$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa File: 936a75ba-7eb9-3709-9d13-c404379a1254.roa (raw, json) Hash identifier: 4maJnWDrvIbazxKoHoFjg+nQc8LyDrrbwYqIwtvoN6A= Subject key identifier: CD:82:6C:C7:9C:2C:A8:1C:8B:BD:A9:C5:B8:A7:AC:EA:54:36:81:9D Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584A10354158E755D5B987741100 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 23.179.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:41:58:e7:55:d5:b9:87:74:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=261d13bd-98e0-4f88-837b-0ca42505bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:9e:2f:1c:8e:70:d0:4a:bf:6b:80:ed:56: 86:ac:2f:67:85:21:d4:fd:34:70:1b:41:d0:d4:1c: dd:3a:97:f4:d1:da:48:52:84:40:80:f0:d1:50:80: 04:68:e9:6a:7a:97:3a:89:31:fe:76:a5:44:de:bb: 29:d3:0c:b6:73:ef:a6:90:b4:bd:1a:56:20:31:4c: 9a:aa:b9:f7:8d:b8:18:26:81:b9:df:43:bb:4a:22: f8:90:f6:73:d2:1b:e4:20:02:5f:77:e3:7c:77:09: 29:93:fa:68:bc:a7:f2:7d:c8:18:04:9b:1b:2c:09: 66:7b:05:c1:c6:b0:14:46:71:c2:4d:2c:ea:97:65: fb:71:b8:ce:34:5d:af:93:fc:25:dc:d8:ec:cd:9c: a1:1e:93:86:92:c0:3b:33:fc:71:04:1f:56:08:cc: d5:25:1e:18:3c:71:28:b1:fb:6a:ef:5b:34:bd:1f: 01:be:30:b5:5d:4f:e2:5f:bc:f7:a7:e0:b0:3d:49: fd:fe:a2:3a:ea:e8:a0:3a:20:28:16:a2:69:bb:5e: 4e:28:52:3f:ef:97:f5:85:bd:dd:77:f2:9f:9b:19: 2f:da:03:49:27:27:6e:ad:46:6a:9c:8e:82:bb:29: bf:57:53:a3:44:6e:9f:2f:a0:75:ce:26:9e:2b:b7: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:6C:C7:9C:2C:A8:1C:8B:BD:A9:C5:B8:A7:AC:EA:54:36:81:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:10:33:df:71:12:10:87:56:c2:7d:0c:c9:65:a5:36:7c:b2: 0d:62:79:90:ee:a8:e8:a9:84:4c:f9:0d:97:e8:37:61:6d:e6: 1b:9b:a9:e7:d6:cc:0a:d6:82:ff:f6:c7:15:1e:d2:b5:ab:37: 26:db:3f:4c:8e:02:d6:db:a4:16:12:0b:f7:ed:a3:f3:87:3f: cb:f9:6e:22:00:12:55:58:ae:b4:5c:af:3b:6c:15:ce:17:e8: d2:9b:53:fa:94:92:af:da:58:29:6c:20:70:ed:b2:4b:17:f5: 95:27:30:f3:cf:dd:63:8d:6e:44:ab:7c:0a:c5:b2:eb:7f:71: 4b:ec:8e:98:0c:1b:91:5e:12:8b:9a:20:29:be:a4:c2:55:ac: 96:14:7a:c9:4d:bf:7f:9b:2d:23:28:04:a9:04:fb:d3:4b:07: 29:1d:4d:c2:32:b7:d9:b7:95:d1:22:d3:7f:1e:6c:09:a0:c5: af:11:85:4c:5a:94:c9:27:a9:4e:51:8c:e1:be:5a:61:a0:bc: 5a:97:db:62:1e:36:24:ef:3b:c5:f2:cc:82:9a:26:b9:60:9d: 3c:7c:f0:97:4b:06:2a:25:1a:c2:68:ca:ef:d2:29:78:64:c0: 3f:5d:70:75:10:41:b3:a2:c9:2a:f8:9b:47:ed:57:3d:28:f4: 62:68:fe:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUFY51XVuYd0EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MjYxZDEzYmQtOThlMC00Zjg4LTgzN2ItMGNhNDI1MDViYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPKeLxyOcNBKv2uA7VaGrC9nhSHU/TRwG0HQ 1BzdOpf00dpIUoRAgPDRUIAEaOlqepc6iTH+dqVE3rsp0wy2c++mkLS9GlYgMUya qrn3jbgYJoG530O7SiL4kPZz0hvkIAJfd+N8dwkpk/povKfyfcgYBJsbLAlmewXB xrAURnHCTSzql2X7cbjONF2vk/wl3NjszZyhHpOGksA7M/xxBB9WCMzVJR4YPHEo sftq71s0vR8BvjC1XU/iX7z3p+CwPUn9/qI66uigOiAoFqJpu15OKFI/75f1hb3d d/Kfmxkv2gNJJydurUZqnI6Cuym/V1OjRG6fL6B1ziaeK7fzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2CbMecLKgci72pxbinrOpUNoGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTM2YTc1YmEtN2ViOS0z NzA5LTlkMTMtYzQwNDM3OWExMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4QM99xEhCHVsJ9DMllpTZ8sg1ieZDuqOiphEz5DZfoN2Ft5hubqefW zArWgv/2xxUe0rWrNybbP0yOAtbbpBYSC/fto/OHP8v5biIAElVYrrRcrztsFc4X 6NKbU/qUkq/aWClsIHDtsksX9ZUnMPPP3WONbkSrfArFsut/cUvsjpgMG5FeEoua ICm+pMJVrJYUeslNv3+bLSMoBKkE+9NLBykdTcIyt9m3ldEi038ebAmgxa8RhUxa lMknqU5RjOG+WmGgvFqX22IeNiTvO8XyzIKaJrlgnTx88JdLBiolGsJoyu/SKXhk wD9dcHUQQbOiySr4m0ftVz0o9GJo/gM= -----END CERTIFICATE-----Generated at Tue Jul 1 05:59:17 2025 by rpki-client