$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json) Hash identifier: 37I6w+q6kTHJpz3WUq2cSLxky+3S2I+OMFXl0gw0QdI= Subject key identifier: 74:8A:D2:A1:51:FA:30:3E:67:BD:2A:25:76:CB:47:4C:6F:33:3C:AE Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F4328584A51D0809E51CEBCB20DB28000 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 26886 IP address blocks: 23.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:80:9e:51:ce:bc:b2:0d:b2:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=550beebc-2df5-42a4-88e3-80eaf2cd5c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:77:06:aa:e3:2b:06:12:75:85:96:33:54: 2e:43:16:85:9d:68:f5:73:80:f1:15:44:dc:30:ed: 5e:d5:bc:60:5b:e2:8b:cc:18:54:6a:b0:5b:f8:e4: 3c:8c:2a:d4:3d:87:02:99:ab:ca:ba:8b:ea:77:1e: 11:9b:8b:44:53:ce:fa:eb:17:b4:8c:45:00:1f:7f: ab:55:10:d8:6c:c5:ca:fe:42:21:cc:fe:f7:41:6a: 55:10:f7:57:21:69:1b:dd:e5:85:e0:ed:cf:8d:ab: c4:13:6d:b1:07:bb:21:dc:2e:96:fc:da:00:01:11: 2b:9a:5f:ce:9d:58:0f:5e:07:b2:1d:b9:2f:ba:86: 3f:71:83:18:db:7b:0d:8d:dd:1c:e2:9e:77:1b:20: 9c:87:06:2d:4e:f2:a6:0f:2f:52:1f:82:e0:0a:f3: 2f:8e:fd:16:b0:5d:d6:3f:ec:49:73:a8:06:e3:37: c6:a8:92:8b:26:43:82:32:22:df:65:1d:48:13:01: 5c:23:ff:cb:39:7e:81:fa:1b:af:7d:b4:75:48:5e: 16:b8:ab:6d:bb:6f:29:bc:35:7c:8c:d0:b3:9a:d3: 9b:ea:4a:3a:ae:01:9f:0d:14:2b:e8:c1:65:72:bf: be:88:15:ff:86:f6:34:e1:33:30:b1:20:f5:58:96: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8A:D2:A1:51:FA:30:3E:67:BD:2A:25:76:CB:47:4C:6F:33:3C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a1:69:b0:3a:1e:0e:3b:f3:88:2e:6f:22:41:0f:60:6d:79: d6:ec:51:8b:42:1c:b1:87:1a:9a:52:07:05:e8:ae:aa:26:a0: fc:e7:89:2b:e8:4f:f6:eb:a3:a5:b7:2a:5b:e5:72:14:d5:33: e2:d7:6e:4e:75:e7:3c:da:58:c3:b1:b0:85:aa:da:52:c5:e6: 63:8b:23:ee:e5:c9:f5:19:ee:ea:a5:5f:94:1c:f3:1b:79:cf: ed:d4:bb:67:9c:95:8a:45:ab:a5:aa:89:65:30:71:1b:d4:38: f1:67:c7:a6:f3:1f:9a:49:ef:07:86:a0:8e:43:df:6e:d5:42: ec:54:7b:7c:f0:68:cb:3f:a7:d1:cd:bd:0f:d1:ea:ef:25:e6: 9c:2d:76:7e:bb:ae:39:27:7e:9c:ac:dc:3d:b9:4f:f7:df:9c: 7b:c6:b5:3f:94:1a:41:c0:3c:1a:58:9f:76:d4:a8:c6:e6:07: b9:20:7f:0d:aa:1c:dc:e3:7f:be:c2:95:93:44:fe:8e:03:3b: 5b:88:d8:49:e5:0c:44:e1:c9:3c:e5:6e:3a:56:3e:b1:1d:de: 50:af:e5:c7:91:2f:28:64:1c:b2:53:e2:16:0b:cc:11:8d:9c: 66:b9:15:70:70:a9:90:81:86:bc:62:78:fa:67:9a:a6:1b:1b: af:b7:70:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0ICeUc68sg2ygAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTUwYmVlYmMtMmRmNS00MmE0LTg4ZTMtODBlYWYyY2Q1YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM93BqrjKwYSdYWWM1QuQxaFnWj1c4DxFUTc MO1e1bxgW+KLzBhUarBb+OQ8jCrUPYcCmavKuovqdx4Rm4tEU8766xe0jEUAH3+r VRDYbMXK/kIhzP73QWpVEPdXIWkb3eWF4O3PjavEE22xB7sh3C6W/NoAARErml/O nVgPXgeyHbkvuoY/cYMY23sNjd0c4p53GyCchwYtTvKmDy9SH4LgCvMvjv0WsF3W P+xJc6gG4zfGqJKLJkOCMiLfZR1IEwFcI//LOX6B+huvfbR1SF4WuKttu28pvDV8 jNCzmtOb6ko6rgGfDRQr6MFlcr++iBX/hvY04TMwsSD1WJYHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSK0qFR+jA+Z70qJXbLR0xvMzyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMjk5NDlkYTYtOGNiNS0z NTQ1LTk1YzYtNjVlNDdhMGNjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2habA6Hg4784gubyJBD2BtedbsUYtCHLGHGppSBwXorqomoPzniSvo T/bro6W3KlvlchTVM+LXbk515zzaWMOxsIWq2lLF5mOLI+7lyfUZ7uqlX5Qc8xt5 z+3Uu2eclYpFq6WqiWUwcRvUOPFnx6bzH5pJ7weGoI5D327VQuxUe3zwaMs/p9HN vQ/R6u8l5pwtdn67rjknfpys3D25T/ffnHvGtT+UGkHAPBpYn3bUqMbmB7kgfw2q HNzjf77ClZNE/o4DO1uI2EnlDEThyTzlbjpWPrEd3lCv5ceRLyhkHLJT4hYLzBGN nGa5FXBwqZCBhrxiePpnmqYbG6+3cOs= -----END CERTIFICATE-----Generated at Mon Jun 30 17:34:06 2025 by rpki-client