$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa File: b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa (raw, json) Hash identifier: a2KTXbJ8Hww09QH5VKpGlZmwqnhRdxBR+fs5Ka3EmiU= Subject key identifier: B7:CD:77:3C:E0:E6:DF:EF:DE:C3:79:5D:B6:13:E0:0A:B1:43:06:64 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB09F30458BD7715C1C700 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 74.126.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:f3:04:58:bd:77:15:c1:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=ec26ac23-fbc9-47a8-9d51-67f922ffc888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:8c:43:0b:c8:36:a5:a9:3e:6a:ee:fb:9e: 3b:0a:19:d7:0d:3d:11:37:e4:0b:71:fe:63:59:33: c7:45:20:2d:76:0e:7c:6c:8f:5e:d7:71:fc:ad:c4: 8c:d2:3e:3e:4a:bf:2b:b6:f5:f6:27:fe:04:8a:00: b3:0a:b6:07:76:1a:4f:ab:fb:f4:e2:00:46:49:7b: ed:19:42:6f:cd:8c:2a:67:d3:ca:2f:57:27:40:4f: d4:13:b1:6b:76:38:19:40:f9:b2:5c:71:20:b1:c2: 1a:91:09:7e:b0:af:39:7c:c7:a5:5d:48:2a:29:27: 40:ad:08:b7:8f:54:63:29:3d:87:91:83:8e:c5:86: 36:c1:e0:9b:3f:4e:bd:5d:37:f4:42:9d:1e:bd:20: 48:1a:a8:d7:fd:67:34:d2:9a:3a:0b:d2:1b:e4:e6: 0a:a0:ac:e8:d7:36:70:88:db:c6:cd:f0:82:04:94: 0a:27:38:19:81:03:5c:07:37:20:bb:b4:93:7e:44: 94:4e:78:7d:39:6e:a6:b2:de:23:c2:57:8a:16:c0: 7f:52:ed:da:35:0c:d1:74:87:bc:59:e3:a8:a0:37: be:da:0a:3d:85:11:ed:7d:25:53:bd:ff:da:2b:a3: bf:16:b9:eb:50:af:74:12:51:1f:50:56:56:03:05: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:77:3C:E0:E6:DF:EF:DE:C3:79:5D:B6:13:E0:0A:B1:43:06:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:68:cb:8c:ea:32:c8:76:f6:7d:82:a9:1d:10:06:18:81:98: 3a:f6:f3:1a:cf:a4:9f:95:1b:f8:96:46:51:4f:4d:2d:5b:4a: fd:bf:9c:55:69:52:45:48:4a:93:91:e8:b4:e7:a0:91:7f:c2: 09:8a:bf:cc:ba:53:b3:75:85:ab:67:6a:b7:91:3b:75:a4:e8: cc:a6:7c:87:87:76:ed:99:f8:60:a2:d7:d6:94:34:b1:89:1c: 5e:4c:9d:6c:f0:d5:4c:b5:75:5e:da:57:9a:91:ca:72:83:99: 8b:a4:32:a7:77:34:4b:37:19:12:14:42:fa:34:7e:27:2a:27: c2:c2:ac:5c:f5:7e:66:31:b4:d5:f2:22:3c:0c:4d:d2:2c:b9: 4e:d8:95:6e:e1:79:3e:73:f3:7f:c0:a0:df:a9:d5:fc:4d:d2: ba:b2:bb:66:68:cc:8d:8d:4c:ad:d5:e7:c0:be:0b:e8:44:0f: 5e:16:2a:a1:25:48:fa:84:ee:8d:0b:9b:5c:55:f1:73:0e:ae: 15:d1:8a:4c:6d:5c:2a:59:ba:e0:c2:a5:06:a1:f6:a2:72:e5: 7f:4c:81:4e:39:d9:1d:c6:b5:82:58:e3:90:1a:ea:4f:71:5a: 71:3d:7d:4b:95:3d:03:ee:ea:b5:e5:d1:9b:4d:1b:b6:41:64: ae:34:d5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywnzBFi9dxXBxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZWMyNmFjMjMtZmJjOS00N2E4LTlkNTEtNjdmOTIyZmZjODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoOMQwvINqWpPmru+547ChnXDT0RN+QLcf5j WTPHRSAtdg58bI9e13H8rcSM0j4+Sr8rtvX2J/4EigCzCrYHdhpPq/v04gBGSXvt GUJvzYwqZ9PKL1cnQE/UE7FrdjgZQPmyXHEgscIakQl+sK85fMelXUgqKSdArQi3 j1RjKT2HkYOOxYY2weCbP069XTf0Qp0evSBIGqjX/Wc00po6C9Ib5OYKoKzo1zZw iNvGzfCCBJQKJzgZgQNcBzcgu7STfkSUTnh9OW6mst4jwleKFsB/Uu3aNQzRdIe8 WeOooDe+2go9hRHtfSVTvf/aK6O/FrnrUK90ElEfUFZWAwUhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfNdzzg5t/v3sN5XbYT4AqxQwZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYjIzZmQwYjQtYzdjOS0z M2FmLThlYmYtMDNjYmMwMjFhZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtoy4zqMsh29n2CqR0QBhiBmDr28xrPpJ+VG/iWRlFPTS1bSv2/nFVp UkVISpOR6LTnoJF/wgmKv8y6U7N1hatnareRO3Wk6MymfIeHdu2Z+GCi19aUNLGJ HF5MnWzw1Uy1dV7aV5qRynKDmYukMqd3NEs3GRIUQvo0ficqJ8LCrFz1fmYxtNXy IjwMTdIsuU7YlW7heT5z83/AoN+p1fxN0rqyu2ZozI2NTK3V58C+C+hED14WKqEl SPqE7o0Lm1xV8XMOrhXRikxtXCpZuuDCpQah9qJy5X9MgU452R3GtYJY45Aa6k9x WnE9fUuVPQPu6rXl0ZtNG7ZBZK401dQ= -----END CERTIFICATE-----Generated at Sat Jul 5 01:22:11 2025 by rpki-client