$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa File: a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa (raw, json) Hash identifier: LDAadv65TmFrqZ3x9JY9XHCsUZnx1fa4q/BDlGHyyYc= Subject key identifier: 82:8C:6D:84:85:D1:6C:9E:F7:9A:C0:F3:B9:53:D7:F3:69:F7:2E:9F Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F43285849D85F7F0FA643FF3EB26E6B40 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 395823 IP address blocks: 23.169.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7f:0f:a6:43:ff:3e:b2:6e:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=96ed5552-c648-44ec-8295-f056b119633c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:62:0b:d8:a0:9e:c2:95:71:f9:82:8c:88: 40:4d:dc:06:f0:a2:2e:aa:96:3f:90:c8:31:53:6d: 89:2a:bc:8d:12:7c:69:e0:bf:ef:97:33:7f:e7:37: a8:c3:b9:5b:98:18:c2:86:54:62:08:3d:46:9b:33: 35:40:48:92:56:ae:ee:0a:08:22:0f:54:1d:dd:e0: 0c:da:eb:07:c9:55:98:5e:cf:05:f5:ae:09:5f:c7: 84:79:d7:72:59:62:ad:cf:08:75:1e:13:ed:1b:9b: d4:18:9f:1d:36:ce:a6:8f:5d:1e:3f:c1:a3:5e:9c: 02:b8:00:c8:c3:5a:7a:9a:17:56:8e:c7:c0:b9:aa: a2:c3:cc:fc:8c:a8:29:06:f7:74:73:0d:7a:21:36: 64:19:41:8d:71:7d:88:47:63:67:c0:fc:a6:37:c9: cd:c9:83:f7:27:18:48:b4:bc:0b:fd:7f:c6:9a:24: 11:2a:7a:39:d7:11:3d:59:34:65:08:33:28:a9:bf: 1e:b4:3f:ca:36:f1:5f:63:f8:b5:10:83:6f:d9:d1: 0d:d1:22:47:53:12:59:ec:0e:dd:4f:2e:87:dc:6c: a9:77:35:d6:30:5c:c8:22:33:a5:c5:4c:b1:cd:bd: 38:f5:34:0a:b5:68:52:33:55:2b:5c:38:ba:cf:54: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8C:6D:84:85:D1:6C:9E:F7:9A:C0:F3:B9:53:D7:F3:69:F7:2E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 23.169.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:8a:86:84:d2:1d:a8:16:29:5a:88:02:5f:a9:02:2c:97:24: 0b:f2:66:06:f9:0f:6b:3c:62:93:c1:a3:b6:7e:75:43:78:57: ae:75:0f:e9:76:22:84:5e:e8:86:6b:77:bc:a7:34:69:6c:c2: d0:20:90:3e:2c:42:3a:1c:70:36:88:01:19:06:48:18:34:36: 0c:cd:41:43:9f:ac:fe:67:10:ea:e0:0f:af:dc:39:d0:8e:59: 8c:20:69:99:ae:94:78:bb:eb:81:3e:e4:95:f3:fb:f8:1e:44: 52:3e:b9:2e:e9:30:bf:06:0c:35:0d:d6:32:07:68:e5:ec:4b: ed:4d:b6:20:40:12:63:12:ff:07:71:31:37:38:a1:19:35:f4: 50:f0:d7:9b:a4:50:84:29:d2:b3:d9:04:51:b8:67:74:10:7f: 39:33:08:84:0d:bb:33:a9:f6:7b:f7:e4:51:68:31:ed:9d:65: 38:79:a5:5e:21:5d:1b:a6:46:dd:c9:d2:2b:e4:ac:9b:95:b9: 0a:df:6c:ca:a1:10:e8:2e:aa:8a:9b:cf:7e:b8:3e:23:6b:6b: e3:48:39:25:a0:ee:8e:a4:d8:f1:c9:00:4c:b7:76:21:f5:2a: a7:c8:ac:bf:31:ad:82:64:fb:d9:91:7f:80:c0:70:85:10:15: 17:dc:ac:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX38PpkP/PrJua0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTZlZDU1NTItYzY0OC00NGVjLTgyOTUtZjA1NmIxMTk2MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxiC9ignsKVcfmCjIhATdwG8KIuqpY/kMgx U22JKryNEnxp4L/vlzN/5zeow7lbmBjChlRiCD1GmzM1QEiSVq7uCggiD1Qd3eAM 2usHyVWYXs8F9a4JX8eEeddyWWKtzwh1HhPtG5vUGJ8dNs6mj10eP8GjXpwCuADI w1p6mhdWjsfAuaqiw8z8jKgpBvd0cw16ITZkGUGNcX2IR2NnwPymN8nNyYP3JxhI tLwL/X/GmiQRKno51xE9WTRlCDMoqb8etD/KNvFfY/i1EINv2dEN0SJHUxJZ7A7d Ty6H3GypdzXWMFzIIjOlxUyxzb049TQKtWhSM1UrXDi6z1TZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKMbYSF0Wye95rA87lT1/Np9y6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvYTM0NDNiYTktYTVjMS0z ZjU4LWJmMzctYTNiMDU0OWUxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaKhoTSHagWKVqIAl+pAiyXJAvyZgb5D2s8YpPBo7Z+dUN4V651D+l2 IoRe6IZrd7ynNGlswtAgkD4sQjoccDaIARkGSBg0NgzNQUOfrP5nEOrgD6/cOdCO WYwgaZmulHi764E+5JXz+/geRFI+uS7pML8GDDUN1jIHaOXsS+1NtiBAEmMS/wdx MTc4oRk19FDw15ukUIQp0rPZBFG4Z3QQfzkzCIQNuzOp9nv35FFoMe2dZTh5pV4h XRumRt3J0ivkrJuVuQrfbMqhEOguqoqbz364PiNra+NIOSWg7o6k2PHJAEy3diH1 KqfIrL8xrYJk+9mRf4DAcIUQFRfcrOM= -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:19 2025 by rpki-client