$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa File: a3b8b1ae-7662-39b8-9a83-169fa490def1.roa (raw, json) Hash identifier: 2rTfJb+oX+atPVEmlch43qrqWYz7Ooyh9BuHxKzqJyI= Subject key identifier: 5C:F4:45:7B:C1:E4:45:D5:71:EB:B0:16:95:91:72:D6:2A:21:FF:7D Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584A45403E047F58640B2443B480 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 203888 IP address blocks: 23.167.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3e:04:7f:58:64:0b:24:43:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=d1823c59-976e-4a2e-a72d-f06b97f90ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:90:46:d3:d0:11:78:db:74:ec:0e:73:35: bf:29:7d:56:52:f2:6a:11:98:51:d9:3f:9f:89:0c: 74:30:34:b5:3c:f9:e2:86:11:35:54:af:4c:67:eb: 4f:78:3c:bc:fd:9b:8f:c3:87:61:4c:18:21:be:6c: 26:4f:74:bb:18:3d:ff:49:1e:96:83:d2:5b:de:fe: d0:dd:27:19:7b:52:4c:cf:4d:e7:77:7d:05:56:33: 09:a0:0d:13:2a:be:e8:19:99:63:8c:80:77:78:a1: 69:26:75:8a:4b:e2:27:9b:fa:17:02:e0:bf:51:d2: 36:9f:c3:8e:d0:85:6a:57:4c:b4:8d:e6:ed:da:a8: 28:e2:5f:70:04:b4:4c:9b:c3:0c:7e:50:f9:87:ab: e4:8d:62:83:55:35:36:0d:ca:49:96:64:96:15:26: a2:f0:b2:1d:fe:97:5f:64:01:40:09:c8:e9:1c:28: 05:8d:31:a5:86:99:71:46:97:ad:03:bc:44:64:cd: f2:cc:04:c1:fc:da:1d:43:ee:85:00:ce:ff:8c:dd: 7b:29:89:e2:d4:dc:6d:20:8e:ad:9c:77:2f:3f:19: 29:6f:95:23:52:a5:a1:45:e3:ea:bd:e4:b2:39:76: 37:63:2f:12:8c:a3:d1:c0:d8:50:1d:72:c2:e6:95: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:45:7B:C1:E4:45:D5:71:EB:B0:16:95:91:72:D6:2A:21:FF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv4: 23.167.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1f:f1:8b:69:eb:28:7d:bb:36:fe:4e:ba:ed:cf:24:89:94: 14:b8:5f:83:04:6b:71:79:dc:13:3d:ee:8f:a5:93:00:de:02: f6:7f:92:f6:66:42:30:13:62:bb:aa:54:e9:08:38:14:e0:54: 8a:16:8a:9e:74:a1:05:f8:f3:5a:fd:19:e7:80:6e:7c:17:e5: a5:7f:e5:f0:35:a8:d3:32:73:10:07:9e:87:c7:eb:97:34:1a: 9a:a4:32:fe:f6:c5:2b:65:85:21:54:e5:62:1f:12:a5:78:c0: 5e:53:3a:03:c1:02:d3:88:30:f9:0a:b2:1a:95:d8:fb:0c:32: 97:52:80:99:94:8a:22:7a:69:f3:56:e5:d6:ee:5e:cc:f2:58: 0b:eb:27:24:0c:4f:a6:a1:8b:6a:5e:54:38:a1:43:e0:6b:f9: 38:fb:8a:44:f8:1a:af:4c:e3:fb:f5:f3:6f:22:a8:c2:37:c7: 28:5b:9b:d5:be:cf:86:61:c6:96:18:48:30:4a:b0:fb:12:f7: 1b:65:c4:d8:7e:07:c8:96:55:8d:a7:93:cf:42:9a:47:5a:79: fc:db:ba:13:7a:70:36:09:bc:63:ea:d8:21:8c:d1:44:7e:4d: 45:88:d0:a8:6e:ed:bb:69:10:1e:4e:3c:5c:c9:b3:7e:9a:15: 2d:9a:20:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQD4Ef1hkCyRDtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDE4MjNjNTktOTc2ZS00YTJlLWE3MmQtZjA2Yjk3ZjkwYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyQRtPQEXjbdOwOczW/KX1WUvJqEZhR2T+f iQx0MDS1PPnihhE1VK9MZ+tPeDy8/ZuPw4dhTBghvmwmT3S7GD3/SR6Wg9Jb3v7Q 3ScZe1JMz03nd30FVjMJoA0TKr7oGZljjIB3eKFpJnWKS+Inm/oXAuC/UdI2n8OO 0IVqV0y0jebt2qgo4l9wBLRMm8MMflD5h6vkjWKDVTU2DcpJlmSWFSai8LId/pdf ZAFACcjpHCgFjTGlhplxRpetA7xEZM3yzATB/NodQ+6FAM7/jN17KYni1NxtII6t nHcvPxkpb5UjUqWhRePqveSyOXY3Yy8SjKPRwNhQHXLC5pWRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz0RXvB5EXVceuwFpWRctYqIf99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvYTNiOGIxYWUtNzY2Mi0z OWI4LTlhODMtMTY5ZmE0OTBkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6cIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkf8Ytp6yh9uzb+TrrtzySJlBS4X4MEa3F53BM97o+lkwDeAvZ/kvZm QjATYruqVOkIOBTgVIoWip50oQX481r9GeeAbnwX5aV/5fA1qNMycxAHnofH65c0 GpqkMv72xStlhSFU5WIfEqV4wF5TOgPBAtOIMPkKshqV2PsMMpdSgJmUiiJ6afNW 5dbuXszyWAvrJyQMT6ahi2peVDihQ+Br+Tj7ikT4Gq9M4/v1828iqMI3xyhbm9W+ z4ZhxpYYSDBKsPsS9xtlxNh+B8iWVY2nk89CmkdaefzbuhN6cDYJvGPq2CGM0UR+ TUWI0Khu7btpEB5OPFzJs36aFS2aIFU= -----END CERTIFICATE-----Generated at Mon Jun 30 18:40:42 2025 by rpki-client