$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa File: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (raw, json) Hash identifier: nJX/fWUmVCfDHsLgib+eQQtXGPQjAlTcxKIREDGpZp8= Subject key identifier: 25:75:49:4E:A6:A3:DE:17:92:0B:8F:A6:B4:8B:7D:0E:EF:4E:F0:A4 Certificate issuer: /CN=f471d673-d293-405b-9549-4421d0436152 Certificate serial: 010D0C9F4328584A411048BF3ABCD455ADBF6040 Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 214483 IP address blocks: 23.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:48:bf:3a:bc:d4:55:ad:bf:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f471d673-d293-405b-9549-4421d0436152 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=3766d487-e547-4402-81e7-a1bdfca9b678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:c6:46:5a:df:03:67:9b:5c:f3:56:9e:64: 10:09:cf:ec:94:52:47:d3:07:f8:e2:e7:38:4c:c9: ae:3e:fd:dd:f8:a4:c7:7e:4a:7d:a2:87:ca:3e:74: ab:be:ec:35:67:f8:7e:45:1d:19:16:98:2d:db:e7: 80:52:e5:0d:71:4e:b4:f9:cb:73:43:a7:ab:ce:d7: 3b:db:a2:d6:dc:18:6c:a2:95:7a:2f:82:cb:39:b6: 66:07:5f:f4:43:b6:93:e8:10:ce:64:11:94:26:7a: aa:49:7b:e9:d6:0a:29:48:6e:e1:5c:f0:d6:5e:73: a7:b8:a9:9e:d3:74:6f:5b:73:66:38:0c:1b:3b:9b: c0:00:d5:ca:1f:08:89:ee:c0:fc:18:2d:87:a3:1f: 64:c6:fd:c4:46:35:db:97:76:71:f3:2a:c9:de:07: 66:fd:b4:8a:f6:0b:55:ac:2f:a4:a0:01:3c:f5:54: f0:b2:28:ef:b9:56:24:54:c4:2b:5e:e7:6f:ee:a8: d6:49:99:1a:bf:a6:b9:74:9b:e9:43:f3:8f:f1:04: 69:49:6a:2e:66:90:fa:6b:1c:20:a2:6f:e8:0e:14: a4:a6:19:11:82:87:9b:e6:22:10:72:41:8a:ce:1f: a7:8f:06:ff:b1:88:ec:57:44:16:49:d9:37:76:cf: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:49:4E:A6:A3:DE:17:92:0B:8F:A6:B4:8B:7D:0E:EF:4E:F0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl X509v3 Authority Key Identifier: keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer sbgp-ipAddrBlock: critical IPv4: 23.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:94:09:88:f2:b1:9c:e5:46:de:c5:5d:15:7b:94:5b:6b:c6: 31:98:9b:ee:51:cd:e6:b6:b2:7d:7a:a4:58:c4:2a:71:c6:14: c2:c5:58:fc:e6:71:e0:e0:d3:c5:c5:2b:25:1d:04:a4:00:3b: 51:5f:1f:9b:53:ed:8c:27:f3:dc:65:cb:6f:71:b5:62:ef:48: 50:9c:c8:7d:7b:63:60:c8:68:d8:9e:83:90:86:d3:52:24:6d: e7:fb:1d:b2:db:ac:5e:04:29:50:aa:03:c7:c8:24:14:70:cd: bf:3c:d6:ee:d8:29:c5:4a:08:16:59:98:be:1a:0c:19:e7:03: 1e:30:ea:92:46:7f:6c:21:72:18:86:ae:6d:d5:3e:56:21:75: 37:b1:da:2c:b8:b6:4b:9c:d9:26:47:aa:3f:13:43:fa:d9:4e: 64:c3:06:14:40:89:ed:8a:ed:37:3a:a0:f8:61:f6:d8:5d:c6: f3:e0:7d:a0:5a:c2:a7:f9:88:39:a1:02:08:4e:b8:d5:00:4f: 01:72:8f:a6:2d:8c:dc:f0:94:b9:30:51:54:6d:74:d8:2e:62: ee:72:89:e6:0c:e7:1f:14:fe:e3:0c:0d:b9:54:d8:bb:fc:0f: 12:62:b1:2e:66:af:45:e0:b3:f7:57:12:01:92:32:ae:b2:70: e3:04:df:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEi/OrzUVa2/YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ3MWQ2NzMtZDI5My00MDViLTk1NDktNDQyMWQwNDM2 MTUyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Mzc2NmQ0ODctZTU0Ny00NDAyLTgxZTctYTFiZGZjYTliNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1LGRlrfA2ebXPNWnmQQCc/slFJH0wf44uc4 TMmuPv3d+KTHfkp9oofKPnSrvuw1Z/h+RR0ZFpgt2+eAUuUNcU60+ctzQ6erztc7 26LW3BhsopV6L4LLObZmB1/0Q7aT6BDOZBGUJnqqSXvp1gopSG7hXPDWXnOnuKme 03RvW3NmOAwbO5vAANXKHwiJ7sD8GC2Hox9kxv3ERjXbl3Zx8yrJ3gdm/bSK9gtV rC+koAE89VTwsijvuVYkVMQrXudv7qjWSZkav6a5dJvpQ/OP8QRpSWouZpD6axwg om/oDhSkphkRgoeb5iIQckGKzh+njwb/sYjsV0QWSdk3ds8uNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV1SU6mo94XkguPprSLfQ7vTvCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcx ZDY3My1kMjkzLTQwNWItOTU0OS00NDIxZDA0MzYxNTIvNWQyMmZlZDItNTIzYS0z MjJkLWE0N2QtMmRiNWIwZTFlODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjQ3MWQ2NzMtZDI5My00MDViLTk1 NDktNDQyMWQwNDM2MTUyL2Y0NzFkNjczLWQyOTMtNDA1Yi05NTQ5LTQ0MjFkMDQz NjE1Mi5jcmwwHwYDVR0jBBgwFoAUMKAmCua1nzZrHHc/WjHX+++xJAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcxZDY3My1kMjkzLTQwNWItOTU0OS00NDIx ZDA0MzYxNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWUCYjysZzlRt7FXRV7lFtrxjGYm+5Rzea2sn16pFjEKnHGFMLFWPzm ceDg08XFKyUdBKQAO1FfH5tT7Ywn89xly29xtWLvSFCcyH17Y2DIaNieg5CG01Ik bef7HbLbrF4EKVCqA8fIJBRwzb881u7YKcVKCBZZmL4aDBnnAx4w6pJGf2whchiG rm3VPlYhdTex2iy4tkuc2SZHqj8TQ/rZTmTDBhRAie2K7Tc6oPhh9thdxvPgfaBa wqf5iDmhAghOuNUATwFyj6YtjNzwlLkwUVRtdNguYu5yieYM5x8U/uMMDblU2Lv8 DxJisS5mr0Xgs/dXEgGSMq6ycOME34I= -----END CERTIFICATE-----Generated at Tue Jul 22 05:51:36 2025 by rpki-client