$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: ns6rTfoKlrYG7KxzfVX/RxNrH3fChwpIiFeXPovRhcY= Subject key identifier: 1F:63:A8:A4:77:91:0B:22:E5:C8:4D:BA:8C:60:A9:BC:8E:98:7E:7A Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584A03A54D54F697D2CD9C1F7AE0 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4d:54:f6:97:d2:cd:9c:1f:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=8ec81b4a-cd8b-4f55-8b3c-4b2574f2e892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:67:c8:bd:82:e8:fc:0b:2b:0b:b5:46:fc: a9:ff:6b:82:3e:df:c7:b2:86:aa:84:c0:c1:6c:13: f4:14:d9:3d:36:bd:fc:62:6b:15:c9:ec:52:65:c3: 21:ae:c3:8a:63:f2:a2:c6:90:79:2c:4c:c4:d3:7a: 14:7d:2c:a2:b5:c3:8a:77:c7:cd:70:a5:3f:8b:5d: 40:7a:47:ed:0f:73:3d:eb:fc:79:51:d3:db:8f:f4: c7:1f:c6:90:53:ba:7a:33:64:37:24:9d:df:5f:4c: 05:b6:fb:fa:b6:55:ab:ac:a4:26:39:28:da:c9:c6: df:2a:6a:57:55:b8:11:dd:7e:de:61:a2:4c:dd:18: 34:7b:7e:a2:ae:cd:c6:60:6c:56:61:16:e7:41:6e: 1b:70:e1:fc:3b:f1:3f:6e:b5:eb:3b:f4:99:bf:90: ce:76:1c:fa:56:ae:cc:92:41:8a:b4:7b:94:a7:6d: f6:95:8f:e2:0a:6e:57:60:5b:6d:6b:c7:73:0d:7d: 8e:b0:47:4d:94:b5:55:12:a2:3a:51:c1:86:aa:89: 01:80:0b:1d:1c:2e:49:d9:8c:57:92:05:52:eb:16: 90:fd:31:11:d9:4f:dd:2e:a3:09:d6:a5:a7:ef:a3: 36:11:17:05:cb:4f:66:93:c7:1b:a9:0d:62:05:fb: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:63:A8:A4:77:91:0B:22:E5:C8:4D:BA:8C:60:A9:BC:8E:98:7E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:14:5f:66:cf:61:40:20:0e:09:95:fa:eb:b3:b7:65:5c:fa: d9:1f:4c:6b:54:7e:68:f6:4c:02:62:39:83:37:76:ff:e5:bb: e6:04:be:72:fd:9a:c8:8c:93:ca:a6:89:fb:1a:d7:72:19:1c: 32:48:7c:fe:ee:ed:df:ad:92:cb:63:36:52:cd:c5:9b:87:13: 8b:ff:b3:48:f4:27:4d:c1:42:0e:b9:42:2b:dd:8e:32:bc:cf: 0a:4e:a9:64:dc:8b:62:fb:3e:cd:da:b9:73:f1:66:a9:2a:11: 64:be:c9:24:28:82:2a:fd:b1:5f:e4:05:cd:1e:8f:b1:71:e5: d2:bf:8b:9e:13:fd:51:d7:df:5d:49:5c:2b:74:94:69:fb:ff: f9:30:93:d2:9d:55:da:6c:22:84:96:20:a8:66:54:28:5b:d4: 27:f6:ac:95:a4:df:e3:44:81:26:24:78:c9:5d:49:f3:08:e8: 9a:68:80:d8:07:2d:ec:b7:56:85:70:4e:81:b1:59:de:87:73: 81:3a:bc:c8:19:be:c2:3c:ab:c9:1b:c3:61:c8:3b:81:d1:c6: 9d:41:e8:85:1b:3a:89:55:b2:59:b4:20:66:47:d1:23:74:43: 0b:b2:77:51:cb:ea:29:73:ae:b7:36:1d:ca:d0:98:d0:b7:f8: 5f:ce:3d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpU1U9pfSzZwfeuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OGVjODFiNGEtY2Q4Yi00ZjU1LThiM2MtNGIyNTc0ZjJlODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ5nyL2C6PwLKwu1Rvyp/2uCPt/HsoaqhMDB bBP0FNk9Nr38YmsVyexSZcMhrsOKY/KixpB5LEzE03oUfSyitcOKd8fNcKU/i11A ekftD3M96/x5UdPbj/THH8aQU7p6M2Q3JJ3fX0wFtvv6tlWrrKQmOSjaycbfKmpX VbgR3X7eYaJM3Rg0e36irs3GYGxWYRbnQW4bcOH8O/E/brXrO/SZv5DOdhz6Vq7M kkGKtHuUp232lY/iCm5XYFtta8dzDX2OsEdNlLVVEqI6UcGGqokBgAsdHC5J2YxX kgVS6xaQ/TER2U/dLqMJ1qWn76M2ERcFy09mk8cbqQ1iBfua4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9jqKR3kQsi5chNuoxgqbyOmH56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4UX2bPYUAgDgmV+uuzt2Vc+tkfTGtUfmj2TAJiOYM3dv/lu+YEvnL9 msiMk8qmifsa13IZHDJIfP7u7d+tkstjNlLNxZuHE4v/s0j0J03BQg65QivdjjK8 zwpOqWTci2L7Ps3auXPxZqkqEWS+ySQogir9sV/kBc0ej7Fx5dK/i54T/VHX311J XCt0lGn7//kwk9KdVdpsIoSWIKhmVChb1Cf2rJWk3+NEgSYkeMldSfMI6JpogNgH Ley3VoVwToGxWd6Hc4E6vMgZvsI8q8kbw2HIO4HRxp1B6IUbOolVslm0IGZH0SN0 Qwuyd1HL6ilzrrc2HcrQmNC3+F/OPUc= -----END CERTIFICATE-----Generated at Mon Jun 30 17:49:18 2025 by rpki-client