$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa File: 455b85de-a208-333d-ad2f-1cacd114a2e0.roa (raw, json) Hash identifier: JUXTUqtxNTiQr19JWNlcP+ruh6mNM8yYvLKiJU6+iy8= Subject key identifier: A3:45:53:F4:73:67:44:CB:57:4F:B3:E8:11:7A:C5:2B:7D:B8:F7:01 Certificate issuer: /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Certificate serial: 010D0C9F4328584A1E2AA800B75A143348710480 Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 21557 IP address blocks: 23.128.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a8:00:b7:5a:14:33:48:71:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=289d8282-de58-4598-b8a1-8da62343e6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:22:fb:8d:a2:8b:ce:65:6b:f6:db:57:da: 17:5f:14:8b:80:51:3a:c2:8b:3e:67:06:c1:80:f2: 11:91:fa:06:ba:60:ca:8c:83:39:a2:dd:e1:51:d2: 66:46:d7:5b:58:46:c9:f5:f4:39:17:45:08:a5:be: 85:5e:16:c5:61:84:11:f0:f1:5d:fb:c4:c8:65:54: af:89:a0:94:32:a9:d1:32:1a:73:24:cd:da:43:42: 5b:b4:74:28:b5:e4:00:48:4e:96:52:a9:fa:79:f8: 9a:26:e1:21:7b:8e:53:8b:b7:ce:87:ff:b1:e4:fb: 0a:f7:47:0a:08:78:43:7c:8c:86:4e:41:d2:1f:71: e7:c6:e0:9d:13:02:c3:e5:bb:e4:a9:8d:36:48:49: 94:ec:e0:42:05:38:50:f3:b0:99:f8:4b:84:5c:c4: 38:03:b5:5c:8c:2c:be:b1:5b:3c:02:ec:34:63:55: 5c:c1:3d:72:87:71:7f:0e:8b:d2:e1:bf:04:1a:d5: 8e:e1:18:7a:06:5e:e7:ef:29:03:d5:de:cb:3c:14: 76:e2:7c:f9:f7:d9:66:c0:e2:d7:c0:fd:e8:4e:17: c8:5e:05:d9:0b:49:7b:a2:dc:04:c5:6e:24:dc:13: f0:9d:c8:9f:c1:a5:02:1f:ba:94:30:b0:04:32:5b: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:53:F4:73:67:44:CB:57:4F:B3:E8:11:7A:C5:2B:7D:B8:F7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl X509v3 Authority Key Identifier: keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer sbgp-ipAddrBlock: critical IPv4: 23.128.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:74:cf:5c:13:58:eb:e5:cd:00:52:bd:cb:e9:fe:c9:e1:8a: ac:2c:2f:da:33:0c:5b:76:d8:d2:0c:50:3e:d6:46:94:96:e4: f1:db:dc:df:f9:d0:76:bf:37:dd:27:06:a2:0a:b4:af:37:18: df:c1:89:8a:7b:8f:4c:53:bc:34:f0:f9:fa:2c:90:a5:9a:ee: 42:a1:0a:da:8e:91:2a:d3:02:a1:17:48:7a:f4:af:02:b8:c3: 6b:06:ed:ed:29:ad:7d:26:12:db:4c:a9:e5:fd:30:8c:87:3d: ba:0b:74:5d:e2:e2:b9:74:54:a4:85:ee:8c:38:2b:90:56:f6: be:29:3a:5d:73:4f:7b:65:84:93:66:ed:25:76:3e:7b:30:eb: b5:cf:68:e8:cf:38:e9:60:7a:4b:8a:bc:4e:d3:b7:76:d8:83: 4c:e9:01:d1:9f:40:b3:5a:ff:7f:b8:e0:71:43:0b:78:f9:93: 56:07:3d:b0:3a:1d:aa:e6:76:31:59:d0:0e:0c:d3:62:ac:e7: c0:3c:b2:cf:5d:4c:38:ab:77:bd:a6:d0:44:72:f6:01:15:1d: f6:d5:b8:0b:25:69:8e:6c:b3:37:20:b0:40:fc:ec:5f:9b:33: 6a:f6:70:60:80:fd:44:01:0e:9e:9b:07:30:d8:54:69:3b:3a: 40:95:b0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqgAt1oUM0hxBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZGM0NGItODViNi00MjQ3LWI1NzktZWI4Y2ZkOGU5 N2ZlMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk Mjg5ZDgyODItZGU1OC00NTk4LWI4YTEtOGRhNjIzNDNlNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCIi+42ii85la/bbV9oXXxSLgFE6wos+ZwbB gPIRkfoGumDKjIM5ot3hUdJmRtdbWEbJ9fQ5F0UIpb6FXhbFYYQR8PFd+8TIZVSv iaCUMqnRMhpzJM3aQ0JbtHQoteQASE6WUqn6efiaJuEhe45Ti7fOh/+x5PsK90cK CHhDfIyGTkHSH3HnxuCdEwLD5bvkqY02SEmU7OBCBThQ87CZ+EuEXMQ4A7VcjCy+ sVs8Auw0Y1VcwT1yh3F/DovS4b8EGtWO4Rh6Bl7n7ykD1d7LPBR24nz599lmwOLX wP3oThfIXgXZC0l7otwExW4k3BPwncifwaUCH7qUMLAEMluRoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNFU/RzZ0TLV0+z6BF6xSt9uPcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBk YzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4ZTk3ZmUvNDU1Yjg1ZGUtYTIwOC0z MzNkLWFkMmYtMWNhY2QxMTRhMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDkwZGM0NGItODViNi00MjQ3LWI1 NzktZWI4Y2ZkOGU5N2ZlL2Q5MGRjNDRiLTg1YjYtNDI0Ny1iNTc5LWViOGNmZDhl OTdmZS5jcmwwHwYDVR0jBBgwFoAUSeUkbiuQSDtea7R3FumUVA+zGEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhj ZmQ4ZTk3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB0z1wTWOvlzQBSvcvp/snhiqwsL9ozDFt22NIMUD7WRpSW5PHb3N/5 0Ha/N90nBqIKtK83GN/BiYp7j0xTvDTw+foskKWa7kKhCtqOkSrTAqEXSHr0rwK4 w2sG7e0prX0mEttMqeX9MIyHPboLdF3i4rl0VKSF7ow4K5BW9r4pOl1zT3tlhJNm 7SV2Pnsw67XPaOjPOOlgekuKvE7Tt3bYg0zpAdGfQLNa/3+44HFDC3j5k1YHPbA6 HarmdjFZ0A4M02Ks58A8ss9dTDird72m0ERy9gEVHfbVuAslaY5sszcgsED87F+b M2r2cGCA/UQBDp6bBzDYVGk7OkCVsL4= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:12 2025 by rpki-client