$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa File: 667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa (raw, json) Hash identifier: Bc8PGyL5kJBCh0ZhBF/K4R9tN0fYFDe95kwrLfGHa0w= Subject key identifier: BC:B2:C7:19:4B:FA:EA:6E:00:73:08:16:E2:7D:F2:80:FB:D9:81:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84122582B6B10D208A6DD580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 23.251.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:25:82:b6:b1:0d:20:8a:6d:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=04840185-db93-4d4b-8833-a19f324d807a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:e4:bb:68:48:d8:56:9b:2e:0b:cf:3e:fe: 80:7a:8e:9b:fc:09:11:9a:4c:e3:b2:3d:ed:ac:36: 93:00:84:5e:65:4a:7c:d1:a6:fd:16:2b:e9:28:f1: 89:61:ad:04:2a:2b:30:c8:64:9b:84:07:93:81:2b: dc:fd:de:77:6d:8a:4a:54:f6:a7:68:14:05:69:85: bd:c2:a8:32:33:b5:4d:1c:80:5b:e8:c9:ba:05:b9: f4:bb:37:1c:81:ae:a9:f7:88:f4:b2:0a:8b:8b:41: ce:9e:1f:ef:aa:a2:58:76:82:95:f9:6b:1c:d2:43: 28:85:31:e1:3f:4d:d8:05:16:6b:dd:50:8a:5f:10: 8a:87:9a:e0:ea:f1:4d:24:77:f2:8c:35:d6:9d:f3: ea:a2:00:04:82:87:1a:b7:ad:71:6c:9d:bf:89:fc: fa:81:71:44:9e:9c:98:91:cd:9d:87:e5:56:ed:20: 46:fd:4b:1d:88:d7:f9:52:ed:91:ba:f2:70:85:e1: 1d:f2:c6:e0:85:11:43:80:1c:57:b0:e0:b6:70:d4: b9:f4:bf:d9:a0:ff:3e:eb:54:fa:6f:fe:1a:4d:d0: ee:07:7b:54:bd:1c:02:13:e1:c6:6e:ee:9c:ae:3d: 76:71:58:eb:dd:63:f5:c2:29:6b:10:ec:ca:c8:e8: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:C7:19:4B:FA:EA:6E:00:73:08:16:E2:7D:F2:80:FB:D9:81:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/667fdc40-14dc-38e1-9460-d4a3e5e33d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b6:6c:91:8d:51:32:02:3b:91:98:88:38:6c:f1:69:30:65: 31:81:af:79:bb:69:8f:30:2d:6f:ba:ac:22:30:be:9b:c4:08: b3:fe:72:c5:14:ee:dd:f3:89:f3:8b:da:dc:03:b9:2e:11:4f: 78:04:17:9f:e8:3d:70:08:84:c0:c1:fb:f4:60:76:8e:00:91: fc:bd:cc:d4:b6:19:72:d9:16:d1:ec:11:12:f4:c0:24:f6:89: 2b:c7:8e:37:78:3e:a3:69:07:c7:0a:c0:e8:06:d4:46:3b:55: f8:d6:03:5d:c7:76:3e:b5:7e:7d:68:9d:4c:a7:73:dc:fd:72: 5a:0f:c0:39:5a:56:33:92:05:92:4b:89:73:3b:8e:28:f4:48: 9c:3a:a8:bf:35:55:c5:35:8b:83:87:13:26:6b:39:e2:7f:07: c4:bf:7a:81:b7:b9:04:39:3c:5e:09:66:4f:11:12:6b:72:54: 03:32:72:d2:ec:26:5f:41:f5:94:7d:9f:cd:32:95:45:d7:78: fa:3d:9c:64:02:e3:44:db:97:39:a7:9c:f3:3e:16:a4:5d:56: 1b:31:5a:88:63:43:3b:1e:4f:ec:2e:43:4f:20:f1:ec:e9:b6: 6b:0f:34:14:c0:ca:0f:a8:0f:53:be:e2:5c:d1:4b:53:c4:da: e9:98:25:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiWCtrENIIpt1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDQ4NDAxODUtZGI5My00ZDRiLTg4MzMtYTE5ZjMyNGQ4MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYfku2hI2FabLgvPPv6Aeo6b/AkRmkzjsj3t rDaTAIReZUp80ab9FivpKPGJYa0EKiswyGSbhAeTgSvc/d53bYpKVPanaBQFaYW9 wqgyM7VNHIBb6Mm6Bbn0uzccga6p94j0sgqLi0HOnh/vqqJYdoKV+Wsc0kMohTHh P03YBRZr3VCKXxCKh5rg6vFNJHfyjDXWnfPqogAEgocat61xbJ2/ifz6gXFEnpyY kc2dh+VW7SBG/UsdiNf5Uu2RuvJwheEd8sbghRFDgBxXsOC2cNS59L/ZoP8+61T6 b/4aTdDuB3tUvRwCE+HGbu6crj12cVjr3WP1wilrEOzKyOh+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyyxxlL+upuAHMIFuJ98oD72YGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY3ZmRjNDAtMTRkYy0z OGUxLTk0NjAtZDRhM2U1ZTMzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS2bJGNUTICO5GYiDhs8WkwZTGBr3m7aY8wLW+6rCIwvpvECLP+csUU 7t3zifOL2twDuS4RT3gEF5/oPXAIhMDB+/Rgdo4Akfy9zNS2GXLZFtHsERL0wCT2 iSvHjjd4PqNpB8cKwOgG1EY7VfjWA13Hdj61fn1onUync9z9cloPwDlaVjOSBZJL iXM7jij0SJw6qL81VcU1i4OHEyZrOeJ/B8S/eoG3uQQ5PF4JZk8REmtyVAMyctLs Jl9B9ZR9n80ylUXXePo9nGQC40TblzmnnPM+FqRdVhsxWohjQzseT+wuQ08g8ezp tmsPNBTAyg+oD1O+4lzRS1PE2umYJYY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:35:34 2025 by rpki-client