$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa File: db99c048-07db-367d-a8d7-c60896aca161.roa (raw, json) Hash identifier: kDzmRIXOEBKwvdgtfoQxBnn9XyCSsEhsQL2UdXgdQGg= Subject key identifier: 64:B8:EF:7D:4B:CB:44:FD:F5:2A:25:57:74:FA:E2:86:08:BA:91:01 Certificate issuer: /CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1 Certificate serial: 010D0C9F4328584A8BD2DCABEAFF655355492CC0 Authority key identifier: 35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa Signing time: Thu 17 Jul 2025 07:42:59 +0000 ROA not before: Thu 17 Jul 2025 07:42:59 +0000 ROA not after: Wed 15 Oct 2025 07:42:59 +0000 asID: 979 IP address blocks: 23.141.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:d2:dc:ab:ea:ff:65:53:55:49:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1 Validity Not Before: Jul 17 07:42:59 2025 GMT Not After : Oct 15 07:42:59 2025 GMT Subject: CN=5cc85f5f-34d5-41d0-9967-8e069be90ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:cf:d2:38:3d:c1:64:03:49:fe:9c:5c:fb: af:f8:48:c2:ad:83:1f:50:48:47:15:a3:c5:bc:0b: 4d:b2:db:b7:22:45:2b:df:3c:68:ba:2b:fb:3a:e1: 19:e8:a1:10:d7:52:7f:79:e4:c7:d8:a2:cb:99:16: f7:e7:87:60:51:01:50:5c:02:68:9d:6d:25:15:d0: e2:01:bb:01:36:af:37:2b:43:fe:05:28:21:78:08: f3:d3:1f:39:45:c9:a8:4b:63:77:a0:ab:aa:21:96: 82:31:20:99:a8:e8:ab:46:16:11:c8:dd:5e:d9:46: f9:da:88:20:7c:3f:4a:2e:71:fd:0d:38:68:55:91: 49:d8:68:87:22:97:15:08:42:21:11:3c:ea:e7:7b: ec:9b:2e:48:3f:49:fb:cf:83:b9:31:7d:af:7a:3e: a8:bd:a7:df:ae:4e:aa:64:7e:c8:6a:4e:df:ea:3c: 24:61:38:a9:3b:6f:92:b1:f2:09:94:fb:c9:08:47: 63:08:36:7f:49:c5:2d:85:64:4f:0f:9d:8e:c0:64: da:28:5e:47:a1:17:31:85:a1:eb:ec:c5:39:1c:05: 2a:1d:f7:54:3f:58:93:6b:7e:15:d3:3a:1c:94:a4: 4a:28:2a:0e:1f:00:86:f1:3c:da:94:dc:ed:44:e6: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:EF:7D:4B:CB:44:FD:F5:2A:25:57:74:FA:E2:86:08:BA:91:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl X509v3 Authority Key Identifier: keyid:35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer sbgp-ipAddrBlock: critical IPv4: 23.141.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6e:d2:24:4a:d7:1c:a3:ce:0e:f7:85:20:3f:d3:a1:71:c4: 16:8a:45:4c:74:ed:97:4a:6c:c3:81:44:0c:ca:3d:71:fc:9b: 06:dc:93:e6:4c:91:32:ff:81:cc:10:59:a9:1a:72:d1:43:c8: d6:da:9c:2f:52:3f:fa:35:6f:76:ff:a8:2f:2d:89:33:fe:8a: c6:f1:f4:6a:6b:5c:40:28:e3:12:16:99:e8:2c:5f:43:dd:da: 08:2d:fc:99:d4:79:ec:36:cb:99:d5:4e:3c:2f:7e:af:d6:9a: 7d:42:c4:1d:60:e1:3f:e2:fa:ea:ae:fc:9b:4d:7d:b4:8b:d9: a1:e8:5d:3a:da:9b:49:d7:92:95:63:ac:48:79:6e:de:67:a1: 49:8f:b6:dd:0e:03:b8:a1:ae:17:90:55:b1:e8:06:ba:2a:b4: 3f:20:24:00:a9:4f:91:03:99:5c:65:20:e2:2e:28:95:d5:41: 79:3b:84:1b:b4:bc:04:2d:d3:84:47:79:b4:e2:7b:e5:fc:12: 21:ee:59:ba:be:e5:b1:43:92:41:df:b3:1b:9d:74:67:78:17: 44:60:cc:10:e8:e1:6c:79:2b:31:c5:75:d3:da:b7:39:70:5a: 40:9b:fa:9c:01:8e:55:2a:fb:3e:14:22:ea:4c:0d:b1:e6:dc: 62:8e:f7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqL0tyr6v9lU1VJLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkMDg5MWQtNjk3My00YzZlLWEzZjktMmMwODY2ZTIy OWExMB4XDTI1MDcxNzA3NDI1OVoXDTI1MTAxNTA3NDI1OVowLzEtMCsGA1UEAxMk NWNjODVmNWYtMzRkNS00MWQwLTk5NjctOGUwNjliZTkwZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL3P0jg9wWQDSf6cXPuv+EjCrYMfUEhHFaPF vAtNstu3IkUr3zxouiv7OuEZ6KEQ11J/eeTH2KLLmRb354dgUQFQXAJonW0lFdDi AbsBNq83K0P+BSgheAjz0x85RcmoS2N3oKuqIZaCMSCZqOirRhYRyN1e2Ub52ogg fD9KLnH9DThoVZFJ2GiHIpcVCEIhETzq53vsmy5IP0n7z4O5MX2vej6ovaffrk6q ZH7Iak7f6jwkYTipO2+SsfIJlPvJCEdjCDZ/ScUthWRPD52OwGTaKF5HoRcxhaHr 7MU5HAUqHfdUP1iTa34V0zoclKRKKCoOHwCG8TzalNztROaRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS4731Ly0T99SolV3T64oYIupEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYmQw ODkxZC02OTczLTRjNmUtYTNmOS0yYzA4NjZlMjI5YTEvZGI5OWMwNDgtMDdkYi0z NjdkLWE4ZDctYzYwODk2YWNhMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWJkMDg5MWQtNjk3My00YzZlLWEz ZjktMmMwODY2ZTIyOWExLzFiZDA4OTFkLTY5NzMtNGM2ZS1hM2Y5LTJjMDg2NmUy MjlhMS5jcmwwHwYDVR0jBBgwFoAUNQmYtILXBkVWX3ejC3Chk6xme1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYmQwODkxZC02OTczLTRjNmUtYTNmOS0yYzA4 NjZlMjI5YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1u0iRK1xyjzg73hSA/06FxxBaKRUx07ZdKbMOBRAzKPXH8mwbck+ZM kTL/gcwQWakactFDyNbanC9SP/o1b3b/qC8tiTP+isbx9GprXEAo4xIWmegsX0Pd 2ggt/JnUeew2y5nVTjwvfq/Wmn1CxB1g4T/i+uqu/JtNfbSL2aHoXTram0nXkpVj rEh5bt5noUmPtt0OA7ihrheQVbHoBroqtD8gJACpT5EDmVxlIOIuKJXVQXk7hBu0 vAQt04RHebTie+X8EiHuWbq+5bFDkkHfsxuddGd4F0RgzBDo4Wx5KzHFddPatzlw WkCb+pwBjlUq+z4UIupMDbHm3GKO97A= -----END CERTIFICATE-----Generated at Tue Jul 22 11:47:43 2025 by rpki-client