$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa File: 34ea7717-0935-34ec-8511-5e5273f1e4d9.roa (raw, json) Hash identifier: Pvt0JId/GjOzPZm6K/ZnUWEHy//AZvWkTX9ARhWZS/Y= Subject key identifier: 2E:1E:67:3A:CB:89:5C:19:F1:A1:92:E1:5A:C3:B5:E8:67:A2:56:F0 Certificate issuer: /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Certificate serial: 010D0C9F4328584A71EB4FE13A2D873F2CFA6680 Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 211392 IP address blocks: 23.167.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:4f:e1:3a:2d:87:3f:2c:fa:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=edf8e373-886e-4815-aa19-8a1ee88140d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:1e:21:a7:85:b7:86:fd:c8:d1:75:bf:33: 26:53:2f:e8:9c:aa:4c:ad:05:44:ec:48:84:83:2d: 41:fc:3d:bf:58:31:e3:8f:f8:56:7c:96:f2:64:94: dc:c6:0a:0d:c6:84:da:a0:11:11:d0:3c:1e:06:e6: 4b:77:53:b8:2f:79:07:d7:1b:4b:68:0c:3a:10:97: 5b:80:62:29:75:81:48:39:0f:e3:43:ae:d9:9b:a4: b5:f9:b5:6f:32:93:a8:ee:d7:9e:97:b7:aa:6d:92: 1e:60:3f:b6:0d:ae:56:c8:c8:bb:12:68:17:fe:5f: f4:77:26:24:c2:32:19:67:cf:7f:ac:4b:f8:93:22: 8f:0e:ed:50:0e:cd:df:7e:0f:93:c4:2f:24:67:7e: 4d:f5:3d:37:78:9e:a6:a7:2a:56:42:50:c6:cf:94: 97:f9:21:4e:75:d7:f1:c7:46:f1:52:e8:09:34:2d: e3:c8:fa:70:5d:ca:9e:f0:8f:58:59:93:1b:10:cc: 90:c0:4a:8e:ef:c6:7c:28:48:57:a3:a4:d4:fb:db: bd:a2:f3:ce:08:ba:19:3a:cc:70:de:a6:57:39:42: 9e:68:97:8e:c2:db:c1:e9:fd:38:c6:8f:2e:7a:89: dd:7d:89:7a:71:ca:cf:85:9b:7b:ea:5d:df:30:25: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:67:3A:CB:89:5C:19:F1:A1:92:E1:5A:C3:B5:E8:67:A2:56:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl X509v3 Authority Key Identifier: keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer sbgp-ipAddrBlock: critical IPv4: 23.167.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:70:76:01:51:04:f7:49:45:84:49:be:34:5f:d9:55:37:04: 03:18:fc:0f:64:b3:36:d7:f6:60:a1:a6:62:da:ed:ad:8f:62: 39:82:da:15:b6:9f:b0:59:13:6e:0c:2d:34:ec:f4:e1:25:f3: bd:cc:40:b9:14:13:53:d2:12:43:ca:a2:c0:5d:b4:69:a1:ea: 12:d8:c1:21:67:74:b8:82:4b:3c:7f:32:66:86:3d:cc:9d:16: 89:8a:7e:b0:ae:b1:06:0a:bc:a2:19:6d:a0:97:f8:be:3b:34: 2b:07:6e:73:ed:dc:95:e6:20:83:9d:55:c6:52:ff:8e:67:3d: 0b:b2:ce:b6:33:d0:60:68:bc:37:57:a4:92:74:7b:12:37:c5: 1b:ad:2f:5c:80:18:80:b7:94:8f:2c:70:70:cf:f7:14:24:47: ca:f2:f5:83:cf:c9:4c:ec:0d:c6:76:33:d4:05:fc:70:22:d4: ae:6e:f4:54:ed:e5:21:7d:2b:e1:a2:7b:80:86:2d:d5:51:a1: 59:2e:5f:0b:79:c9:f8:43:25:83:94:51:da:ee:a2:cc:e8:51: ed:ed:82:e5:75:f6:59:8b:4b:f1:12:6f:a6:2b:98:f7:26:e7: f0:8e:2c:c1:10:5a:c8:81:62:05:4a:56:bf:a6:cd:97:13:37: d7:26:9b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx60/hOi2HPyz6ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyMWM3NGMtYWQwYi00M2I5LTllYTMtYmRhYzRiZjZi YzdiMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZWRmOGUzNzMtODg2ZS00ODE1LWFhMTktOGExZWU4ODE0MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX4eIaeFt4b9yNF1vzMmUy/onKpMrQVE7EiE gy1B/D2/WDHjj/hWfJbyZJTcxgoNxoTaoBER0DweBuZLd1O4L3kH1xtLaAw6EJdb gGIpdYFIOQ/jQ67Zm6S1+bVvMpOo7teel7eqbZIeYD+2Da5WyMi7EmgX/l/0dyYk wjIZZ89/rEv4kyKPDu1QDs3ffg+TxC8kZ35N9T03eJ6mpypWQlDGz5SX+SFOddfx x0bxUugJNC3jyPpwXcqe8I9YWZMbEMyQwEqO78Z8KEhXo6TU+9u9ovPOCLoZOsxw 3qZXOUKeaJeOwtvB6f04xo8ueondfYl6ccrPhZt76l3fMCWYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4eZzrLiVwZ8aGS4VrDtehnolbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNDIx Yzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFjNGJmNmJjN2IvMzRlYTc3MTctMDkzNS0z NGVjLTg1MTEtNWU1MjczZjFlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzQyMWM3NGMtYWQwYi00M2I5LTll YTMtYmRhYzRiZjZiYzdiLzM0MjFjNzRjLWFkMGItNDNiOS05ZWEzLWJkYWM0YmY2 YmM3Yi5jcmwwHwYDVR0jBBgwFoAU8Py5nS1n03RsdNT9KVvXSB5soqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNDIxYzc0Yy1hZDBiLTQzYjktOWVhMy1iZGFj NGJmNmJjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJwdgFRBPdJRYRJvjRf2VU3BAMY/A9kszbX9mChpmLa7a2PYjmC2hW2 n7BZE24MLTTs9OEl873MQLkUE1PSEkPKosBdtGmh6hLYwSFndLiCSzx/MmaGPcyd FomKfrCusQYKvKIZbaCX+L47NCsHbnPt3JXmIIOdVcZS/45nPQuyzrYz0GBovDdX pJJ0exI3xRutL1yAGIC3lI8scHDP9xQkR8ry9YPPyUzsDcZ2M9QF/HAi1K5u9FTt 5SF9K+Gie4CGLdVRoVkuXwt5yfhDJYOUUdruoszoUe3tguV19lmLS/ESb6YrmPcm 5/COLMEQWsiBYgVKVr+mzZcTN9cmmx4= -----END CERTIFICATE-----Generated at Sun Jul 20 14:09:55 2025 by rpki-client