$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa File: a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa (raw, json) Hash identifier: 7ADc+kWAAGS4sPRCH9OJ9oTlA/gPfXznxzKdH5rSCr0= Subject key identifier: 4C:87:DD:2D:A0:F7:7F:DA:25:27:DB:0A:9B:D5:0F:30:C5:E6:AC:20 Certificate issuer: /CN=750923cb-8ed4-4954-b4bb-8250cc11c580 Certificate serial: 010D0C9F43285849F2E54B101A9173BDF3E03D00 Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 33182 IP address blocks: 67.23.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4b:10:1a:91:73:bd:f3:e0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3eba8fdf-6ef2-4581-907e-0393cfde6b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:e4:d7:03:06:96:a1:da:cf:1c:02:6c:79: a2:63:8e:55:d7:4a:11:01:38:e8:26:c4:ee:55:35: 83:92:95:5b:07:e9:3c:a5:97:77:1e:a8:57:46:4c: 77:57:01:46:b3:78:45:88:25:36:fd:8d:e8:8f:ab: 7b:c2:c1:8f:b0:80:37:eb:9a:eb:c7:f2:f6:5f:09: 2d:31:ef:64:de:23:ad:27:69:f1:b8:68:07:ac:85: d7:75:70:5c:16:d3:2e:a9:44:72:37:48:79:45:37: 32:70:83:a5:2d:4b:81:34:4d:62:19:a2:90:3e:eb: 0b:ae:e7:0b:2c:f0:09:ff:81:14:cb:9c:bc:f6:41: a4:b3:70:8e:de:ab:ff:91:eb:9f:6f:bc:35:eb:29: 11:2c:a9:79:ed:7a:d4:89:60:46:70:08:12:36:f5: 5b:c9:f3:92:58:c7:71:39:18:6e:cf:4b:f1:a8:5e: 92:44:2f:d5:45:3d:54:7f:d1:10:0b:3b:87:67:74: b7:38:0d:12:b2:80:38:4d:c0:82:a6:da:7e:c9:a9: 80:c5:a5:e8:77:ce:b7:4e:a9:a3:2e:3b:bf:0c:b5: c4:2d:34:db:5c:68:ae:bd:2e:19:e8:3d:84:de:31: 08:23:b2:40:bf:b8:f9:89:24:f4:a9:5b:ee:d7:6c: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:DD:2D:A0:F7:7F:DA:25:27:DB:0A:9B:D5:0F:30:C5:E6:AC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl X509v3 Authority Key Identifier: keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer sbgp-ipAddrBlock: critical IPv4: 67.23.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b4:e3:56:00:86:1b:6e:67:a5:55:ff:90:96:52:07:8e:80: 78:b7:2f:5c:f7:7e:2b:53:29:b2:85:59:d0:ef:7e:c6:32:bc: 30:98:6f:9b:d4:be:ce:3d:42:0f:1f:0c:64:a7:7a:ac:c1:2b: 71:b7:5f:ed:53:95:3b:a8:c8:a2:3d:c3:30:a9:96:cd:9f:57: cf:06:e8:31:8c:7f:15:ea:c7:d3:a4:59:81:96:b8:2b:15:5b: db:f7:bc:55:71:79:d9:b0:2f:4f:3d:19:41:20:1a:46:a8:99: 31:4a:43:a4:f1:66:9d:3c:15:4f:23:02:fd:f1:9a:2c:ab:43: 2b:e6:3b:60:81:bf:06:7f:47:10:86:32:b4:b0:79:2e:43:b0: 53:01:36:a3:6d:61:c3:bb:70:70:9c:55:9f:02:ce:36:57:43: 9a:58:cd:c4:f8:8c:4e:ba:41:d6:86:9e:a8:1f:c9:16:71:b3: 80:b3:51:97:53:24:d9:58:98:d7:d0:09:59:ea:f8:ab:ba:6b: b7:1a:c0:15:88:85:5c:71:78:0f:37:4b:cc:ac:74:0b:63:c1: 94:db:5b:29:ac:39:f9:e2:c9:27:d9:4f:0e:a0:b6:6f:ee:60: e3:a2:b3:61:bb:3a:b6:e8:0a:ba:cb:de:09:76:40:80:a9:ec: 91:d4:c9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UsQGpFzvfPgPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzUwOTIzY2ItOGVkNC00OTU0LWI0YmItODI1MGNjMTFj NTgwMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2ViYThmZGYtNmVmMi00NTgxLTkwN2UtMDM5M2NmZGU2YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWXk1wMGlqHazxwCbHmiY45V10oRATjoJsTu VTWDkpVbB+k8pZd3HqhXRkx3VwFGs3hFiCU2/Y3oj6t7wsGPsIA365rrx/L2Xwkt Me9k3iOtJ2nxuGgHrIXXdXBcFtMuqURyN0h5RTcycIOlLUuBNE1iGaKQPusLrucL LPAJ/4EUy5y89kGks3CO3qv/keufb7w16ykRLKl57XrUiWBGcAgSNvVbyfOSWMdx ORhuz0vxqF6SRC/VRT1Uf9EQCzuHZ3S3OA0SsoA4TcCCptp+yamAxaXod863Tqmj Lju/DLXELTTbXGiuvS4Z6D2E3jEII7JAv7j5iST0qVvu12x4JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyH3S2g93/aJSfbCpvVDzDF5qwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5 MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUwY2MxMWM1ODAvYTg0NDZmYTktOWY5ZS0z Njc3LTgwMTItMWUxY2M5MTQyMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzUwOTIzY2ItOGVkNC00OTU0LWI0 YmItODI1MGNjMTFjNTgwLzc1MDkyM2NiLThlZDQtNDk1NC1iNGJiLTgyNTBjYzEx YzU4MC5jcmwwHwYDVR0jBBgwFoAUV8+Elu/dVA0K4QfGR5KfA6MSMOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUw Y2MxMWM1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQxfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS041YAhhtuZ6VV/5CWUgeOgHi3L1z3fitTKbKFWdDvfsYyvDCYb5vU vs49Qg8fDGSneqzBK3G3X+1TlTuoyKI9wzCpls2fV88G6DGMfxXqx9OkWYGWuCsV W9v3vFVxedmwL089GUEgGkaomTFKQ6TxZp08FU8jAv3xmiyrQyvmO2CBvwZ/RxCG MrSweS5DsFMBNqNtYcO7cHCcVZ8CzjZXQ5pYzcT4jE66QdaGnqgfyRZxs4CzUZdT JNlYmNfQCVnq+Ku6a7cawBWIhVxxeA83S8ysdAtjwZTbWymsOfniySfZTw6gtm/u YOOis2G7OrboCrrL3gl2QICp7JHUyWo= -----END CERTIFICATE-----Generated at Wed Jul 2 03:41:18 2025 by rpki-client