$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa File: dbb60073-5b02-33a2-87ca-90890e8164b4.roa (raw, json) Hash identifier: fjiai9Y1SC39v6d5AX5Bhh03J3cjCxwS9yoF5R7683I= Subject key identifier: ED:8C:45:86:9E:85:68:9D:22:4B:01:7C:85:EA:F4:AF:FB:7B:4B:AD Certificate issuer: /CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a Certificate serial: 010D0C9F4328584A45403B6ACC603A8FD77D5A00 Authority key identifier: 33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 399756 IP address blocks: 23.172.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3b:6a:cc:60:3a:8f:d7:7d:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=02ea30b6-4a71-42d5-bf86-777280db516d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:e7:2a:5e:86:6f:70:0f:42:6c:14:6b:6a: 85:ad:91:fe:3f:94:26:7f:37:22:66:22:ed:cc:d3: c0:a4:20:c9:9a:2a:47:a6:4e:4f:61:5f:45:ab:c0: bc:a5:a8:0a:a3:0a:b5:5c:07:19:3b:a8:32:6b:ad: 52:00:c5:43:75:bc:9d:10:73:f2:9e:3d:db:39:dc: 14:3b:78:7c:2d:e4:ed:b3:7f:71:c6:33:67:53:f9: ea:10:f1:78:47:a7:13:f2:d3:59:e4:5a:82:d6:d0: a2:a9:46:59:cc:75:e1:ea:ab:a4:c2:8e:9d:cf:3f: c4:39:e6:6a:ba:12:77:c4:22:4e:07:64:aa:2d:58: d4:12:ae:09:66:9c:06:e9:8b:8d:8a:20:d5:2c:f0: 78:de:6a:c2:7c:72:1c:71:fb:9f:f4:ef:a4:53:99: f8:73:4e:2e:9f:9f:c7:3b:91:d1:b8:49:fe:16:1f: 42:c3:d8:f5:59:a0:e3:d3:6f:9d:77:31:16:23:d1: 20:df:87:d3:9c:98:0a:76:39:d3:0c:b5:9e:52:90: 77:d8:7c:41:e5:8b:d0:74:82:fd:80:76:4c:d5:f3: d1:83:ef:38:68:6c:49:65:1a:e0:39:ed:99:87:81: 5a:1b:42:73:40:63:79:f1:1a:6b:b4:b4:d3:91:86: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8C:45:86:9E:85:68:9D:22:4B:01:7C:85:EA:F4:AF:FB:7B:4B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl X509v3 Authority Key Identifier: keyid:33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer sbgp-ipAddrBlock: critical IPv4: 23.172.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:19:59:c3:05:f2:77:9b:97:23:8f:e5:a1:1f:c8:fd:37:23: 8e:89:85:87:ec:18:94:7b:b6:1b:a9:ac:c7:b7:63:01:64:d3: 70:d8:b1:4a:1f:e3:3e:97:ad:8f:58:53:62:fc:2c:92:c1:35: ec:0f:c1:5b:ec:37:5e:bf:c9:4d:54:12:a3:a0:12:8c:8e:d1: 02:be:7b:3b:16:93:72:50:af:3f:95:d5:57:07:12:d2:26:1b: ad:48:cf:77:f9:53:80:48:9f:5b:a0:20:f8:a1:0f:bf:57:20: bc:87:cd:36:2c:f7:0d:9c:32:44:07:b9:18:dd:e2:52:bb:0c: 10:7a:1f:55:2b:4c:95:e0:0a:45:31:fb:21:b0:2c:f4:64:1a: e0:55:e8:aa:ea:a5:6f:10:eb:53:fa:66:1d:06:e3:f5:26:d0: 36:87:9b:f8:b2:91:b6:19:b5:1b:62:86:ea:ec:4e:83:19:01: 7b:54:49:88:88:af:9e:16:e3:ad:4c:2e:11:6d:d9:90:c2:ea: 9e:6b:44:86:bf:a6:c0:fc:11:ac:9d:e0:94:35:bb:04:ba:c2: bc:cb:92:b8:79:6a:be:60:16:e5:ad:fc:7e:f2:d0:85:12:1b: 90:ed:ab:1b:10:e3:3c:8b:c8:32:85:0c:9f:8d:ae:07:09:a2: f5:24:97:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDtqzGA6j9d9WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQwZjBjZDEtZjRlYy00M2I5LWJhNDEtYzk2OWMwZmQ1 MjRhMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MDJlYTMwYjYtNGE3MS00MmQ1LWJmODYtNzc3MjgwZGI1MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHTnKl6Gb3APQmwUa2qFrZH+P5QmfzciZiLt zNPApCDJmipHpk5PYV9Fq8C8pagKowq1XAcZO6gya61SAMVDdbydEHPynj3bOdwU O3h8LeTts39xxjNnU/nqEPF4R6cT8tNZ5FqC1tCiqUZZzHXh6qukwo6dzz/EOeZq uhJ3xCJOB2SqLVjUEq4JZpwG6YuNiiDVLPB43mrCfHIccfuf9O+kU5n4c04un5/H O5HRuEn+Fh9Cw9j1WaDj02+ddzEWI9Eg34fTnJgKdjnTDLWeUpB32HxB5YvQdIL9 gHZM1fPRg+84aGxJZRrgOe2Zh4FaG0JzQGN58RprtLTTkYZ9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2MRYaehWidIksBfIXq9K/7e0utMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNDBm MGNkMS1mNGVjLTQzYjktYmE0MS1jOTY5YzBmZDUyNGEvZGJiNjAwNzMtNWIwMi0z M2EyLTg3Y2EtOTA4OTBlODE2NGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjQwZjBjZDEtZjRlYy00M2I5LWJh NDEtYzk2OWMwZmQ1MjRhLzI0MGYwY2QxLWY0ZWMtNDNiOS1iYTQxLWM5NjljMGZk NTI0YS5jcmwwHwYDVR0jBBgwFoAUMzzYYlOetKTXzX5H2DXUEtzUoYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNDBmMGNkMS1mNGVjLTQzYjktYmE0MS1jOTY5 YzBmZDUyNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwZWcMF8neblyOP5aEfyP03I46JhYfsGJR7thuprMe3YwFk03DYsUof 4z6XrY9YU2L8LJLBNewPwVvsN16/yU1UEqOgEoyO0QK+ezsWk3JQrz+V1VcHEtIm G61Iz3f5U4BIn1ugIPihD79XILyHzTYs9w2cMkQHuRjd4lK7DBB6H1UrTJXgCkUx +yGwLPRkGuBV6KrqpW8Q61P6Zh0G4/Um0DaHm/iykbYZtRtihursToMZAXtUSYiI r54W461MLhFt2ZDC6p5rRIa/psD8Eayd4JQ1uwS6wrzLkrh5ar5gFuWt/H7y0IUS G5DtqxsQ4zyLyDKFDJ+NrgcJovUkl3M= -----END CERTIFICATE-----Generated at Wed Jul 2 06:52:01 2025 by rpki-client