$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa File: 8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa (raw, json) Hash identifier: lOcRbop9JCxzRuVVJmKGfUOtDrvkRPRzXsSQxK689HI= Subject key identifier: 1C:92:10:E6:9B:59:92:68:29:66:71:6F:1D:50:72:37:21:9E:48:83 Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F4328584A43DB0C8883CE36B9616A2420 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20417 IP address blocks: 23.128.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0c:88:83:ce:36:b9:61:6a:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=dc0697f6-50d0-4d20-b050-43809b83c006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:ad:46:0b:97:00:c9:96:b5:7b:19:6b:40: ab:cf:f4:ed:3e:b5:3a:01:42:25:0b:54:e1:cf:c3: 66:9b:b6:0c:2b:0e:53:0e:74:b7:69:ca:4b:41:d4: 74:3e:46:82:9c:9f:83:e1:cc:e0:05:bb:eb:7d:3b: 0d:17:96:f8:91:f6:9a:36:08:22:a0:bb:40:41:f9: d7:2a:e7:a7:da:7e:2e:05:65:9b:95:e7:3f:7e:b6: a6:af:dd:77:8b:7f:bd:75:57:04:de:36:4e:f1:1a: 46:70:c5:65:b0:d8:03:1a:28:a9:4e:fa:3b:36:19: ee:40:0c:21:f0:82:18:42:5d:8f:df:a2:f0:46:d1: a6:47:bb:58:11:40:96:6e:7f:a1:41:da:e0:2b:15: 02:0e:e6:59:5b:73:00:fd:79:68:49:3a:f1:73:18: 2d:84:69:1e:d3:da:61:63:52:6d:9e:dd:a7:8f:bb: 03:dc:53:38:1e:a0:42:80:fe:7a:cb:d4:7a:6f:b7: 4c:c8:07:bf:fd:38:85:29:b5:4f:4e:ff:63:20:cb: ef:2f:aa:84:4d:80:cd:40:11:02:e3:35:c2:4e:1b: fe:2f:5e:8f:e7:3a:e3:a9:bc:a2:2c:23:8d:95:4c: 23:9b:6d:bd:bf:f5:fc:0c:6a:7c:c1:86:09:7a:8e: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:92:10:E6:9B:59:92:68:29:66:71:6F:1D:50:72:37:21:9E:48:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv4: 23.128.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:10:55:55:99:81:b5:98:5f:77:17:bd:da:94:2d:22:4c:fe: 0c:5a:0d:09:04:e3:00:1b:00:b4:3e:eb:24:76:1d:bf:c3:2e: ee:64:fb:23:57:58:9b:cd:45:f2:9b:2d:c7:5f:97:b4:f9:41: 8a:2c:2f:37:84:d1:b4:1f:fd:1f:c1:63:f1:37:f3:10:c6:65: 23:d1:04:50:33:a1:ac:e8:38:d6:8e:50:32:f7:cb:b4:fb:fa: 0a:10:f0:7f:a5:5b:cd:d7:70:27:36:7d:05:94:b7:34:4b:65: a7:94:60:03:99:e4:5b:bc:30:16:c9:83:9b:09:94:ee:97:8e: 11:19:e6:ac:ea:81:0d:34:64:51:77:2a:29:57:fc:e3:2a:39: 68:6a:d6:27:42:41:94:fd:6e:ee:92:e3:cd:88:13:21:94:fa: 91:1a:db:6c:dd:69:f6:f7:0a:ca:33:ef:14:e2:48:6c:7d:91: 3b:17:44:53:0d:58:3f:69:5f:b1:c8:ae:0c:c5:f9:65:34:89: c9:b5:41:03:5a:04:09:9e:1b:b7:27:79:49:61:f7:4f:77:ed: 87:9b:5a:32:f7:7c:21:ea:4f:cd:47:b4:39:a7:09:25:3a:1a: 51:c2:69:0a:cf:d6:b5:22:8b:8c:9f:4a:56:c4:15:eb:d5:eb: 18:eb:a3:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wyIg842uWFqJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZGMwNjk3ZjYtNTBkMC00ZDIwLWIwNTAtNDM4MDliODNjMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+tRguXAMmWtXsZa0Crz/TtPrU6AUIlC1Th z8Nmm7YMKw5TDnS3acpLQdR0PkaCnJ+D4czgBbvrfTsNF5b4kfaaNggioLtAQfnX Kuen2n4uBWWblec/framr913i3+9dVcE3jZO8RpGcMVlsNgDGiipTvo7NhnuQAwh 8IIYQl2P36LwRtGmR7tYEUCWbn+hQdrgKxUCDuZZW3MA/XloSTrxcxgthGke09ph Y1Jtnt2nj7sD3FM4HqBCgP56y9R6b7dMyAe//TiFKbVPTv9jIMvvL6qETYDNQBEC 4zXCThv+L16P5zrjqbyiLCONlUwjm229v/X8DGp8wYYJeo4VlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBySEOabWZJoKWZxbx1QcjchnkiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvOGQ1NWFjZmUtZTBlNi0z M2YwLWE5NjItOGMwNTZiNGMyOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIQVVWZgbWYX3cXvdqULSJM/gxaDQkE4wAbALQ+6yR2Hb/DLu5k+yNX WJvNRfKbLcdfl7T5QYosLzeE0bQf/R/BY/E38xDGZSPRBFAzoazoONaOUDL3y7T7 +goQ8H+lW83XcCc2fQWUtzRLZaeUYAOZ5Fu8MBbJg5sJlO6XjhEZ5qzqgQ00ZFF3 KilX/OMqOWhq1idCQZT9bu6S482IEyGU+pEa22zdafb3Csoz7xTiSGx9kTsXRFMN WD9pX7HIrgzF+WU0icm1QQNaBAmeG7cneUlh90937YebWjL3fCHqT81HtDmnCSU6 GlHCaQrP1rUii4yfSlbEFevV6xjro38= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:26 2025 by rpki-client