$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa File: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (raw, json) Hash identifier: KpB7Ff2ClXhXap53XXHe7NIUfiFreY+e6h3RmHFONfQ= Subject key identifier: 76:BE:74:BC:FA:DE:FD:DD:78:03:13:C1:77:87:22:DD:3B:B6:22:F2 Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584A1B600ECB67E19A54447A69B0 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 399825 IP address blocks: 23.177.144.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0e:cb:67:e1:9a:54:44:7a:69:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=041de351-a0f3-4173-87b7-c4636847159a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:38:46:75:a6:b4:d0:57:2d:4d:be:2e:96: 57:69:f0:84:4f:05:4b:66:a3:9a:b5:77:ea:38:2f: a2:2e:91:09:c5:7f:b7:56:9d:2c:e3:ba:8c:53:b6: 79:09:6a:66:92:a6:1e:83:62:66:f4:31:ec:16:da: db:f0:21:13:b2:4b:f8:42:76:51:67:09:fa:36:60: 4e:75:b0:99:00:1c:4f:1c:e3:b4:8a:50:47:b0:45: e9:7d:e3:0e:ba:2a:c7:43:ed:6b:4d:2d:2e:00:4f: 4e:6b:d2:9a:87:0d:38:4b:02:be:48:d8:28:3f:ae: 6e:a4:97:d3:22:13:a9:8f:1b:ce:5c:1c:c1:15:dc: bf:7f:53:42:b4:2f:43:62:1c:11:68:4e:a8:53:dd: 63:b0:b8:02:23:05:1a:78:8e:d4:c6:dc:ee:1f:1b: e3:ba:4c:ac:d0:2e:69:0a:cf:d0:52:38:a8:b4:be: b6:65:e6:6c:24:be:9e:0c:37:f5:5e:81:d7:2e:f4: 65:51:89:8f:f4:10:ed:5e:62:3b:b4:ed:07:24:e8: 59:85:81:55:ed:36:29:0d:36:ed:92:a6:7f:4d:91: 7c:d6:c3:0b:12:be:32:80:93:c5:01:15:6f:80:1f: ad:55:d8:37:29:e0:31:47:c7:50:b7:fa:61:a2:99: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BE:74:BC:FA:DE:FD:DD:78:03:13:C1:77:87:22:DD:3B:B6:22:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/2307101c-a448-3f6e-b60c-140a7a61a087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv4: 23.177.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d6:7b:46:8e:23:aa:16:ce:c2:bf:3c:0b:54:36:17:f7:ef: 58:73:0b:c4:c9:d5:7b:f8:a5:ac:cf:07:20:e4:77:2f:db:50: 1f:98:5b:35:a6:df:6b:21:fb:70:19:42:d7:37:62:59:04:23: fb:ac:41:5b:36:c7:d2:5c:20:24:e9:8c:3a:cc:31:a2:19:9e: 9e:ad:3a:2a:a7:6b:b5:3b:ac:6e:3b:86:69:bf:a5:f0:f3:1e: 72:b4:02:8f:54:af:f9:0e:e9:75:e9:34:f8:35:3e:62:34:e3: f9:c2:71:38:73:89:64:ac:cc:3e:cb:5c:e8:a9:c6:ff:29:5f: 04:99:84:96:81:b6:57:59:96:3d:fc:7b:31:d8:1b:4a:ef:6d: c6:51:9c:f1:ca:5d:ba:ee:d2:99:b9:76:f1:e3:05:e2:06:c1: 65:7f:5c:4f:e7:de:a1:2e:05:e4:1c:75:8d:02:0e:7c:d8:88: df:6f:0a:54:ed:bf:33:09:fb:fc:28:73:df:d1:62:db:32:47: 63:98:38:28:ec:32:71:79:df:43:e6:d1:63:88:fb:be:9a:22: c3:e3:b2:0b:95:1a:60:93:b6:38:98:5e:20:34:a8:cb:23:bb: 89:d4:62:d0:86:54:63:d2:24:49:14:70:85:a2:c6:4c:e4:c3: 75:5d:ff:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYA7LZ+GaVER6abAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MDQxZGUzNTEtYTBmMy00MTczLTg3YjctYzQ2MzY4NDcxNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEc4RnWmtNBXLU2+LpZXafCETwVLZqOatXfq OC+iLpEJxX+3Vp0s47qMU7Z5CWpmkqYeg2Jm9DHsFtrb8CETskv4QnZRZwn6NmBO dbCZABxPHOO0ilBHsEXpfeMOuirHQ+1rTS0uAE9Oa9Kahw04SwK+SNgoP65upJfT IhOpjxvOXBzBFdy/f1NCtC9DYhwRaE6oU91jsLgCIwUaeI7UxtzuHxvjukys0C5p Cs/QUjiotL62ZeZsJL6eDDf1XoHXLvRlUYmP9BDtXmI7tO0HJOhZhYFV7TYpDTbt kqZ/TZF81sMLEr4ygJPFARVvgB+tVdg3KeAxR8dQt/phopkl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa+dLz63v3deAMTwXeHIt07tiLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvMjMwNzEwMWMtYTQ0OC0z ZjZlLWI2MGMtMTQwYTdhNjFhMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbWe0aOI6oWzsK/PAtUNhf371hzC8TJ1Xv4pazPByDkdy/bUB+YWzWm 32sh+3AZQtc3YlkEI/usQVs2x9JcICTpjDrMMaIZnp6tOiqna7U7rG47hmm/pfDz HnK0Ao9Ur/kO6XXpNPg1PmI04/nCcThziWSszD7LXOipxv8pXwSZhJaBtldZlj38 ezHYG0rvbcZRnPHKXbru0pm5dvHjBeIGwWV/XE/n3qEuBeQcdY0CDnzYiN9vClTt vzMJ+/woc9/RYtsyR2OYOCjsMnF530Pm0WOI+76aIsPjsguVGmCTtjiYXiA0qMsj u4nUYtCGVGPSJEkUcIWixkzkw3Vd/04= -----END CERTIFICATE-----Generated at Tue Jul 1 15:38:35 2025 by rpki-client