$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: NttF12Exxk3dHiMax4TK29YzgDOflLLH1U5MtNL3JUk= Subject key identifier: 60:5B:24:5B:D5:E0:61:19:F0:BF:13:16:F1:D1:4C:6E:67:A2:19:3D Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F43285849E91FA7CF9E476A485204A180 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a7:cf:9e:47:6a:48:52:04:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=4ff0d75e-2e23-4c84-8e62-83c6fc8cce43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:17:20:39:d9:9f:2b:07:31:8d:ef:e9:e5: a9:d8:15:54:7e:b7:a5:55:16:5a:11:97:06:12:c8: 76:36:37:15:64:30:58:74:ef:ed:ba:43:8e:41:91: f9:68:17:a8:e4:9b:61:f9:be:a7:82:0a:17:4e:d7: e3:df:72:33:60:aa:44:f6:16:4b:47:1a:43:14:a0: be:54:0a:66:03:8e:04:0a:21:28:24:58:e2:b1:c4: 3d:43:6d:1a:cd:29:92:25:4d:62:6c:fe:df:58:54: bb:46:4e:90:3e:80:1f:0e:5d:bf:0b:5b:bf:41:f3: 10:53:02:21:c1:1d:13:42:10:50:68:dd:7b:bd:3d: a2:ed:9b:22:b4:65:16:89:ff:ea:81:19:a6:93:50: fb:6d:19:59:3c:12:ae:54:18:aa:f7:92:19:f7:b1: 3d:2f:78:1b:7f:bb:66:71:d9:f9:64:8f:ff:a0:0f: 97:d0:ea:2f:d1:a2:77:18:c1:d7:bb:6e:46:a8:4e: 31:d7:bb:e5:e7:3d:60:f1:69:6a:72:41:9c:2c:f1: 3f:bc:40:9c:ee:d8:43:f4:44:05:b3:30:11:a5:4d: 26:bb:79:d3:ac:6b:2b:5d:6a:f7:93:4f:e0:b7:e8: 84:da:c9:3b:f0:fa:cd:ce:d7:63:ab:e7:a0:08:01: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:24:5B:D5:E0:61:19:F0:BF:13:16:F1:D1:4C:6E:67:A2:19:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0c:39:de:24:f0:35:fd:3c:8f:75:64:1a:a5:a9:d0:2c:71: 53:b0:b1:5b:fb:26:e1:4f:2b:1f:43:7b:06:96:8d:2e:0f:66: b1:be:a8:6b:aa:67:73:a7:50:28:26:eb:fd:87:a5:2f:ba:ef: 9f:9d:57:1f:28:af:7e:f2:34:4f:88:76:c6:5f:73:70:c7:8f: fc:0d:67:5e:9d:c1:03:b5:f8:d0:83:ed:4b:31:c6:63:5e:d3: 4c:33:12:7a:58:d5:32:60:96:a1:42:44:b3:41:52:93:92:b7: 1d:2a:b7:5f:b3:4d:7e:b1:86:d0:91:ec:84:e0:11:ac:69:2b: 07:e1:21:a6:63:62:64:0a:6a:89:35:f7:00:92:3c:ef:ae:fc: b2:07:8e:cc:b7:b1:e5:36:81:2b:f9:3f:1b:0c:19:76:bf:a2: 95:f3:88:cb:cd:52:4b:d1:ff:4d:60:93:92:be:7d:6e:4c:94: 65:ea:57:6d:70:a7:48:18:00:54:0a:a3:3b:23:7f:de:ce:ee: 9e:3b:7a:eb:7e:d8:3d:3b:3c:58:09:7e:f8:e8:de:8a:10:90: 7b:1f:b3:30:8f:9c:62:9f:2f:bf:cb:e1:58:f9:72:91:bf:22: 48:c5:9a:1b:ca:4d:9f:8b:bb:dd:97:d8:f3:4c:ac:d9:cd:01: 26:fe:95:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6fPnkdqSFIEoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NGZmMGQ3NWUtMmUyMy00Yzg0LThlNjItODNjNmZjOGNjZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIkXIDnZnysHMY3v6eWp2BVUfrelVRZaEZcG Esh2NjcVZDBYdO/tukOOQZH5aBeo5Jth+b6nggoXTtfj33IzYKpE9hZLRxpDFKC+ VApmA44ECiEoJFjiscQ9Q20azSmSJU1ibP7fWFS7Rk6QPoAfDl2/C1u/QfMQUwIh wR0TQhBQaN17vT2i7ZsitGUWif/qgRmmk1D7bRlZPBKuVBiq95IZ97E9L3gbf7tm cdn5ZI//oA+X0Oov0aJ3GMHXu25GqE4x17vl5z1g8WlqckGcLPE/vECc7thD9EQF szARpU0mu3nTrGsrXWr3k0/gt+iE2sk78PrNztdjq+egCAGvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBbJFvV4GEZ8L8TFvHRTG5nohk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoMOd4k8DX9PI91ZBqlqdAscVOwsVv7JuFPKx9DewaWjS4PZrG+qGuq Z3OnUCgm6/2HpS+675+dVx8or37yNE+IdsZfc3DHj/wNZ16dwQO1+NCD7UsxxmNe 00wzEnpY1TJglqFCRLNBUpOStx0qt1+zTX6xhtCR7ITgEaxpKwfhIaZjYmQKaok1 9wCSPO+u/LIHjsy3seU2gSv5PxsMGXa/opXziMvNUkvR/01gk5K+fW5MlGXqV21w p0gYAFQKozsjf97O7p47eut+2D07PFgJfvjo3ooQkHsfszCPnGKfL7/L4Vj5cpG/ IkjFmhvKTZ+Lu92X2PNMrNnNASb+lRg= -----END CERTIFICATE-----Generated at Tue Jul 1 23:46:37 2025 by rpki-client