$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: 4q3PuKJprjFN2oQqazm3hM4GOLj8R7ASP0mPd/J8qCE= Subject key identifier: C0:27:70:AF:8A:94:76:99:72:DB:0E:53:B1:19:DC:2D:D5:58:DA:DB Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584A5FC5E10DF61F611DE89051C0 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e1:0d:f6:1f:61:1d:e8:90:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=09e63377-a487-4959-be6f-ad831c7fc6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:ba:a4:22:f7:99:30:fb:83:4b:71:f8:d8: 2e:6d:35:f3:68:2c:0f:8d:54:1a:71:02:e3:49:d1: f0:ab:95:6c:23:4c:94:f6:b4:10:e0:3a:e0:61:95: a7:34:2b:a4:21:83:dc:d2:85:ce:86:43:ce:07:9b: c2:d5:db:a1:22:4d:ac:e9:ec:aa:ec:fd:4c:5b:85: de:82:67:e2:bf:b7:22:99:e1:8d:f7:05:15:ef:80: e6:fb:11:cb:0a:b0:08:f7:ab:2b:de:78:56:bf:e6: c3:f2:43:49:cd:a1:57:1b:2c:0c:53:cb:aa:d6:f2: e6:f2:e5:c3:0a:84:25:70:44:2d:3a:0b:fd:a2:ab: 0d:76:c5:65:bf:3d:5a:f9:85:1a:dc:86:17:8b:96: 68:aa:aa:d2:01:f1:e5:4f:ad:44:b7:27:b0:98:8f: 6f:e0:85:4a:87:5a:68:c9:3e:78:2f:b4:e3:a5:c1: 69:9c:88:fa:0e:81:0a:c0:29:53:3d:b6:40:62:1c: 34:4b:82:be:00:fa:41:4f:fb:5c:97:82:73:bc:7b: 79:c0:dc:a9:93:7f:bd:64:d9:a9:29:33:78:f1:9d: a5:87:b9:f2:6a:19:f1:be:28:29:45:77:5c:ad:3f: 41:c1:1b:fa:6d:fb:6e:b0:72:6e:12:10:82:c9:af: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:27:70:AF:8A:94:76:99:72:DB:0E:53:B1:19:DC:2D:D5:58:DA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6b:31:7a:a0:ec:56:74:d3:9b:c6:6c:4e:e2:6e:ce:1b:d9: 70:a0:43:e5:91:c0:9d:b6:b9:cb:e1:42:63:17:1e:34:59:9e: c0:80:de:1b:a6:96:2c:d6:2f:8b:aa:cb:d0:88:8d:58:03:e8: f9:04:7c:99:61:4a:a6:b3:22:a3:42:e5:a1:57:0e:1d:87:e5: fc:b6:34:a0:c2:e7:86:0b:9a:1a:cc:ff:42:93:b1:5a:9e:14: c1:08:74:34:14:29:ed:a2:b0:9b:75:8a:5a:86:d2:82:ed:d6: ee:0b:75:02:95:ae:58:c1:8e:2f:c2:20:2a:91:53:9f:cd:6c: cf:e1:7f:c2:e7:11:a8:fc:19:93:e8:12:90:72:02:bc:6e:8d: 5f:c6:87:a5:92:35:5e:b2:01:7e:28:56:57:f3:cf:9e:3f:c0: f1:8e:d8:34:8b:4e:89:68:84:00:1d:97:a5:9a:05:30:9a:43: a5:58:8f:0e:79:95:b8:0a:1f:d0:8f:cf:13:dd:fe:ff:7f:4d: dd:ce:9d:24:f1:d6:c1:0a:d0:d4:b4:97:16:18:d6:2b:78:e7: e9:24:96:89:f8:44:97:15:57:dc:78:d9:3e:f8:0a:fb:e4:f7: 71:87:04:ed:e3:aa:18:fc:90:d7:64:df:0a:90:28:10:17:64: 4c:53:3e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeEN9h9hHeiQUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MDllNjMzNzctYTQ4Ny00OTU5LWJlNmYtYWQ4MzFjN2ZjNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sy6pCL3mTD7g0tx+NgubTXzaCwPjVQacQLj SdHwq5VsI0yU9rQQ4DrgYZWnNCukIYPc0oXOhkPOB5vC1duhIk2s6eyq7P1MW4Xe gmfiv7cimeGN9wUV74Dm+xHLCrAI96sr3nhWv+bD8kNJzaFXGywMU8uq1vLm8uXD CoQlcEQtOgv9oqsNdsVlvz1a+YUa3IYXi5ZoqqrSAfHlT61EtyewmI9v4IVKh1po yT54L7TjpcFpnIj6DoEKwClTPbZAYhw0S4K+APpBT/tcl4JzvHt5wNypk3+9ZNmp KTN48Z2lh7nyahnxvigpRXdcrT9BwRv6bftusHJuEhCCya9CdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAncK+KlHaZctsOU7EZ3C3VWNrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRrMXqg7FZ005vGbE7ibs4b2XCgQ+WRwJ22ucvhQmMXHjRZnsCA3hum lizWL4uqy9CIjVgD6PkEfJlhSqazIqNC5aFXDh2H5fy2NKDC54YLmhrM/0KTsVqe FMEIdDQUKe2isJt1ilqG0oLt1u4LdQKVrljBji/CICqRU5/NbM/hf8LnEaj8GZPo EpByArxujV/Gh6WSNV6yAX4oVlfzz54/wPGO2DSLTolohAAdl6WaBTCaQ6VYjw55 lbgKH9CPzxPd/v9/Td3OnSTx1sEK0NS0lxYY1it45+kklon4RJcVV9x42T74Cvvk 93GHBO3jqhj8kNdk3wqQKBAXZExTPjM= -----END CERTIFICATE-----Generated at Sat Jul 26 06:33:55 2025 by rpki-client