$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa File: afecdebc-ec0d-30da-8631-4209f266e536.roa (raw, json) Hash identifier: 4DZkiAEk+wMBzDTG9ubIBnorXpSWg3jR6Gypi73tUNg= Subject key identifier: AF:DF:F4:AC:51:19:07:EE:19:43:D1:AE:4B:C9:DA:E4:86:14:38:37 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584A4F05C1D2C3F944922EC6C280 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 393336 IP address blocks: 23.163.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c1:d2:c3:f9:44:92:2e:c6:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=b8665d78-28ee-4b8c-a50c-4ff85baa390a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:d9:1d:27:36:03:bd:d9:10:67:ed:b2:c7: b4:66:26:79:54:22:5c:38:f6:d1:2c:72:91:27:2b: a6:f1:99:18:6c:7a:34:d6:00:c6:66:ea:7d:45:a4: 33:fa:a7:db:85:30:9b:83:01:0f:67:fa:43:8c:f7: 75:ab:35:e7:40:24:dd:e9:c5:ee:b6:0c:77:ec:56: 42:6f:f5:62:4e:12:3e:6d:1f:fd:2c:a0:e7:52:f4: a4:a2:8d:fa:b8:4a:69:d5:c6:c6:bf:74:a2:2a:fe: f2:6e:31:15:e8:4b:96:1e:1c:5c:a1:66:09:92:00: 6d:9c:b8:e2:03:05:ba:f7:b3:f2:0d:26:b5:bf:cc: 4a:64:07:b0:ab:d2:30:d6:9d:e4:18:19:ae:60:57: ca:a3:be:71:ea:87:25:2a:bb:97:dd:b1:04:50:78: a8:2f:b0:9b:bf:17:a1:91:97:24:36:8d:43:02:f3: e3:16:21:19:8a:98:de:16:4d:b5:c7:44:3c:3f:b6: 10:78:57:3b:88:fe:a1:33:e3:3c:9d:0e:a7:d1:0d: a7:11:27:a2:f2:f9:64:f7:ae:db:53:05:e2:13:6f: 6c:c6:63:24:63:0c:72:1f:c5:78:e1:54:d5:9b:48: de:a0:cc:09:17:f1:58:62:22:cb:b6:f4:40:b8:29: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DF:F4:AC:51:19:07:EE:19:43:D1:AE:4B:C9:DA:E4:86:14:38:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 23.163.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:34:de:b1:d2:0a:f7:81:83:5c:97:82:74:a1:92:5c:95:df: 4f:58:9a:20:26:40:fe:fb:fa:65:96:2f:c5:ea:f3:d8:bd:50: ae:27:f1:b9:24:49:61:51:e8:f4:dd:6d:15:f6:de:fa:36:18: 7e:16:38:b8:46:f0:ef:1a:6b:a3:fb:e3:81:11:a9:d5:5a:ba: a2:c1:41:1b:a0:65:8f:82:c4:12:ff:1c:19:fa:99:30:c9:56: fb:ed:9e:53:87:f0:35:9f:c4:58:37:b9:32:bb:33:9d:30:b1: 17:ec:2f:ce:14:31:43:5e:c7:b5:e9:5a:cf:4a:39:27:2f:70: 38:3c:40:93:8b:31:a3:63:b1:37:ee:b2:04:c5:fc:b6:d5:98: fb:3a:b0:47:43:2f:77:27:a3:0a:05:ce:3f:84:91:f2:64:0e: cb:0d:64:59:65:45:3a:83:30:c4:2a:b2:0c:f5:8a:da:1f:67: 91:28:2f:a9:a9:dc:6b:62:9b:51:6f:67:5a:aa:fa:d4:fd:c7: f1:61:32:d2:a4:fe:c0:a6:55:6a:f3:69:ad:6f:9d:df:8f:a6: 02:f6:79:d8:56:b6:11:d1:55:c4:8f:e7:c8:c0:3e:f7:bf:aa: 53:73:3b:30:24:c1:72:ba:70:a9:52:28:da:15:10:16:bc:8d: f0:a0:b7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcHSw/lEki7GwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk Yjg2NjVkNzgtMjhlZS00YjhjLWE1MGMtNGZmODViYWEzOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbLZHSc2A73ZEGftsse0ZiZ5VCJcOPbRLHKR Jyum8ZkYbHo01gDGZup9RaQz+qfbhTCbgwEPZ/pDjPd1qzXnQCTd6cXutgx37FZC b/ViThI+bR/9LKDnUvSkoo36uEpp1cbGv3SiKv7ybjEV6EuWHhxcoWYJkgBtnLji AwW697PyDSa1v8xKZAewq9Iw1p3kGBmuYFfKo75x6oclKruX3bEEUHioL7Cbvxeh kZckNo1DAvPjFiEZipjeFk21x0Q8P7YQeFc7iP6hM+M8nQ6n0Q2nESei8vlk967b UwXiE29sxmMkYwxyH8V44VTVm0jeoMwJF/FYYiLLtvRAuCnPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/f9KxRGQfuGUPRrkvJ2uSGFDg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYWZlY2RlYmMtZWMwZC0z MGRhLTg2MzEtNDIwOWYyNjZlNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF6PYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA03rHSCveBg1yXgnShklyV309YmiAmQP77+mWWL8Xq89i9UK4n8bkk SWFR6PTdbRX23vo2GH4WOLhG8O8aa6P744ERqdVauqLBQRugZY+CxBL/HBn6mTDJ VvvtnlOH8DWfxFg3uTK7M50wsRfsL84UMUNex7XpWs9KOScvcDg8QJOLMaNjsTfu sgTF/LbVmPs6sEdDL3cnowoFzj+EkfJkDssNZFllRTqDMMQqsgz1itofZ5EoL6mp 3Gtim1FvZ1qq+tT9x/FhMtKk/sCmVWrzaa1vnd+PpgL2edhWthHRVcSP58jAPve/ qlNzOzAkwXK6cKlSKNoVEBa8jfCgt0Q= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:23 2025 by rpki-client