$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa File: 74168fc4-19c5-3549-abc7-a40124cbc34c.roa (raw, json) Hash identifier: M1KX5tSNUbwIaZpOyhtnyRaRAYOxy6oH+oEgtewMMck= Subject key identifier: 2C:16:84:03:A8:24:10:1E:4E:5E:B4:BA:33:B7:A4:E3:A6:79:83:AE Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285849FCAA7DC5890E17ADC02F9000 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 26904 IP address blocks: 23.247.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7d:c5:89:0e:17:ad:c0:2f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=87485b8b-a410-4c6b-beaf-f200f4abe06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a5:3b:89:89:03:15:64:8e:08:ae:68:2f:71: 04:08:1a:85:51:58:c1:8e:58:99:fd:16:c8:d6:21: 78:95:07:43:26:6e:fd:fb:81:57:3a:35:b2:47:b0: ce:f6:26:e9:bc:25:cd:e6:cf:a5:0f:83:2d:ee:3e: 47:bc:22:ec:5f:fe:dd:65:67:bb:77:c7:d9:45:12: 6e:45:ec:20:82:ed:84:b7:a9:07:01:a2:ba:7c:ce: 6e:3e:cd:1f:7e:2e:bd:85:f8:6d:0e:e7:29:7d:36: ea:5c:f5:91:8b:bd:3d:b8:2d:90:37:99:6e:1d:1c: 7d:a6:4b:a9:9b:4d:2e:85:c6:29:2c:43:97:95:0c: 49:39:fc:4c:b8:31:a3:61:9b:86:e4:65:6b:67:e3: fc:cf:b2:d1:f7:a6:ef:94:54:43:94:9f:fe:c4:37: c3:1b:66:9e:35:ca:a8:a8:ca:8a:77:96:89:7f:25: ce:20:2a:d0:32:05:3c:63:4d:9d:f2:fa:2d:67:4a: d9:c4:64:cd:5d:ce:3b:dd:b8:9e:c3:41:f7:da:37: f2:65:2e:12:87:69:82:93:91:ff:e2:09:53:4d:28: 65:3a:5b:5c:b6:b7:d2:82:3d:4a:11:56:7a:d9:3a: 06:83:04:10:b6:15:a9:3e:67:5c:38:21:1e:ab:66: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:84:03:A8:24:10:1E:4E:5E:B4:BA:33:B7:A4:E3:A6:79:83:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:10:47:84:3d:38:07:3c:cf:bf:62:28:f1:b2:04:e6:c5:ff: ba:88:74:4c:be:5b:55:3f:b8:8f:1f:fa:e1:bc:69:5f:cf:44: a8:25:cd:73:81:d4:de:da:d4:c1:5c:7a:e8:35:8f:3f:f7:e1: 1c:5a:37:9e:c2:16:5d:d8:a1:c2:4f:4e:94:6c:d3:70:69:4a: f7:32:cb:e7:4d:df:e5:66:a7:bc:d6:0d:68:98:0a:e4:6a:85: b2:51:10:ab:5e:4b:1c:be:2d:33:6b:14:1c:2f:17:60:57:ec: a1:c2:eb:81:16:7a:12:95:fe:c9:75:c0:d2:e4:06:fb:1c:11: 54:84:15:18:5d:47:ea:9d:6e:03:e5:c5:35:94:b1:44:db:74: f8:be:c5:44:c4:1f:59:bb:7e:ab:04:6b:30:e6:e4:48:12:05: de:98:81:1d:02:a6:f6:b7:11:be:a5:af:d9:5e:d9:d3:0c:57: 10:2c:ad:6d:0e:09:99:9f:52:75:5d:d4:73:e2:e8:50:8a:ba: 8f:ad:fd:d2:01:3d:9a:2a:e0:c6:8b:f0:8b:c0:f6:f2:91:30: 26:27:f4:36:56:91:79:9d:96:49:fa:81:06:ad:37:66:f5:54: ab:71:49:79:49:62:ca:55:d3:56:fd:f3:bf:ff:2e:90:33:2e: ec:6b:c9:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn3FiQ4XrcAvkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODc0ODViOGItYTQxMC00YzZiLWJlYWYtZjIwMGY0YWJlMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKU7iYkDFWSOCK5oL3EECBqFUVjBjliZ/RbI 1iF4lQdDJm79+4FXOjWyR7DO9ibpvCXN5s+lD4Mt7j5HvCLsX/7dZWe7d8fZRRJu Rewggu2Et6kHAaK6fM5uPs0ffi69hfhtDucpfTbqXPWRi709uC2QN5luHRx9pkup m00uhcYpLEOXlQxJOfxMuDGjYZuG5GVrZ+P8z7LR96bvlFRDlJ/+xDfDG2aeNcqo qMqKd5aJfyXOICrQMgU8Y02d8votZ0rZxGTNXc473biew0H32jfyZS4Sh2mCk5H/ 4glTTShlOltctrfSgj1KEVZ62ToGgwQQthWpPmdcOCEeq2Zy3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwWhAOoJBAeTl60ujO3pOOmeYOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvNzQxNjhmYzQtMTljNS0z NTQ5LWFiYzctYTQwMTI0Y2JjMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUQR4Q9OAc8z79iKPGyBObF/7qIdEy+W1U/uI8f+uG8aV/PRKglzXOB 1N7a1MFceug1jz/34RxaN57CFl3YocJPTpRs03BpSvcyy+dN3+Vmp7zWDWiYCuRq hbJREKteSxy+LTNrFBwvF2BX7KHC64EWehKV/sl1wNLkBvscEVSEFRhdR+qdbgPl xTWUsUTbdPi+xUTEH1m7fqsEazDm5EgSBd6YgR0Cpva3Eb6lr9le2dMMVxAsrW0O CZmfUnVd1HPi6FCKuo+t/dIBPZoq4MaL8IvA9vKRMCYn9DZWkXmdlkn6gQatN2b1 VKtxSXlJYspV01b987//LpAzLuxryaQ= -----END CERTIFICATE-----Generated at Tue Jul 1 23:24:19 2025 by rpki-client