$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa File: bd2f992d-6e4a-3230-8636-0526743d0a78.roa (raw, json) Hash identifier: 2pnl4EUBACMnMOWRae0NscmqMB/UZhPidT85VE09wFY= Subject key identifier: B1:0F:AF:67:22:A5:AB:55:E2:E9:21:3F:F9:90:0F:C9:3D:68:E5:C6 Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F43285849FE0FFDBA16AE5500DF6C1B68 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 399646 IP address blocks: 23.165.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fd:ba:16:ae:55:00:df:6c:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=2aa5d14a-c3b4-42a0-8928-9e6a789f6b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:19:83:dd:7f:72:43:64:e2:aa:a5:ab:fb: e8:f5:ac:06:8a:79:1a:2c:3e:2d:1b:f2:87:89:e8: 81:1e:cd:26:cb:06:e3:9f:fe:6d:a1:8a:89:1a:e1: 9f:21:f6:31:db:7e:49:36:3b:3b:bf:26:d5:fd:2a: da:58:ec:e1:c3:51:f4:9b:7f:8b:bc:e6:9b:63:0b: b0:aa:05:95:6f:16:e0:d0:17:65:ea:ba:28:bc:51: 27:b9:ff:a5:ef:e2:06:04:e9:3d:6f:ca:02:f8:b2: 82:b2:69:26:a4:b4:05:31:c7:f4:cc:ae:0a:44:63: ce:f7:92:23:cf:95:db:99:02:70:03:c1:45:3b:78: 02:57:31:6e:2d:df:ad:05:8a:34:86:09:27:e1:05: ac:24:e3:cf:e7:4d:95:55:91:6e:7b:fd:c2:b9:84: 8a:b9:a4:d9:f5:58:de:b3:ae:d0:29:92:20:3d:29: fe:0e:0d:7d:9f:c4:14:e1:f2:ec:35:a6:24:b3:38: a8:f4:6f:4a:a5:05:69:02:11:2e:48:2c:c2:59:71: 28:be:24:7e:dd:c4:3a:dc:81:4f:7f:dc:b9:78:23: c1:3e:49:2a:d7:bb:a3:99:33:5c:4a:5b:80:d8:03: 75:f3:fa:f0:96:f6:d1:a4:b4:c3:05:4a:08:76:f7: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:AF:67:22:A5:AB:55:E2:E9:21:3F:F9:90:0F:C9:3D:68:E5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 23.165.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:74:00:e8:5c:65:af:e3:90:43:3c:d4:d1:c0:27:85:05:72: 50:2a:66:31:ca:16:01:39:bd:91:0a:85:62:8c:6a:bb:38:df: 31:fd:71:06:6f:af:dd:fb:92:56:c8:49:24:62:3e:84:d1:b1: 82:d6:f2:49:a0:11:02:40:62:6a:7b:02:f4:3c:22:f8:f8:cb: 5f:de:64:d1:99:79:43:42:0d:d8:e8:40:8a:c3:e7:39:a5:de: 20:9a:7c:df:a4:dd:a7:45:28:0c:e6:e3:7f:77:9f:eb:7f:b0: 2c:a3:ae:05:00:2c:56:7d:45:44:3b:31:d1:b7:04:d3:2b:10: 81:ad:2a:16:6c:c5:3a:5d:ed:00:1c:a2:25:55:f9:60:36:3c: 3b:04:64:85:d1:aa:65:41:db:f8:a6:70:f6:91:c1:04:d6:c0: 2d:ef:6b:aa:4d:75:74:6f:01:e3:46:a4:52:3e:6e:3a:77:06: 24:82:25:fd:b8:37:b5:34:5d:e3:17:ea:15:f3:6a:f9:b3:8f: 25:62:fc:9e:80:33:6a:b1:6b:1d:94:b3:2d:af:a1:b7:20:2a: 5a:3e:b4:f8:72:b5:85:db:3b:21:8f:3d:f5:77:e4:ac:e2:ca: 8c:0b:50:ff:91:23:f3:52:42:0f:17:ca:a7:f5:d4:ef:a3:4b: 7d:25:f4:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/26Fq5VAN9sG2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MmFhNWQxNGEtYzNiNC00MmEwLTg5MjgtOWU2YTc4OWY2YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH0Zg91/ckNk4qqlq/vo9awGinkaLD4tG/KH ieiBHs0mywbjn/5toYqJGuGfIfYx235JNjs7vybV/SraWOzhw1H0m3+LvOabYwuw qgWVbxbg0Bdl6roovFEnuf+l7+IGBOk9b8oC+LKCsmkmpLQFMcf0zK4KRGPO95Ij z5XbmQJwA8FFO3gCVzFuLd+tBYo0hgkn4QWsJOPP502VVZFue/3CuYSKuaTZ9Vje s67QKZIgPSn+Dg19n8QU4fLsNaYkszio9G9KpQVpAhEuSCzCWXEoviR+3cQ63IFP f9y5eCPBPkkq17ujmTNcSluA2AN18/rwlvbRpLTDBUoIdvcOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEPr2cipatV4ukhP/mQD8k9aOXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvYmQyZjk5MmQtNmU0YS0z MjMwLTg2MzYtMDUyNjc0M2QwYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp0AOhcZa/jkEM81NHAJ4UFclAqZjHKFgE5vZEKhWKMars43zH9cQZv r937klbISSRiPoTRsYLW8kmgEQJAYmp7AvQ8Ivj4y1/eZNGZeUNCDdjoQIrD5zml 3iCafN+k3adFKAzm4393n+t/sCyjrgUALFZ9RUQ7MdG3BNMrEIGtKhZsxTpd7QAc oiVV+WA2PDsEZIXRqmVB2/imcPaRwQTWwC3va6pNdXRvAeNGpFI+bjp3BiSCJf24 N7U0XeMX6hXzavmzjyVi/J6AM2qxax2Usy2vobcgKlo+tPhytYXbOyGPPfV35Kzi yowLUP+RI/NSQg8Xyqf11O+jS30l9Ew= -----END CERTIFICATE-----Generated at Mon Jun 30 16:09:39 2025 by rpki-client