$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: 9MNh5SxdpzOZlnXaqERw6cB8titxAYaaJ3tnbnlmlhM= Subject key identifier: B8:E2:F8:97:0A:3A:2F:C0:4B:C5:47:0B:7A:D5:CB:83:BC:E5:89:D5 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584A7A4B482F666177F20F46A400 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:48:2f:66:61:77:f2:0f:46:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=cb897b5a-7749-41c3-856f-659be8517a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:b9:cb:41:18:69:8a:f5:ea:47:7c:2c:eb: 98:c4:e1:0d:d9:dc:e0:80:f8:25:a2:b6:b6:44:7e: 41:74:28:6c:fa:3c:23:65:f5:68:46:fe:36:42:b0: f8:7b:07:54:41:30:41:29:31:67:af:8b:66:bf:07: d2:43:8f:b4:e6:e0:ec:43:fc:cb:31:d5:06:f6:a4: a5:d6:ee:98:76:9a:9c:0c:33:4a:1a:35:3b:79:97: 05:1d:f3:2c:2d:58:87:d8:12:aa:09:87:4b:c1:b6: e1:ae:04:fc:72:81:ec:72:35:43:56:e4:28:4d:22: 8a:23:e7:d3:f1:0f:f3:c4:1e:08:d3:7d:23:97:9e: b9:74:71:52:43:03:0c:e0:a4:4a:85:86:0b:5f:14: e7:e2:af:00:f2:0b:c9:cb:f5:5b:e6:f9:16:03:98: 44:3e:3d:4f:62:02:f6:c1:9f:c6:c3:50:98:02:27: 04:66:39:05:42:1f:55:72:9e:90:17:7d:7c:b3:cb: ba:42:01:93:87:3e:54:df:aa:e0:e3:4b:f3:97:8f: f2:ee:66:02:ee:e9:8c:73:ef:ee:3a:8d:9a:d1:af: 82:f7:7c:0b:a0:05:9f:e6:3a:57:3a:2e:4b:e1:f2: b7:4a:69:d6:d6:80:77:db:73:60:4b:18:6c:b7:45: cc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:F8:97:0A:3A:2F:C0:4B:C5:47:0B:7A:D5:CB:83:BC:E5:89:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2e:59:f7:44:a7:a6:43:4a:9f:41:2d:4c:0e:a1:2f:44:9a: 86:83:a4:2b:b5:78:3d:e9:16:d1:a4:a7:69:1e:81:33:bd:b5: b2:f3:55:28:ed:b7:cc:ce:56:93:12:2d:56:ef:76:c6:08:8f: 73:0d:9f:ac:f4:24:e2:da:37:f2:e7:b8:89:ad:7b:a6:ed:be: 39:02:f0:9f:5c:a5:80:a8:b9:26:94:46:fe:39:40:a8:f7:18: 25:22:22:7d:ca:36:f3:01:06:0f:8c:14:53:6a:0e:4d:d2:a5: 43:15:65:ce:69:56:88:ab:38:1b:0f:71:f8:1e:42:71:f1:e0: 63:56:53:06:f1:20:25:4f:13:30:0c:c3:12:35:0c:2e:1a:a0: 08:c0:1d:65:ee:65:4b:e2:74:90:f8:f1:66:b9:cd:eb:5b:53: 14:0f:21:4a:fd:e1:80:57:aa:b8:c8:c2:99:fa:11:0c:3d:a6: 67:9f:6f:ec:8d:80:70:2e:22:b9:e0:3f:5f:a4:58:53:b4:f7: 2b:2a:41:2e:18:f1:8b:15:f8:4f:6c:1d:84:de:1e:c2:bf:39: 5c:25:e1:19:ef:44:f4:a5:44:72:99:39:b1:e4:83:e7:88:d7: 00:ba:4b:87:bb:05:34:9e:a6:41:02:76:d6:3f:7f:87:b9:f7: c0:d2:b1:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0gvZmF38g9GpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk Y2I4OTdiNWEtNzc0OS00MWMzLTg1NmYtNjU5YmU4NTE3YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpy5y0EYaYr16kd8LOuYxOEN2dzggPglora2 RH5BdChs+jwjZfVoRv42QrD4ewdUQTBBKTFnr4tmvwfSQ4+05uDsQ/zLMdUG9qSl 1u6YdpqcDDNKGjU7eZcFHfMsLViH2BKqCYdLwbbhrgT8coHscjVDVuQoTSKKI+fT 8Q/zxB4I030jl565dHFSQwMM4KRKhYYLXxTn4q8A8gvJy/Vb5vkWA5hEPj1PYgL2 wZ/Gw1CYAicEZjkFQh9Vcp6QF318s8u6QgGThz5U36rg40vzl4/y7mYC7umMc+/u Oo2a0a+C93wLoAWf5jpXOi5L4fK3SmnW1oB323NgSxhst0XMEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLji+JcKOi/AS8VHC3rVy4O85YnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4uWfdEp6ZDSp9BLUwOoS9EmoaDpCu1eD3pFtGkp2kegTO9tbLzVSjt t8zOVpMSLVbvdsYIj3MNn6z0JOLaN/LnuImte6btvjkC8J9cpYCouSaURv45QKj3 GCUiIn3KNvMBBg+MFFNqDk3SpUMVZc5pVoirOBsPcfgeQnHx4GNWUwbxICVPEzAM wxI1DC4aoAjAHWXuZUvidJD48Wa5zetbUxQPIUr94YBXqrjIwpn6EQw9pmefb+yN gHAuIrngP1+kWFO09ysqQS4Y8YsV+E9sHYTeHsK/OVwl4RnvRPSlRHKZObHkg+eI 1wC6S4e7BTSepkECdtY/f4e598DSsak= -----END CERTIFICATE-----Generated at Sun Jul 27 05:17:07 2025 by rpki-client