$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa File: 23bb4361-0bbd-3870-a99b-dd859a3e6667.roa (raw, json) Hash identifier: ef9Fx1pX5fj55kwMNf8rTcYywhgCrKDKnrkU7ULcyOU= Subject key identifier: 7D:6D:39:60:86:2F:97:58:39:A7:1B:FF:99:0F:F4:81:E9:DA:B1:04 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584A66C07146A1AE6B03EB366000 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 396955 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:71:46:a1:ae:6b:03:eb:36:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=c68d9d0d-98c3-4379-b0c4-0161686654bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:96:24:3d:1d:c6:f5:cb:44:0a:53:da:f0: e9:4d:fe:5c:ed:3f:20:a3:85:45:94:9b:c6:95:3b: 3a:54:71:79:54:47:44:2b:cb:82:d2:9e:bc:2c:5f: 45:8f:35:00:39:8c:08:c4:ff:80:be:ac:91:39:f5: be:5e:dd:94:bd:35:9c:d3:5c:7b:3d:db:13:ac:86: 32:13:97:25:1f:47:7f:4b:77:24:e8:7c:b8:11:98: c3:cb:76:4e:cc:db:de:aa:29:c9:45:a2:e8:e6:97: 6c:d1:9f:8f:c1:9e:21:4d:82:ff:07:b4:d2:a9:a4: 15:56:dc:e3:a8:6e:28:6b:a7:ab:5d:4a:24:8a:5b: 68:16:70:86:91:09:52:82:27:e8:35:70:e3:b1:ee: 92:7a:98:75:50:99:fc:d4:49:46:0a:e6:33:37:01: aa:b4:b6:bb:70:b0:d3:dd:76:b0:a6:27:cc:5d:16: cc:ab:01:0d:63:bf:68:49:ac:24:d3:6c:9c:e1:3e: b0:99:0f:4c:73:eb:40:b7:4c:60:f7:4d:28:ac:15: 53:6a:74:8c:68:a6:b9:65:6e:56:75:35:fc:51:45: 58:62:37:b2:0e:9b:43:d8:0a:3b:de:bb:66:97:e2: e1:49:56:66:13:7e:2b:ab:f4:1c:1b:f3:a0:89:42: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6D:39:60:86:2F:97:58:39:A7:1B:FF:99:0F:F4:81:E9:DA:B1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2f:73:4c:4f:24:e6:28:d0:b2:d1:35:85:dc:f1:36:41:5d: b1:db:fd:6d:5e:d3:95:ef:f4:2b:e3:1a:81:df:62:b1:92:73: ff:70:3c:b8:95:28:a4:87:a8:99:2e:47:f4:5d:56:ce:c7:0f: 9b:72:f0:52:50:08:fa:be:f9:a1:4a:8b:95:d4:98:2d:61:be: 1c:ee:77:3a:3a:a5:36:ff:2f:10:a8:51:16:7a:9e:ac:53:8b: 5e:52:c2:e9:ee:6b:0a:56:ab:1e:5f:1b:b4:80:d5:c9:b8:e8: 7c:05:ff:15:42:bc:62:de:50:6e:bf:b1:5c:2a:8b:46:b7:13: e8:c4:79:a5:47:c8:e0:fa:c3:e1:41:70:4c:50:b3:12:48:39: b4:bb:ba:46:49:04:18:88:7c:99:91:24:49:1e:90:f7:85:1d: 2f:05:1e:5e:53:ce:1f:f7:72:cd:88:25:8e:5e:0d:9b:43:dc: ab:71:66:b7:6f:ec:0b:76:eb:b3:91:01:8f:24:4f:a6:79:d8: 59:00:51:43:66:f2:17:25:f1:7c:ba:61:d4:cf:95:33:12:9e: c4:3f:14:87:3b:a7:e2:5d:46:64:9a:36:a3:3d:17:4a:26:2d: e2:8a:9a:97:a0:40:ba:a4:26:c6:a9:b8:a8:06:5e:da:73:28: 83:93:57:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHFGoa5rA+s2YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YzY4ZDlkMGQtOThjMy00Mzc5LWIwYzQtMDE2MTY4NjY1NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+WJD0dxvXLRApT2vDpTf5c7T8go4VFlJvG lTs6VHF5VEdEK8uC0p68LF9FjzUAOYwIxP+AvqyROfW+Xt2UvTWc01x7PdsTrIYy E5clH0d/S3ck6Hy4EZjDy3ZOzNveqinJRaLo5pds0Z+PwZ4hTYL/B7TSqaQVVtzj qG4oa6erXUokiltoFnCGkQlSgifoNXDjse6Seph1UJn81ElGCuYzNwGqtLa7cLDT 3XawpifMXRbMqwENY79oSawk02yc4T6wmQ9Mc+tAt0xg900orBVTanSMaKa5ZW5W dTX8UUVYYjeyDptD2Ao73rtml+LhSVZmE34rq/QcG/OgiUJ8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1tOWCGL5dYOacb/5kP9IHp2rEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMjNiYjQzNjEtMGJiZC0z ODcwLWE5OWItZGQ4NTlhM2U2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEvc0xPJOYo0LLRNYXc8TZBXbHb/W1e05Xv9CvjGoHfYrGSc/9wPLiV KKSHqJkuR/RdVs7HD5ty8FJQCPq++aFKi5XUmC1hvhzudzo6pTb/LxCoURZ6nqxT i15SwunuawpWqx5fG7SA1cm46HwF/xVCvGLeUG6/sVwqi0a3E+jEeaVHyOD6w+FB cExQsxJIObS7ukZJBBiIfJmRJEkekPeFHS8FHl5Tzh/3cs2IJY5eDZtD3KtxZrdv 7At267ORAY8kT6Z52FkAUUNm8hcl8Xy6YdTPlTMSnsQ/FIc7p+JdRmSaNqM9F0om LeKKmpegQLqkJsapuKgGXtpzKIOTVz8= -----END CERTIFICATE-----Generated at Sun Jul 27 12:06:11 2025 by rpki-client