$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa File: ea607b3b-0978-3010-b0fd-d677329f1af0.roa (raw, json) Hash identifier: j442pD/RYEsUNXRnN4kD1DRZhW2hF5Q1S+GjYzrrFhs= Subject key identifier: 0D:CD:FC:48:B4:F3:37:EC:39:27:4C:2D:30:36:BB:35:1F:96:F5:82 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584A8410F5E4CCB9B77B78015A80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 11870 IP address blocks: 167.23.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f5:e4:cc:b9:b7:7b:78:01:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9278640b-9442-4922-b104-0f13a38290da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:0b:6c:d7:84:fc:d5:e5:25:a1:af:34:8f: f8:8e:da:be:79:18:06:32:f3:dd:ff:bc:3b:14:a0: 8b:36:cc:b9:26:40:90:fc:95:07:5c:65:35:9d:ee: c8:ba:23:0e:f5:29:71:a7:2c:f4:29:04:fe:4e:39: 4b:b3:5d:09:5e:05:34:ad:d9:95:cc:8e:77:af:ff: 05:09:ef:31:51:54:05:45:c2:9c:c4:ce:65:7e:4c: 88:04:16:28:7f:12:35:07:dd:5d:e1:3b:20:0d:59: 4c:28:8b:a3:a6:c2:8b:86:d4:d9:e4:6d:63:11:99: 65:25:95:b4:e0:6a:24:b5:09:71:8f:45:12:ed:01: 01:a6:6e:75:b6:b4:b7:5c:00:15:2a:7c:ff:9c:c2: 30:a3:58:a3:48:1c:b6:e4:9f:14:c2:03:bd:12:02: b2:b5:6f:52:9e:76:aa:f1:31:b7:70:65:58:35:f7: a2:e5:9d:ca:81:c0:55:48:77:26:02:4a:b8:12:d1: 94:4a:3a:00:40:14:da:1a:76:6f:48:b4:99:84:6e: ec:fa:f1:1c:34:04:97:11:91:88:f0:c7:ae:af:04: 5c:04:38:96:99:26:8f:ec:23:30:d2:2d:e5:bb:44: 71:d0:12:f4:9b:9f:ae:57:ce:1c:82:52:11:fe:fa: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CD:FC:48:B4:F3:37:EC:39:27:4C:2D:30:36:BB:35:1F:96:F5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:06:12:e8:70:9b:9c:61:a2:bb:de:d9:5a:96:b1:dd:54:28: e4:9f:44:cd:30:cb:c7:78:4a:ff:a4:a5:db:7f:79:d1:ec:22: fc:84:f5:5c:54:75:87:8b:26:82:2c:dd:50:1c:be:3d:e8:af: 58:1c:d0:ce:27:79:47:1e:78:43:f2:2d:b1:83:d1:77:d8:b8: b9:06:90:6f:ab:d9:f2:84:0a:df:f8:cb:b9:43:1d:19:8c:1f: ef:05:fe:20:28:30:ed:e6:f9:14:6b:07:b8:41:6c:b9:d5:f4: 66:47:01:c8:e4:41:82:85:18:8b:52:a5:75:f7:7b:56:e5:32: 7c:fd:ca:e9:e1:88:1f:9d:35:1d:54:ac:f3:5f:9f:2c:81:3a: 39:d8:cc:58:53:fa:57:1a:db:4a:3e:ae:ee:97:f0:56:56:1b: 3d:1e:1c:81:ed:37:09:68:5f:06:e2:c0:05:11:34:0b:41:a1: f9:b7:a3:5a:ad:af:38:bd:f0:1c:9d:52:91:66:d5:f8:1c:5d: 9c:26:0e:05:a9:49:0e:40:9e:88:04:86:6b:cb:82:c0:44:e2: b4:80:41:97:9b:73:d6:f4:f8:89:1a:ad:b1:ca:e6:0b:4d:1c: 8a:99:fe:83:a9:33:f8:a8:60:6b:f3:08:1d:b9:27:aa:17:0a: 38:b2:55:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPXkzLm3e3gBWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTI3ODY0MGItOTQ0Mi00OTIyLWIxMDQtMGYxM2EzODI5MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZgLbNeE/NXlJaGvNI/4jtq+eRgGMvPd/7w7 FKCLNsy5JkCQ/JUHXGU1ne7IuiMO9Slxpyz0KQT+TjlLs10JXgU0rdmVzI53r/8F Ce8xUVQFRcKcxM5lfkyIBBYofxI1B91d4TsgDVlMKIujpsKLhtTZ5G1jEZllJZW0 4GoktQlxj0US7QEBpm51trS3XAAVKnz/nMIwo1ijSBy25J8UwgO9EgKytW9Snnaq 8TG3cGVYNfei5Z3KgcBVSHcmAkq4EtGUSjoAQBTaGnZvSLSZhG7s+vEcNASXEZGI 8MeurwRcBDiWmSaP7CMw0i3lu0Rx0BL0m5+uV84cglIR/vriOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3N/Ei08zfsOSdMLTA2uzUflvWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvZWE2MDdiM2ItMDk3OC0z MDEwLWIwZmQtZDY3NzMyOWYxYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoGEuhwm5xhorve2VqWsd1UKOSfRM0wy8d4Sv+kpdt/edHsIvyE9VxU dYeLJoIs3VAcvj3or1gc0M4neUceeEPyLbGD0XfYuLkGkG+r2fKECt/4y7lDHRmM H+8F/iAoMO3m+RRrB7hBbLnV9GZHAcjkQYKFGItSpXX3e1blMnz9yunhiB+dNR1U rPNfnyyBOjnYzFhT+lca20o+ru6X8FZWGz0eHIHtNwloXwbiwAURNAtBofm3o1qt rzi98BydUpFm1fgcXZwmDgWpSQ5AnogEhmvLgsBE4rSAQZebc9b0+IkarbHK5gtN HIqZ/oOpM/ioYGvzCB25J6oXCjiyVdI= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:09 2025 by rpki-client