$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa File: 9a35aab1-3858-3df5-b514-667aa30d3359.roa (raw, json) Hash identifier: NrcNJwiZcotjwnasz+UlQtXetLGXXbOOfnLD1+4THBw= Subject key identifier: 0D:A4:2C:7F:4D:1A:BC:1B:9E:C4:D0:0D:2D:13:CC:CC:AF:65:53:D2 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F43285849D551C142E27E476BEBA79700 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa Signing time: Mon 12 May 2025 22:45:44 +0000 ROA not before: Mon 12 May 2025 22:45:44 +0000 ROA not after: Sun 10 Aug 2025 22:45:44 +0000 asID: 395400 IP address blocks: 168.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:51:c1:42:e2:7e:47:6b:eb:a7:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: May 12 22:45:44 2025 GMT Not After : Aug 10 22:45:44 2025 GMT Subject: CN=04c96970-78ef-4737-9332-edd76483a1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:98:4f:a0:5d:eb:d2:e8:80:99:04:81:52: 24:2c:c8:f1:f3:6d:48:f3:70:eb:20:af:52:e9:0c: de:0f:bb:cb:48:f0:09:fe:a5:4f:59:d9:da:79:1b: 0a:d8:de:3a:83:82:0a:a4:24:fe:b5:b8:ff:7f:b3: e7:53:62:ce:20:7a:e6:53:f8:5a:5f:1f:c2:1a:e5: 72:2c:4e:0b:e0:f0:70:0d:3d:fc:64:6e:ad:f4:07: 94:58:84:b2:e3:e9:43:48:57:bb:76:9a:77:8d:50: b4:57:86:a7:ce:bd:3e:2b:be:b5:5c:f5:ff:d6:0c: f9:67:ab:2e:77:02:8e:64:31:45:3e:ca:8e:7d:34: 8b:8f:73:08:ab:7c:b3:1f:f0:8a:72:07:da:ac:5f: 40:7b:36:6e:00:54:1b:a5:2e:a4:52:fb:95:82:b0: eb:b3:fe:b8:4c:f8:70:87:5f:70:17:94:ef:ee:fc: 0c:25:50:51:59:80:75:6b:ac:d7:1a:e7:b1:ee:2e: fd:b1:37:c9:54:fc:03:1e:63:e6:a4:10:70:40:b9: 0b:b8:82:b9:8b:f2:db:08:3c:09:de:f2:f8:2e:95: b9:87:19:47:54:dc:9a:17:eb:77:89:07:14:59:dc: 09:0f:17:d1:20:3f:c9:13:f7:84:81:f5:7f:5b:79: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:2C:7F:4D:1A:BC:1B:9E:C4:D0:0D:2D:13:CC:CC:AF:65:53:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:57:bc:fe:14:c4:4c:1a:55:de:03:4f:3a:a1:c5:47:bb:1e: 4b:ac:73:c9:0b:18:dc:0b:af:e2:a2:a0:ca:e8:b2:d7:8d:7d: e6:9a:f7:08:e4:53:51:e4:74:2e:ab:7c:cf:5d:c7:87:38:57: 80:3d:f5:54:70:19:80:7d:82:ae:f0:0f:b0:e9:e3:40:e9:50: 56:29:74:67:82:93:dd:47:93:9e:3b:e5:09:d0:4f:ba:9a:c5: d2:8c:91:0a:15:d2:5c:25:56:fb:03:94:31:ce:0f:b5:a8:f0: d5:cd:a6:ef:c4:d2:d4:f4:be:12:0d:a5:e6:e7:a0:46:3f:a6: 55:dd:a0:b3:bf:db:ff:a5:30:68:dc:c5:33:14:84:85:e0:e5: 93:89:56:9b:4a:0c:31:92:f6:e2:00:fd:28:6b:34:fb:df:5e: 04:e5:24:36:1f:d3:c5:6d:ae:24:3e:17:8e:63:2c:5a:48:23: 5a:b1:79:dc:95:12:45:57:d5:8f:c8:c3:37:b3:68:fb:04:db: a8:ab:de:25:61:f6:af:53:bf:99:57:b3:50:df:7c:22:66:ea: 7b:c5:3a:4f:a0:3e:df:03:9e:a4:6e:ba:f6:31:75:8e:6d:01: be:00:92:01:4a:f0:5d:8e:a3:7f:d4:9c:47:86:23:65:58:04: 14:97:65:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVUcFC4n5Ha+unlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MDUxMjIyNDU0NFoXDTI1MDgxMDIyNDU0NFowLzEtMCsGA1UEAxMk MDRjOTY5NzAtNzhlZi00NzM3LTkzMzItZWRkNzY0ODNhMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxSYT6Bd69LogJkEgVIkLMjx821I83DrIK9S 6QzeD7vLSPAJ/qVPWdnaeRsK2N46g4IKpCT+tbj/f7PnU2LOIHrmU/haXx/CGuVy LE4L4PBwDT38ZG6t9AeUWISy4+lDSFe7dpp3jVC0V4anzr0+K761XPX/1gz5Z6su dwKOZDFFPsqOfTSLj3MIq3yzH/CKcgfarF9AezZuAFQbpS6kUvuVgrDrs/64TPhw h19wF5Tv7vwMJVBRWYB1a6zXGuex7i79sTfJVPwDHmPmpBBwQLkLuIK5i/LbCDwJ 3vL4LpW5hxlHVNyaF+t3iQcUWdwJDxfRID/JE/eEgfV/W3k2XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2kLH9NGrwbnsTQDS0TzMyvZVPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvOWEzNWFhYjEtMzg1OC0z ZGY1LWI1MTQtNjY3YWEzMGQzMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqHv1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJXvP4UxEwaVd4DTzqhxUe7Hkusc8kLGNwLr+KioMrosteNfeaa9wjk U1HkdC6rfM9dx4c4V4A99VRwGYB9gq7wD7Dp40DpUFYpdGeCk91Hk5475QnQT7qa xdKMkQoV0lwlVvsDlDHOD7Wo8NXNpu/E0tT0vhINpebnoEY/plXdoLO/2/+lMGjc xTMUhIXg5ZOJVptKDDGS9uIA/ShrNPvfXgTlJDYf08VtriQ+F45jLFpII1qxedyV EkVX1Y/IwzezaPsE26ir3iVh9q9Tv5lXs1DffCJm6nvFOk+gPt8DnqRuuvYxdY5t Ab4AkgFK8F2Oo3/UnEeGI2VYBBSXZXs= -----END CERTIFICATE-----Generated at Tue Jul 1 16:04:23 2025 by rpki-client