$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa File: 87664052-795b-32ea-a22c-6b5d3132878f.roa (raw, json) Hash identifier: 1J7SVHLRi+Nc26AwsjCE7IwmTeZYc0+IBv6W1RcO72E= Subject key identifier: 00:5C:61:14:82:B6:A9:A8:4E:35:34:BC:06:B0:8E:4E:C8:5C:47:4A Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584A8410F6AC4BF94FD561B20F80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 55571 IP address blocks: 167.23.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f6:ac:4b:f9:4f:d5:61:b2:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cb29c0e4-861c-4fcc-aaa8-e5ef455e9f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:fb:b2:a3:a4:fe:2b:fa:24:9c:28:29:c8: 98:47:be:8d:eb:6e:1a:7f:b2:db:92:15:81:b0:6f: f8:df:2e:d8:0a:c4:78:9a:8d:26:a2:1b:41:66:ea: 97:66:38:75:69:02:06:f0:bf:98:57:6b:fd:2b:78: 5f:f2:2c:65:8b:a3:71:9e:7c:f4:0e:cd:44:0d:63: a3:7d:06:88:52:a6:95:2c:2b:dc:1d:62:b1:ae:6b: e1:a9:9f:57:bb:1b:93:b8:d1:f6:03:d3:26:20:8b: 5a:55:20:ff:40:dd:22:55:c9:cf:a8:26:a9:dc:37: 03:ec:aa:69:f0:98:a1:4c:96:49:7b:2d:7d:a1:a1: bf:2f:d1:e4:f1:1f:ea:b8:85:c3:9d:de:1e:65:75: 8a:62:d6:76:9d:d9:d2:52:26:90:de:64:27:d2:94: 5a:d0:36:31:94:ce:7d:0c:fa:51:65:8e:15:46:76: 89:69:7f:3b:87:5e:e1:01:5f:a6:c0:23:b0:d7:6b: d0:a0:92:6f:e5:3e:1e:95:0b:60:4f:50:25:7e:9b: 0e:71:0c:a7:51:80:17:5b:08:34:5f:d4:f3:eb:6f: cf:d4:22:b6:2c:5a:44:0e:a5:88:95:26:e0:59:02: b4:e4:23:04:8e:24:e6:a8:bd:cb:cc:f4:e7:bd:24: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:61:14:82:B6:A9:A8:4E:35:34:BC:06:B0:8E:4E:C8:5C:47:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:91:34:54:5f:b5:9e:aa:41:57:3b:14:4d:b2:df:a3:c0:a9: 3a:b2:f8:be:08:7e:5c:2f:ca:68:9d:dc:66:e3:29:1e:25:84: 84:dd:ad:c5:d0:61:4a:5d:bb:0f:4d:02:de:b2:80:ff:b5:d1: 49:20:a8:08:9a:3b:cf:b9:5f:fb:70:ce:78:9a:d3:da:60:58: 9e:48:be:a6:57:68:02:8b:73:4c:81:e4:f0:49:61:2b:47:2e: 0d:fb:fd:16:8f:ac:f9:ae:dc:0b:0e:4d:f8:d6:c4:b8:04:1c: d2:21:a9:5a:f3:da:a4:b1:75:9e:8f:6e:93:85:94:10:79:77: 2d:e7:2e:3f:eb:bb:d4:9e:82:1e:1b:7b:a2:f2:f3:ec:04:82: 4f:3c:05:d3:e9:6d:93:de:bc:29:30:86:3c:c3:e3:a5:fb:34: 5d:39:25:bd:3f:1e:42:b5:30:c9:10:9a:79:d2:a0:e4:17:8d: 64:69:11:df:db:8f:84:36:a0:a7:6f:c8:cf:ae:1d:75:c4:b5: 32:b4:e9:f3:0d:51:d1:9d:ea:7e:31:2f:b3:26:cf:20:82:bc: 17:b6:ee:a5:67:27:23:4e:2f:cf:e4:93:ff:f1:e4:5a:c3:38: f8:26:44:4a:2a:08:e7:a8:fe:ca:d0:64:b5:ff:c1:26:e6:fb: 5a:07:55:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPasS/lP1WGyD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2IyOWMwZTQtODYxYy00ZmNjLWFhYTgtZTVlZjQ1NWU5Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X/7sqOk/iv6JJwoKciYR76N624af7LbkhWB sG/43y7YCsR4mo0mohtBZuqXZjh1aQIG8L+YV2v9K3hf8ixli6Nxnnz0Ds1EDWOj fQaIUqaVLCvcHWKxrmvhqZ9XuxuTuNH2A9MmIItaVSD/QN0iVcnPqCap3DcD7Kpp 8JihTJZJey19oaG/L9Hk8R/quIXDnd4eZXWKYtZ2ndnSUiaQ3mQn0pRa0DYxlM59 DPpRZY4VRnaJaX87h17hAV+mwCOw12vQoJJv5T4elQtgT1AlfpsOcQynUYAXWwg0 X9Tz62/P1CK2LFpEDqWIlSbgWQK05CMEjiTmqL3LzPTnvSTDrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABcYRSCtqmoTjU0vAawjk7IXEdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvODc2NjQwNTItNzk1Yi0z MmVhLWEyMmMtNmI1ZDMxMzI4NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaRNFRftZ6qQVc7FE2y36PAqTqy+L4Iflwvymid3GbjKR4lhITdrcXQ YUpduw9NAt6ygP+10UkgqAiaO8+5X/twznia09pgWJ5IvqZXaAKLc0yB5PBJYStH Lg37/RaPrPmu3AsOTfjWxLgEHNIhqVrz2qSxdZ6PbpOFlBB5dy3nLj/ru9Segh4b e6Ly8+wEgk88BdPpbZPevCkwhjzD46X7NF05Jb0/HkK1MMkQmnnSoOQXjWRpEd/b j4Q2oKdvyM+uHXXEtTK06fMNUdGd6n4xL7MmzyCCvBe27qVnJyNOL8/kk//x5FrD OPgmREoqCOeo/srQZLX/wSbm+1oHVXs= -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:43 2025 by rpki-client