$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa File: 2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json) Hash identifier: /6MPVv1DIXFaiMejZyZLCfQ9ZwdoIbnl4X/rvMEksjw= Subject key identifier: 29:17:A9:E3:E5:F3:60:79:EF:19:D1:D8:24:19:CD:33:66:D0:2B:97 Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Certificate serial: 010D0C9F4328584A3A158A000F04648693DFF280 Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 19415 IP address blocks: 23.166.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:8a:00:0f:04:64:86:93:df:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=5a5acd76-d4fe-49fb-8427-ce7793c1a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:19:d7:96:7c:dd:34:c9:fa:c0:a9:d7:eb: ef:33:bc:68:c9:10:57:92:b7:ce:3d:16:5b:7d:17: 96:9c:14:2d:ad:fc:1d:42:72:2e:d5:d0:bd:05:6c: d9:98:5e:86:04:30:61:49:d2:19:d1:69:7d:c9:a6: 6d:db:39:01:39:eb:e0:b8:b5:69:50:28:48:ed:4d: 78:66:85:3f:3f:18:b4:0b:30:9f:ad:5b:d7:bd:ae: 58:69:b7:f0:2b:d0:e2:4d:ec:8f:7d:68:42:01:2f: b0:d0:5d:27:e5:6f:5a:86:ea:1c:72:75:7a:05:da: 9d:fb:37:42:e3:1e:6a:e4:0f:5a:c5:c5:a7:57:ca: c8:e4:c6:ec:b6:61:77:53:16:08:c4:f1:68:ae:50: 3a:f0:15:4d:14:8a:79:45:31:5d:50:4e:47:9a:c2: 20:81:11:30:cd:3f:af:e7:3e:b3:80:0f:6f:d7:f5: 73:49:11:2c:da:f1:5d:33:4d:6f:85:91:68:b8:35: ea:eb:34:dd:d0:27:f3:61:ba:e2:62:e8:4b:05:66: 30:c8:71:d9:e2:b2:ba:25:c8:13:73:05:a2:c7:52: 89:e7:15:1f:86:40:d1:ee:f6:70:c1:00:e7:d0:2f: dd:fd:af:bf:9c:ae:fa:6e:d8:42:55:60:fa:83:28: 25:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:A9:E3:E5:F3:60:79:EF:19:D1:D8:24:19:CD:33:66:D0:2B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl X509v3 Authority Key Identifier: keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:49:29:c6:b2:c2:56:14:b7:eb:c2:64:4c:94:f4:2e:84: 18:c9:34:7c:31:1d:0b:3f:a7:01:f2:28:10:92:06:27:e7:1d: 60:f1:87:19:52:b9:3f:61:af:ec:8b:bf:05:b5:b0:ee:cd:15: 16:93:00:f2:64:a4:9e:c0:1e:66:65:f4:9f:7b:f9:26:6c:7e: fa:51:f9:ca:d2:36:51:bb:d6:36:2d:72:69:e9:c5:fb:22:0c: d7:de:0a:dc:a8:68:57:f8:fb:e0:bf:bd:4a:6d:ef:07:50:d1: 66:0f:c6:13:b9:ff:b8:6a:48:bb:df:e6:dc:e7:12:4d:f9:2e: 7d:ba:4b:6f:5b:42:43:0a:63:bd:9f:9d:e3:bb:e3:c6:ed:e8: 2c:9e:0e:82:ec:bf:b8:07:b5:85:79:7d:00:ac:69:82:c8:89: 94:d7:e9:48:82:8f:27:d4:7a:af:34:a5:91:d5:30:47:b8:f1: 4e:27:10:bd:b9:e1:29:81:08:64:6e:4b:64:a6:61:74:81:f5: 81:12:ed:36:bc:63:25:9b:fb:93:77:73:33:e8:2f:a4:39:18: 80:bb:2b:26:de:9a:16:72:0a:7e:c1:1c:1d:c5:d0:5e:1b:1c: 5c:b5:b9:dd:54:71:65:d2:24:b8:f1:bb:64:6c:cb:b3:4c:ad: a6:11:3a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYoADwRkhpPf8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm MGU1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NWE1YWNkNzYtZDRmZS00OWZiLTg0MjctY2U3NzkzYzFhMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoygZ15Z83TTJ+sCp1+vvM7xoyRBXkrfOPRZb fReWnBQtrfwdQnIu1dC9BWzZmF6GBDBhSdIZ0Wl9yaZt2zkBOevguLVpUChI7U14 ZoU/Pxi0CzCfrVvXva5YabfwK9DiTeyPfWhCAS+w0F0n5W9ahuoccnV6Bdqd+zdC 4x5q5A9axcWnV8rI5MbstmF3UxYIxPForlA68BVNFIp5RTFdUE5HmsIggREwzT+v 5z6zgA9v1/VzSREs2vFdM01vhZFouDXq6zTd0CfzYbriYuhLBWYwyHHZ4rK6JcgT cwWix1KJ5xUfhkDR7vZwwQDn0C/d/a+/nK76bthCVWD6gyglYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkXqePl82B57xnR2CQZzTNm0CuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMmI5ODUxMmYtZTc4MS0z YjlhLWI5NTQtNmJiZGFlM2I0M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0 ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2 ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh ZGNkNmYwZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6eSSnGssJWFLfrwmRMlPQuhBjJNHwxHQs/pwHyKBCSBifnHWDxhxlS uT9hr+yLvwW1sO7NFRaTAPJkpJ7AHmZl9J97+SZsfvpR+crSNlG71jYtcmnpxfsi DNfeCtyoaFf4++C/vUpt7wdQ0WYPxhO5/7hqSLvf5tznEk35Ln26S29bQkMKY72f neO748bt6CyeDoLsv7gHtYV5fQCsaYLIiZTX6UiCjyfUeq80pZHVMEe48U4nEL25 4SmBCGRuS2SmYXSB9YES7Ta8YyWb+5N3czPoL6Q5GIC7KybemhZyCn7BHB3F0F4b HFy1ud1UcWXSJLjxu2Rsy7NMraYROks= -----END CERTIFICATE-----Generated at Mon Jun 30 01:18:12 2025 by rpki-client