$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa File: 34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa (raw, json) Hash identifier: ijPjLnXBZRFa5uQuRi4MATdHhRtc4x/lxCdBSlmiSJI= Subject key identifier: 44:80:4D:8A:FF:DA:1F:8D:E2:69:C4:98:8E:0D:4F:0F:83:5A:4E:E8 Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b Certificate serial: 010D0C9F4328584A228B36666BC7AA25AD5BBC80 Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa Signing time: Mon 09 Jun 2025 14:38:45 +0000 ROA not before: Mon 09 Jun 2025 14:38:45 +0000 ROA not after: Sun 07 Sep 2025 14:38:45 +0000 asID: 5065 IP address blocks: 107.180.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:8b:36:66:6b:c7:aa:25:ad:5b:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b Validity Not Before: Jun 9 14:38:45 2025 GMT Not After : Sep 7 14:38:45 2025 GMT Subject: CN=10e3b9bb-fd42-40d1-b576-5ead6a8cc653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:24:15:33:1e:63:3a:14:9c:49:35:85:b2: 2b:4f:aa:3b:ce:39:2f:45:d0:08:4f:0d:37:f6:41: 9e:5a:22:29:50:ff:00:d1:f9:f5:50:36:57:8a:15: 4a:b3:61:7e:6b:97:16:3e:3b:50:d6:be:c1:01:f2: 8b:bc:5e:b8:8e:fa:50:3b:7f:95:ea:57:03:2d:f8: 64:fb:6e:15:9c:bc:a0:96:9b:10:c8:a0:10:c3:e3: 7a:9e:e5:c8:bc:dc:79:e8:21:da:16:e1:9a:05:ea: 11:9e:f8:f7:c3:67:e8:8e:bc:e1:ef:ec:c4:c5:1d: f7:4b:f1:7b:13:d1:d2:4c:16:56:84:fb:8d:6e:df: 3a:6b:c1:2f:2d:23:01:85:52:2d:a3:ac:c5:e1:f8: e9:66:cd:cd:93:18:66:7c:29:6c:ea:ca:43:b0:4d: 69:7a:b1:9a:2c:2b:31:0d:b8:57:98:59:1c:6f:39: 94:79:bc:dc:4f:e6:37:ed:a2:8b:73:a8:a2:df:64: 9d:ed:c7:93:68:71:9e:87:4c:be:03:a1:6c:00:6a: c2:8e:42:7d:2a:ea:c2:9e:6a:f4:63:0b:61:0a:5a: 46:d1:0c:d8:ff:b0:84:a2:9c:f6:43:a9:b6:df:26: 3d:df:37:b0:ef:b4:98:54:c1:c9:15:f6:2f:bf:b6: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:80:4D:8A:FF:DA:1F:8D:E2:69:C4:98:8E:0D:4F:0F:83:5A:4E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl X509v3 Authority Key Identifier: keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer sbgp-ipAddrBlock: critical IPv4: 107.180.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8a:ea:72:38:f8:b2:4f:55:f8:56:2d:82:24:f2:26:47:47: 8e:15:50:fb:bb:84:91:d1:20:7b:ca:f9:7e:a7:cb:0e:86:90: 11:78:ea:fc:7b:6c:b4:87:61:6c:7d:21:a8:b1:f8:df:21:97: c0:ab:11:61:51:c7:6f:8e:92:7d:27:6c:af:1b:82:18:44:5f: 33:78:d2:55:94:a6:a8:5a:43:2c:4b:b1:e5:7b:08:af:8b:91: ea:b7:04:23:53:73:bb:cb:55:ff:51:f8:ba:3a:b6:e8:fa:5e: b1:96:1c:bf:d2:d6:90:ed:d8:24:c1:fb:23:af:5c:dc:1e:ef: d7:82:ae:dd:1b:ed:dc:6c:85:11:4f:ac:12:c3:6c:45:64:27: 83:38:b2:53:99:53:a8:1b:c0:cf:c5:7a:16:d7:c6:31:fb:d5: 69:df:81:18:3e:88:5b:f4:0f:47:57:61:d4:9e:4f:70:3f:36: 12:59:ee:23:00:5b:71:9e:80:66:5f:52:78:0a:c0:59:c1:30: 63:b5:8d:76:8b:24:32:29:bd:b4:01:f2:24:40:fb:ec:eb:5c: 00:ba:c7:d4:35:67:1d:7d:2b:2c:0f:f3:dd:02:cd:03:d1:0f: ca:58:01:4f:f2:8e:0e:27:49:20:4b:06:98:c3:dd:32:d9:4d: 4e:69:2e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiizZma8eqJa1bvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm NjhiMB4XDTI1MDYwOTE0Mzg0NVoXDTI1MDkwNzE0Mzg0NVowLzEtMCsGA1UEAxMk MTBlM2I5YmItZmQ0Mi00MGQxLWI1NzYtNWVhZDZhOGNjNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk4kFTMeYzoUnEk1hbIrT6o7zjkvRdAITw03 9kGeWiIpUP8A0fn1UDZXihVKs2F+a5cWPjtQ1r7BAfKLvF64jvpQO3+V6lcDLfhk +24VnLyglpsQyKAQw+N6nuXIvNx56CHaFuGaBeoRnvj3w2fojrzh7+zExR33S/F7 E9HSTBZWhPuNbt86a8EvLSMBhVIto6zF4fjpZs3NkxhmfCls6spDsE1perGaLCsx DbhXmFkcbzmUebzcT+Y37aKLc6ii32Sd7ceTaHGeh0y+A6FsAGrCjkJ9KurCnmr0 YwthClpG0QzY/7CEopz2Q6m23yY93zew77SYVMHJFfYvv7ZoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESATYr/2h+N4mnEmI4NTw+DWk7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0 Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMzRiZTliNDgtMGFhNC0z MzE0LWIyYTktNjJkMjJhNGE1YmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1 OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0 ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa7SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaK6nI4+LJPVfhWLYIk8iZHR44VUPu7hJHRIHvK+X6nyw6GkBF46vx7 bLSHYWx9Iaix+N8hl8CrEWFRx2+Okn0nbK8bghhEXzN40lWUpqhaQyxLseV7CK+L keq3BCNTc7vLVf9R+Lo6tuj6XrGWHL/S1pDt2CTB+yOvXNwe79eCrt0b7dxshRFP rBLDbEVkJ4M4slOZU6gbwM/FehbXxjH71WnfgRg+iFv0D0dXYdSeT3A/NhJZ7iMA W3GegGZfUngKwFnBMGO1jXaLJDIpvbQB8iRA++zrXAC6x9Q1Zx19KywP890CzQPR D8pYAU/yjg4nSSBLBpjD3TLZTU5pLoQ= -----END CERTIFICATE-----Generated at Sun Jun 29 08:08:23 2025 by rpki-client