2f:3d:07:a6:64:d4:a7:92:9c:b1:ee:1d:65:f9:7d:b9: ec:7f:28:fd:b3:31:a8:00:14:1e:3d:fb:a0:06:09:3a:2b:76: ab:47:3c:19:bd:2b:f0:f9:37:d0:7d:38:65:1b:bb:f3:cf:3f: 87:1b:70:9f:cf:8f:46:ea:57:55:d9:95:d5:96:eb:6d:40:0d: 17:0a:00:69:7f:8b:49:4d:a7:4f:00:09:c3:1c:81:cb:91:ed: 43:2e:d8:fe:a6:75:30:13:81:f1:e3:10:b6:47:64:db:81:df: a8:9b:62:f9:11:33:05:45:80:55:27:92:42:8f:72:0c:1e:1b: 91:ef:8a:4a:53:6a:0f:ba:a6:52:ae:5e:a1:0a:c1:de:9f:32: 1b:94:b0:27:18:32:fa:d0:60:dc:f3:1a:1f:41:ac:1e:b4:9b: 2f:04:21:46:8e:d9:93:8f:06:16:bf:73:3e:45:4f:e6:90:a2: 50:d5:ea:c5:0f:22:50:a6:01:50:d7:fa:b4:2a:6a:a6:49:40: 08:ec:36:e1:16:db:02:6e:ec:8b:20:57:f5:cb:ca:52:71:6c: 31:95:06:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGiMG3vv6cm/HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YWI0Y2Y0YTMtZjUwNS00M2U5LWE4OGQtMDVmYTliNDQwMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6qkbs2Keai2x9u/0q6odu2kJOHWmNO3zhoT yKuMzHOx41jIFg7FKbINezPaD42ZCN8GDTm0cOQXXoi7vxkEr6ydO72FTSFTrR1b lye+c4lXhzvttGZAMPkMqqeFa5ZAWzeumDvUJeIzbYUYR3yCV4tnOZEI/mX6Mjbw shOimiCgyGUseDkpbTewZDS3xqmo74OcaDB9bZPW8yNr5tKpedSAbJweu7OamADB zXubDrF7cPNaGSm0x3oCevLdWGt7PZhungV8ga+u8ZrRTmgjIZX9SbI8stVzcnfO qhhbjnNMMwmBd0m+bA6oFN4ctIWNBIQtssSDrS1Kle90YU9FWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1YGIHke/699r100rpBg/7pw9XZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjMxZDA1NmUtZDhhMS0z NzNiLTlmZTMtOTI0MGFiMjNiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHzyWrITjPOKggz0LaboFXBSn64GzugC2rPA+Bs0ilxXjriF1JsLz0H pmTUp5Kcse4dZfl9uex/KP2zMagAFB49+6AGCTordqtHPBm9K/D5N9B9OGUbu/PP P4cbcJ/Pj0bqV1XZldWW621ADRcKAGl/i0lNp08ACcMcgcuR7UMu2P6mdTATgfHj ELZHZNuB36ibYvkRMwVFgFUnkkKPcgweG5HvikpTag+6plKuXqEKwd6fMhuUsCcY MvrQYNzzGh9BrB60my8EIUaO2ZOPBha/cz5FT+aQolDV6sUPIlCmAVDX+rQqaqZJ QAjsNuEW2wJu7IsgV/XLylJxbDGVBr8= -----END CERTIFICATE-----Generated at Tue Jul 1 16:10:35 2025 by rpki-client