$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa File: f8dbe662-4178-3aea-90e2-4d5ab001b930.roa (raw, json) Hash identifier: bUeI7BTBAQ7RbxCE4JU9jmeuKMouTsRTd4XiBJonrtE= Subject key identifier: B1:3D:C3:05:38:6C:76:D7:6A:21:52:FD:41:C6:90:E4:BF:74:DE:92 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F43285849E91FA9A623FA5570AE5AC6C0 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 50842 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a9:a6:23:fa:55:70:ae:5a:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=d597ce95-ea1c-430a-bffb-723b1de42f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:bc:dc:71:17:29:0f:19:2d:70:00:bc:53: ef:c1:2c:d0:ad:37:a1:e2:f8:c6:e5:cf:90:2b:ec: d8:f8:8a:f0:e8:d5:8f:7e:ad:b4:12:1d:e1:f2:0f: 73:59:d4:b4:13:0d:01:f4:78:79:61:dc:a8:9d:6f: e5:e4:2a:d9:8d:1c:e6:78:72:47:81:4f:b9:0f:b1: 70:5b:8e:d3:60:a1:53:cc:7d:7a:78:83:cb:7c:9c: 0f:45:75:a6:0a:c9:2a:88:72:74:4c:a3:93:e7:08: 01:11:31:80:8b:0d:7b:4f:03:b8:14:58:bb:3b:08: b7:e2:2b:73:f0:68:cc:94:5c:66:7d:ce:2d:e3:72: 95:fe:aa:cc:2c:74:67:58:73:57:16:af:1a:54:41: b1:e3:c7:40:8c:f2:ad:32:20:c2:e4:a4:68:a8:75: 84:bc:6b:09:0a:d6:d3:3d:b6:10:18:5b:d6:15:c4: 05:64:d3:00:00:13:78:ee:bf:d5:bd:0b:a6:cd:41: 96:05:e6:a2:fe:af:b6:6f:79:83:f4:e2:28:bc:5a: 34:8e:ec:5f:d0:4e:42:fb:76:a4:96:17:91:ee:32: 12:27:c7:99:01:22:02:9f:0c:1e:61:8d:a5:64:ec: b4:cb:51:85:95:af:2d:5a:4e:2a:4e:37:2b:6c:03: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3D:C3:05:38:6C:76:D7:6A:21:52:FD:41:C6:90:E4:BF:74:DE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d4:ba:b7:94:16:66:39:b9:3e:bf:6a:d7:69:9c:1c:ae:d7: 37:45:c8:ec:1d:36:c7:f6:53:cc:ff:67:4a:12:1d:22:24:c6: 06:18:56:be:bc:32:55:02:ec:42:af:5d:7f:c4:9a:5e:ad:c3: cc:09:ff:a0:e6:d7:78:b2:ff:cb:ab:bd:7a:51:6a:81:90:57: 5a:db:d0:42:b2:d5:e0:22:87:91:44:d9:66:21:ed:37:7d:16: 4e:c3:6f:75:21:94:89:dc:b5:f1:51:87:b3:f4:a6:cf:01:11: be:d3:03:3e:b1:60:04:b8:31:7a:d8:01:fc:51:d9:8c:54:d9: 09:c4:46:e7:a1:f5:d1:9b:86:59:bc:7a:e5:26:98:3e:45:46: d1:34:ca:9d:00:9e:4b:a3:9b:db:3b:26:a4:f3:6e:ad:dc:b2: 32:2e:8d:40:fa:8f:29:87:be:aa:18:34:0c:39:b0:d2:d1:65: ef:15:c4:97:9d:1b:08:9e:ae:42:a8:fa:cc:62:1c:27:8b:96: 73:54:f9:3d:05:2e:4e:79:83:07:f2:a4:20:09:f7:20:cc:6d: 82:3b:97:62:0f:51:1b:5a:73:82:35:07:a2:c8:89:1b:d3:51: 34:a8:aa:a7:9f:ad:d7:27:8f:7f:cf:89:46:fa:aa:5f:55:18: ff:d6:a1:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6mmI/pVcK5axsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZDU5N2NlOTUtZWExYy00MzBhLWJmZmItNzIzYjFkZTQyZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPu83HEXKQ8ZLXAAvFPvwSzQrTeh4vjG5c+Q K+zY+Irw6NWPfq20Eh3h8g9zWdS0Ew0B9Hh5YdyonW/l5CrZjRzmeHJHgU+5D7Fw W47TYKFTzH16eIPLfJwPRXWmCskqiHJ0TKOT5wgBETGAiw17TwO4FFi7Owi34itz 8GjMlFxmfc4t43KV/qrMLHRnWHNXFq8aVEGx48dAjPKtMiDC5KRoqHWEvGsJCtbT PbYQGFvWFcQFZNMAABN47r/VvQumzUGWBeai/q+2b3mD9OIovFo0juxf0E5C+3ak lheR7jISJ8eZASICnwweYY2lZOy0y1GFla8tWk4qTjcrbAPlOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE9wwU4bHbXaiFS/UHGkOS/dN6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZjhkYmU2NjItNDE3OC0z YWVhLTkwZTItNGQ1YWIwMDFiOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvUureUFmY5uT6/atdpnByu1zdFyOwdNsf2U8z/Z0oSHSIkxgYYVr68 MlUC7EKvXX/Eml6tw8wJ/6Dm13iy/8urvXpRaoGQV1rb0EKy1eAih5FE2WYh7Td9 Fk7Db3UhlInctfFRh7P0ps8BEb7TAz6xYAS4MXrYAfxR2YxU2QnERueh9dGbhlm8 euUmmD5FRtE0yp0Ankujm9s7JqTzbq3csjIujUD6jymHvqoYNAw5sNLRZe8VxJed GwierkKo+sxiHCeLlnNU+T0FLk55gwfypCAJ9yDMbYI7l2IPURtac4I1B6LIiRvT UTSoqqefrdcnj3/PiUb6ql9VGP/WoYE= -----END CERTIFICATE-----Generated at Mon Jun 30 04:58:01 2025 by rpki-client