$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa File: 5c279b9f-62e5-3859-80b1-76b8ca66a008.roa (raw, json) Hash identifier: 5AZSYEytwLTh18+SIFbub6tkYIJJZQ47POQuAAaAIi4= Subject key identifier: 8A:4E:CB:6B:79:9A:E1:9D:A4:F4:81:4D:9F:75:6E:3E:5F:F4:37:BC Certificate issuer: /CN=4182f5c3-1977-4f18-997f-c945eaea051e Certificate serial: 010D0C9F43285849E22537032A1B72F43DC370E0 Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 18470 IP address blocks: 23.154.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:37:03:2a:1b:72:f4:3d:c3:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=9897a630-c12e-40f6-a7ab-8ee3bf3d1ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:6d:df:b6:ab:27:89:12:99:b7:56:48:6e: 83:a7:f5:2f:3c:b6:bc:6b:8d:d6:37:2b:e4:d9:6a: a7:6a:30:d9:9c:43:b9:8a:7d:3d:c4:f9:d9:f4:8b: fd:f1:1f:8f:87:0c:d3:67:01:82:fc:80:60:14:61: 59:64:a5:d5:83:cb:cd:1f:a3:1d:77:05:78:d4:29: ab:dd:91:be:49:11:ab:b5:55:a2:91:4f:d2:7b:68: 6b:d9:3b:90:31:4f:f8:c2:da:f4:4e:08:50:42:ce: 06:63:a0:a2:8e:13:fa:d6:47:35:a6:5c:2a:4d:23: f1:ec:bf:f9:33:06:ed:67:9b:a6:d7:f4:b3:71:36: 8d:62:45:47:45:81:74:58:cd:53:c8:a6:10:5a:94: 58:46:93:b1:a1:43:e1:8e:8d:75:e0:7f:e5:e5:9e: 62:47:f9:64:93:a0:f9:d8:a3:e8:78:19:87:07:ac: 89:f0:76:65:94:dc:2e:af:2f:c7:6e:b6:8f:81:61: 78:82:d1:60:62:8d:ac:11:2b:41:5a:7b:97:93:38: 9a:58:2e:4c:0d:39:a2:b1:b0:0a:63:ed:3e:2d:0d: 36:a4:f1:90:99:6b:3e:ee:be:8e:be:6e:ec:da:e7: 00:d1:a7:45:91:63:e9:ef:83:e1:6f:63:b1:9d:c6: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:CB:6B:79:9A:E1:9D:A4:F4:81:4D:9F:75:6E:3E:5F:F4:37:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl X509v3 Authority Key Identifier: keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer sbgp-ipAddrBlock: critical IPv4: 23.154.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6c:a3:d5:5d:46:b3:4f:56:23:2c:12:db:a6:90:53:40:95: b3:4c:66:95:ec:f6:68:0e:ca:94:d4:09:44:ea:02:85:09:cb: 6a:e1:ee:c4:d6:8e:03:a4:6e:d5:09:f5:e5:8b:55:fb:e1:3e: ec:ab:a3:27:50:fc:c7:45:4c:19:a1:c9:16:9e:09:b9:4f:97: 71:6b:2a:cb:c2:88:a5:61:bc:d3:3f:af:a7:14:2b:b7:50:20: 64:8a:33:b6:14:07:b5:f2:b0:b9:7e:ac:08:d4:70:e6:be:a8: 93:a0:82:38:48:a2:e4:9c:13:51:96:d6:43:69:c7:de:85:56: 1b:4d:46:36:3d:23:bb:9c:21:79:5a:40:24:86:1c:dc:02:aa: 69:53:35:79:e3:08:c5:25:51:46:bf:2b:7f:ff:5a:10:ce:0f: 57:d8:aa:57:6a:7b:a1:b1:bb:92:36:79:07:2f:db:ed:a1:12: 1a:42:6b:f1:23:5e:60:b9:2c:bb:ad:f6:68:18:6d:1d:d7:a7: f8:9a:31:40:90:ba:43:15:07:f3:15:82:0e:47:0d:ab:b7:82: c1:e7:64:5e:cd:c8:0b:ec:90:f4:2b:eb:c6:16:b0:37:01:19: 2c:2c:55:23:14:62:d7:53:bd:7e:f5:ba:67:37:bd:a5:9f:7c: 3c:c2:97:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTcDKhty9D3DcOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MmY1YzMtMTk3Ny00ZjE4LTk5N2YtYzk0NWVhZWEw NTFlMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OTg5N2E2MzAtYzEyZS00MGY2LWE3YWItOGVlM2JmM2QxZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPht37arJ4kSmbdWSG6Dp/UvPLa8a43WNyvk 2WqnajDZnEO5in09xPnZ9Iv98R+PhwzTZwGC/IBgFGFZZKXVg8vNH6MddwV41Cmr 3ZG+SRGrtVWikU/Se2hr2TuQMU/4wtr0TghQQs4GY6CijhP61kc1plwqTSPx7L/5 MwbtZ5um1/SzcTaNYkVHRYF0WM1TyKYQWpRYRpOxoUPhjo114H/l5Z5iR/lkk6D5 2KPoeBmHB6yJ8HZllNwury/HbraPgWF4gtFgYo2sEStBWnuXkziaWC5MDTmisbAK Y+0+LQ02pPGQmWs+7r6Ovm7s2ucA0adFkWPp74Phb2OxncakNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpOy2t5muGdpPSBTZ91bj5f9De8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MTgy ZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1ZWFlYTA1MWUvNWMyNzliOWYtNjJlNS0z ODU5LTgwYjEtNzZiOGNhNjZhMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDE4MmY1YzMtMTk3Ny00ZjE4LTk5 N2YtYzk0NWVhZWEwNTFlLzQxODJmNWMzLTE5NzctNGYxOC05OTdmLWM5NDVlYWVh MDUxZS5jcmwwHwYDVR0jBBgwFoAU3EjDkhwVbj1cGAnpc8/wKdZbfRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MTgyZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1 ZWFlYTA1MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBso9VdRrNPViMsEtumkFNAlbNMZpXs9mgOypTUCUTqAoUJy2rh7sTW jgOkbtUJ9eWLVfvhPuyroydQ/MdFTBmhyRaeCblPl3FrKsvCiKVhvNM/r6cUK7dQ IGSKM7YUB7XysLl+rAjUcOa+qJOggjhIouScE1GW1kNpx96FVhtNRjY9I7ucIXla QCSGHNwCqmlTNXnjCMUlUUa/K3//WhDOD1fYqldqe6Gxu5I2eQcv2+2hEhpCa/Ej XmC5LLut9mgYbR3Xp/iaMUCQukMVB/MVgg5HDau3gsHnZF7NyAvskPQr68YWsDcB GSwsVSMUYtdTvX71umc3vaWffDzCl3c= -----END CERTIFICATE-----Generated at Tue Jul 1 16:01:49 2025 by rpki-client