$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa File: da410947-ac83-3a05-b78f-46d6111d543b.roa (raw, json) Hash identifier: Uo8SDYH33IVDUW6EYEoSPRirxtRSCpNLfB8kgaCJWpQ= Subject key identifier: B2:AA:E5:FF:66:24:18:1F:D2:A8:59:2D:B1:06:01:DD:28:57:BB:58 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584A71EB54F4AEA5340FBC154700 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 134176 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:54:f4:ae:a5:34:0f:bc:15:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=7e3ca74f-e43b-469d-a0f7-a84dc813147b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:34:91:bd:d9:da:34:94:29:15:6f:76:d2: 8e:17:9f:33:c2:44:f5:de:b1:8e:a5:9d:d3:be:77: 6f:ce:5a:6f:68:28:65:d6:2c:8b:92:97:e1:92:fc: 82:05:d3:11:6e:dc:fc:27:97:60:b1:7c:ae:08:3a: 06:31:7a:42:f4:df:8d:24:d8:13:a1:57:95:3f:aa: 85:1f:8c:e2:d7:ed:6d:a9:84:a6:1d:78:a1:08:39: b7:46:b2:51:9e:6e:6a:3d:a4:6b:f0:9b:9d:bb:69: 82:ec:c6:91:2e:a7:fb:59:5c:72:f2:5e:7e:ea:d0: 07:c1:ba:8a:91:3c:f6:de:13:b6:90:1c:a8:55:73: 23:72:aa:10:a1:be:4e:af:a2:2a:15:74:94:2b:29: f9:35:9f:68:0b:bf:e9:c6:a4:0c:81:36:b3:6d:cf: 55:9e:05:7d:f1:90:a5:dd:1a:3d:1c:52:b5:1b:22: e6:29:2a:db:02:c2:30:b0:9a:d2:3f:0b:f4:1a:20: 9b:48:31:e0:9d:67:01:4d:d9:59:64:23:af:44:14: 45:36:d9:66:dd:93:0e:43:79:81:61:0f:53:6f:bc: 7d:e7:3a:37:8e:72:13:b9:e8:8d:a7:1c:ea:e5:f1: bf:e1:0e:a7:ac:fd:7a:ae:c5:c6:8c:64:55:9c:c9: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AA:E5:FF:66:24:18:1F:D2:A8:59:2D:B1:06:01:DD:28:57:BB:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2f:18:b5:ec:72:75:c8:e9:2a:da:75:30:24:2f:5e:fd:63: 8c:46:bf:24:86:c1:02:a7:c0:96:ba:dd:68:8e:c6:28:95:98: be:a1:5d:d3:38:d7:23:ce:d5:9b:d1:c3:20:6f:94:d7:b9:13: 26:cf:38:58:a5:33:ae:94:be:4e:38:30:df:e0:24:e9:7c:3b: 88:03:30:9b:5d:46:7a:56:de:8d:be:99:2d:45:d4:9a:fe:59: ee:53:e6:1a:df:f9:86:90:34:d3:35:63:94:fd:de:37:4b:e7: a7:7b:d4:a7:56:0a:24:e8:68:60:0e:44:77:a8:5c:25:8e:b4: 5e:b8:50:ba:75:f6:23:ff:f0:8f:3a:93:8d:30:8a:cb:68:35: 3b:2a:47:cd:a8:1d:ee:c2:79:5d:54:aa:35:c5:b4:de:52:24: 95:9c:ad:ee:f7:84:7c:01:40:a5:41:fc:95:cc:77:55:ac:a8: df:d4:d3:f8:55:01:94:2a:86:61:8d:9c:f7:3c:d7:b7:41:d3: 1d:da:21:aa:cd:ff:b0:c5:10:29:bd:e9:23:3a:ec:da:84:04: f5:5d:17:e0:6e:1e:cb:57:42:1c:c5:5b:95:89:91:bd:a9:3a: 4c:b2:99:6a:5f:91:3a:3d:b2:22:b3:1f:b8:22:0e:24:71:db: b5:be:25:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61T0rqU0D7wVRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk N2UzY2E3NGYtZTQzYi00NjlkLWEwZjctYTg0ZGM4MTMxNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoE0kb3Z2jSUKRVvdtKOF58zwkT13rGOpZ3T vndvzlpvaChl1iyLkpfhkvyCBdMRbtz8J5dgsXyuCDoGMXpC9N+NJNgToVeVP6qF H4zi1+1tqYSmHXihCDm3RrJRnm5qPaRr8Judu2mC7MaRLqf7WVxy8l5+6tAHwbqK kTz23hO2kByoVXMjcqoQob5Or6IqFXSUKyn5NZ9oC7/pxqQMgTazbc9VngV98ZCl 3Ro9HFK1GyLmKSrbAsIwsJrSPwv0GiCbSDHgnWcBTdlZZCOvRBRFNtlm3ZMOQ3mB YQ9Tb7x95zo3jnITueiNpxzq5fG/4Q6nrP16rsXGjGRVnMlCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKq5f9mJBgf0qhZLbEGAd0oV7tYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvZGE0MTA5NDctYWM4My0z YTA1LWI3OGYtNDZkNjExMWQ1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAvGLXscnXI6SradTAkL179Y4xGvySGwQKnwJa63WiOxiiVmL6hXdM4 1yPO1ZvRwyBvlNe5EybPOFilM66Uvk44MN/gJOl8O4gDMJtdRnpW3o2+mS1F1Jr+ We5T5hrf+YaQNNM1Y5T93jdL56d71KdWCiToaGAORHeoXCWOtF64ULp19iP/8I86 k40wistoNTsqR82oHe7CeV1UqjXFtN5SJJWcre73hHwBQKVB/JXMd1WsqN/U0/hV AZQqhmGNnPc817dB0x3aIarN/7DFECm96SM67NqEBPVdF+BuHstXQhzFW5WJkb2p OkyymWpfkTo9siKzH7giDiRx27W+JVs= -----END CERTIFICATE-----Generated at Sun Jul 20 11:10:09 2025 by rpki-client