$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa File: 87fba722-5dc2-3c90-8573-bed0796d43f1.roa (raw, json) Hash identifier: ob+9SJ3h6AsUyXmWXHLkPyarpWpTswOV31X46b2ODoc= Subject key identifier: E4:1E:A8:7A:64:28:2E:AD:AF:7B:8B:41:02:7D:2E:70:D9:B6:BF:28 Certificate issuer: /CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Certificate serial: 010D0C9F43285849F17FD2422F58D00F0AEC3B00 Authority key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 399478 IP address blocks: 23.176.240.0/24 maxlen: 24 2620:95:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d2:42:2f:58:d0:0f:0a:ec:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2490e197-96f2-4c5a-a546-81689a8c2259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:68:38:18:83:23:f1:18:e0:1a:f7:2d:76: 7a:6c:b2:ed:40:c8:19:cf:f7:5b:b2:58:b3:05:0c: b8:da:5d:dd:54:c6:ba:b4:9d:5e:92:43:72:93:dc: 2b:c0:3e:71:b3:09:71:f7:e4:72:9a:a6:75:56:c9: c9:e9:be:1f:1a:68:13:5d:ea:b2:df:b1:d3:0b:46: 67:e7:6c:60:d7:a2:4b:ec:b9:55:41:28:8d:32:ad: 9a:ce:cd:72:4e:9d:fa:0f:e8:53:3d:37:9c:09:bc: 6a:3e:e1:b2:a5:10:22:5d:66:0a:c5:41:41:6a:51: 11:58:63:55:ea:5d:ee:16:d1:8b:16:2e:2b:c6:6c: 83:d5:67:b6:59:82:45:6b:b8:84:e0:1c:7f:dd:51: 45:2f:52:a0:d6:83:37:c4:13:2a:9c:b0:a0:80:ed: 32:74:a1:a9:1a:8a:67:82:fb:8b:91:87:90:2f:52: 1e:4c:85:50:36:0c:4f:2c:5f:7a:64:2f:ae:a6:9a: d6:2e:1f:fa:ba:b1:b5:95:db:4e:9e:23:df:75:e7: 53:d5:11:ea:40:b5:05:46:13:6e:e8:cd:dd:be:75: d5:e0:f7:71:f5:fe:9e:74:95:e5:98:5b:ed:23:c4: 71:6a:15:2c:1f:fa:57:50:29:ab:ac:de:df:4b:61: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:A8:7A:64:28:2E:AD:AF:7B:8B:41:02:7D:2E:70:D9:B6:BF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl X509v3 Authority Key Identifier: keyid:88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer sbgp-ipAddrBlock: critical IPv4: 23.176.240.0/24 IPv6: 2620:95:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9a:58:64:9a:ea:fd:f2:6c:43:80:2e:cc:79:1e:83:40:25: 7e:20:2b:ba:71:90:85:70:4e:95:1c:89:66:e9:f1:16:92:07: 4a:4c:bf:87:7e:3e:fd:ff:a6:23:f3:10:26:f8:62:dc:df:ea: 31:b2:12:d9:45:01:28:26:a6:54:a8:f1:2f:c5:d8:6a:c2:8e: d7:5b:a1:61:da:fb:7b:cf:29:6c:ba:93:5f:f3:a9:6c:e5:93: 45:38:dd:de:50:5e:2f:d8:02:35:bd:1e:2e:07:4d:e5:6f:dd: da:6f:6d:36:98:f5:89:ce:65:8e:33:3c:c7:9c:1c:57:99:27: 13:c1:87:8a:32:e2:77:f0:2e:aa:b9:83:a4:f8:04:12:c4:81: ce:bf:0d:5f:45:0b:88:cd:ce:02:0f:ae:8b:c0:5b:44:6e:2f: cf:89:1b:c9:05:3e:13:22:b5:fd:46:bb:d8:a5:a6:25:b3:7f: 4b:df:ab:e2:ea:95:f8:4f:6d:14:97:f5:98:37:4e:94:1a:43: ac:b9:1d:f5:55:1c:f8:4e:e1:66:a7:e7:98:cc:ac:4a:3c:95: b3:04:1b:9b:42:ce:08:3b:d8:1a:88:16:db:68:8e:6e:e9:2e: dc:82:f2:31:f4:fd:3e:f6:9f:bf:6b:9b:0b:5a:10:e0:0b:76: bb:1d:db:b6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnxf9JCL1jQDwrsOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwNDA3MTAtN2NjZi00Yzg1LTk4YzctOGQ2MjQ2ZDE0 NmY1MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjQ5MGUxOTctOTZmMi00YzVhLWE1NDYtODE2ODlhOGMyMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYxoOBiDI/EY4Br3LXZ6bLLtQMgZz/dbsliz BQy42l3dVMa6tJ1ekkNyk9wrwD5xswlx9+RymqZ1VsnJ6b4fGmgTXeqy37HTC0Zn 52xg16JL7LlVQSiNMq2azs1yTp36D+hTPTecCbxqPuGypRAiXWYKxUFBalERWGNV 6l3uFtGLFi4rxmyD1We2WYJFa7iE4Bx/3VFFL1Kg1oM3xBMqnLCggO0ydKGpGopn gvuLkYeQL1IeTIVQNgxPLF96ZC+upprWLh/6urG1ldtOniPfdedT1RHqQLUFRhNu 6M3dvnXV4Pdx9f6edJXlmFvtI8RxahUsH/pXUCmrrN7fS2GtDwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOQeqHpkKC6tr3uLQQJ9LnDZtr8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMDA0 MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZkMTQ2ZjUvODdmYmE3MjItNWRjMi0z YzkwLTg1NzMtYmVkMDc5NmQ0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzAwNDA3MTAtN2NjZi00Yzg1LTk4 YzctOGQ2MjQ2ZDE0NmY1LzMwMDQwNzEwLTdjY2YtNGM4NS05OGM3LThkNjI0NmQx NDZmNS5jcmwwHwYDVR0jBBgwFoAUiElsmgZB17Iubf/sts0kW7e7CjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYy NDZkMTQ2ZjUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7DwMA8E AgACMAkDBwAmIACVoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAn5pYZJrq/fJsQ4AuzHkeg0AlfiArunGQ hXBOlRyJZunxFpIHSky/h34+/f+mI/MQJvhi3N/qMbIS2UUBKCamVKjxL8XYasKO 11uhYdr7e88pbLqTX/OpbOWTRTjd3lBeL9gCNb0eLgdN5W/d2m9tNpj1ic5ljjM8 x5wcV5knE8GHijLid/AuqrmDpPgEEsSBzr8NX0ULiM3OAg+ui8BbRG4vz4kbyQU+ EyK1/Ua72KWmJbN/S9+r4uqV+E9tFJf1mDdOlBpDrLkd9VUc+E7hZqfnmMysSjyV swQbm0LOCDvYGogW22iObuku3ILyMfT9Pvafv2ubC1oQ4At2ux3btg== -----END CERTIFICATE-----Generated at Wed Jul 2 11:48:42 2025 by rpki-client