$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa File: 8cf6a41b-6156-36e4-89af-146f906b490d.roa (raw, json) Hash identifier: WZfZ+z5waCHPgPwiYjAzVtC5vlHqajB9/ZA1nhWA7qs= Subject key identifier: 89:99:65:C6:95:CF:FE:AD:64:BF:06:8B:00:F7:F2:19:46:7C:AA:23 Certificate issuer: /CN=19964ea4-9d3c-4312-8b31-cb597d7d9722 Certificate serial: 010D0C9F4328584A4F05B176828274B330936A80 Authority key identifier: 00:1C:44:DE:10:8D:12:5F:60:98:2E:0E:A9:9F:64:2D:3A:E6:50:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 8095 IP address blocks: 23.181.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:b1:76:82:82:74:b3:30:93:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19964ea4-9d3c-4312-8b31-cb597d7d9722 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=9f4bb170-3cfa-480f-87b7-b3bd2f18027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:78:8c:2f:0a:b9:88:63:8e:30:50:78:77: 4e:7e:e4:e8:ed:fb:55:8c:d5:bf:39:5a:16:3f:e6: 68:f6:6f:19:da:eb:1c:04:73:0f:fa:e6:4a:d3:2a: a0:b7:b9:df:ec:c6:00:12:51:73:15:74:e3:fa:36: bf:b7:04:71:d2:dc:5c:a7:be:e6:a5:da:71:3c:a5: 6a:16:83:77:fb:73:35:e4:d7:45:79:79:bd:80:52: b7:50:ee:ba:68:1b:2d:98:79:27:8c:1b:da:5a:3a: 57:0a:d9:e7:a9:92:c1:a5:11:12:13:04:36:5f:9b: 01:7c:9c:10:49:58:e7:42:29:7c:e8:93:9d:04:f3: fa:85:78:73:93:1c:9c:68:88:53:3c:80:8c:dd:b2: b1:c4:3a:72:3f:08:91:b7:5d:df:01:66:8b:c1:8b: 02:dc:93:6f:1b:8d:e2:51:4e:90:90:df:3a:36:6c: 98:a2:45:4e:6b:22:7d:ad:26:ae:44:8f:c2:6b:08: 1b:f3:98:89:04:47:2f:de:c9:e1:3e:d4:11:2e:27: 72:52:c0:cf:e4:7e:e7:68:f7:1d:5b:5e:8e:ba:8b: 30:66:5b:d6:25:ba:23:a2:6e:72:ee:0a:1e:ea:98: a9:c3:94:cd:18:2c:30:be:3a:fe:75:39:cf:ae:51: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:65:C6:95:CF:FE:AD:64:BF:06:8B:00:F7:F2:19:46:7C:AA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/8cf6a41b-6156-36e4-89af-146f906b490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722/19964ea4-9d3c-4312-8b31-cb597d7d9722.crl X509v3 Authority Key Identifier: keyid:00:1C:44:DE:10:8D:12:5F:60:98:2E:0E:A9:9F:64:2D:3A:E6:50:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19964ea4-9d3c-4312-8b31-cb597d7d9722.cer sbgp-ipAddrBlock: critical IPv4: 23.181.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:87:c9:12:33:56:61:cf:14:1d:9e:0a:c1:ee:63:7e:de:6d: 0e:e7:36:45:d1:c8:b2:9c:a4:10:8b:cc:67:af:56:a6:93:06: 77:ea:31:11:06:ae:e2:e0:ce:48:ca:c5:07:f2:15:35:3e:40: d9:35:a2:8b:47:cf:59:93:e2:fd:2c:ec:36:84:80:1e:02:33: bc:9a:41:75:15:9f:fe:e6:53:59:84:03:b3:10:ae:5f:dc:38: bb:38:73:f3:b8:6b:35:10:23:ae:f8:7b:6e:7c:f8:09:b7:cf: 13:da:a4:e9:2d:e7:82:1d:9d:5a:6b:90:fb:13:f6:af:05:5c: 7a:03:ea:05:f4:36:61:38:65:2f:bc:e0:66:dd:18:1e:3d:64: f3:e5:bb:52:b1:b4:5d:5e:b6:ac:4d:66:16:76:3b:ab:96:3c: 83:20:52:e4:96:a5:cf:78:59:09:dc:57:76:6f:1d:15:71:c5: a8:91:c2:2b:2c:09:e6:7f:91:79:f5:59:5d:65:3e:8e:70:5a: 4a:88:12:54:d9:18:c6:3a:02:e1:87:ce:23:6d:15:59:bd:f0: df:1e:08:6d:80:f2:e0:4c:f5:e8:9c:69:fc:51:18:80:42:b5: 30:3a:89:43:32:0b:12:4a:3f:aa:14:60:c8:90:42:9e:82:b3: 6e:1c:69:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBbF2goJ0szCTaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTk5NjRlYTQtOWQzYy00MzEyLThiMzEtY2I1OTdkN2Q5 NzIyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk OWY0YmIxNzAtM2NmYS00ODBmLTg3YjctYjNiZDJmMTgwMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuF4jC8KuYhjjjBQeHdOfuTo7ftVjNW/OVoW P+Zo9m8Z2uscBHMP+uZK0yqgt7nf7MYAElFzFXTj+ja/twRx0txcp77mpdpxPKVq FoN3+3M15NdFeXm9gFK3UO66aBstmHknjBvaWjpXCtnnqZLBpRESEwQ2X5sBfJwQ SVjnQil86JOdBPP6hXhzkxycaIhTPICM3bKxxDpyPwiRt13fAWaLwYsC3JNvG43i UU6QkN86NmyYokVOayJ9rSauRI/Cawgb85iJBEcv3snhPtQRLidyUsDP5H7naPcd W16OuoswZlvWJbojom5y7goe6pipw5TNGCwwvjr+dTnPrlGxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImZZcaVz/6tZL8GiwD38hlGfKojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOTk2 NGVhNC05ZDNjLTQzMTItOGIzMS1jYjU5N2Q3ZDk3MjIvOGNmNmE0MWItNjE1Ni0z NmU0LTg5YWYtMTQ2ZjkwNmI0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTk5NjRlYTQtOWQzYy00MzEyLThi MzEtY2I1OTdkN2Q5NzIyLzE5OTY0ZWE0LTlkM2MtNDMxMi04YjMxLWNiNTk3ZDdk OTcyMi5jcmwwHwYDVR0jBBgwFoAUABxE3hCNEl9gmC4OqZ9kLTrmUMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOTk2NGVhNC05ZDNjLTQzMTItOGIzMS1jYjU5 N2Q3ZDk3MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyHyRIzVmHPFB2eCsHuY37ebQ7nNkXRyLKcpBCLzGevVqaTBnfqMREG ruLgzkjKxQfyFTU+QNk1ootHz1mT4v0s7DaEgB4CM7yaQXUVn/7mU1mEA7MQrl/c OLs4c/O4azUQI674e258+Am3zxPapOkt54IdnVprkPsT9q8FXHoD6gX0NmE4ZS+8 4GbdGB49ZPPlu1KxtF1etqxNZhZ2O6uWPIMgUuSWpc94WQncV3ZvHRVxxaiRwiss CeZ/kXn1WV1lPo5wWkqIElTZGMY6AuGHziNtFVm98N8eCG2A8uBM9eicafxRGIBC tTA6iUMyCxJKP6oUYMiQQp6Cs24cads= -----END CERTIFICATE-----Generated at Wed Jul 2 15:24:39 2025 by rpki-client