$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1b4d4076-fc9e-3109-81f5-1ec49514fb6d.roa File: 1b4d4076-fc9e-3109-81f5-1ec49514fb6d.roa (raw, json) Hash identifier: bJKJ3R9g1SaBNtpQMSJD0kdQr6W6LeCYgGx421MeW6w= Subject key identifier: F0:22:A8:57:A8:E2:B7:89:C4:22:EA:43:C3:9E:32:E3:49:47:38:8F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A698B1A605ED2554080451A80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1b4d4076-fc9e-3109-81f5-1ec49514fb6d.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 14184 IP address blocks: 8.45.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:1a:60:5e:d2:55:40:80:45:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=20c2faaf-8165-4a32-b1f4-c56f10ad3b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:06:68:87:cb:a7:16:9a:f9:42:9d:e3:54: 1a:3c:b4:96:98:d6:59:16:a7:5c:25:32:ef:c7:b6: 5c:3e:25:f0:c6:40:36:8f:58:4c:4b:27:f8:94:d2: 53:d7:61:8a:a9:c0:07:81:d6:43:e3:d7:fe:bf:c8: eb:c2:e0:78:1b:f9:fd:50:6d:21:c6:25:6f:ea:bb: b4:9a:84:e9:97:bd:b5:5f:7b:81:09:91:b4:9c:81: f2:66:8d:61:e0:f5:2c:17:83:8a:7e:64:26:33:6d: 87:61:67:23:94:69:b3:dc:2a:4d:9f:e5:5a:29:b8: be:b2:38:84:47:c4:4b:42:a6:59:72:6f:ab:b8:9c: 89:87:91:48:fd:cc:e4:55:b3:10:c0:6e:e4:41:0d: ac:ec:55:e9:1a:d8:ab:c8:b3:c5:66:13:21:28:76: d4:6f:24:16:b9:bb:1d:b4:78:2b:d8:56:7e:8d:1c: 05:2d:fa:d3:d1:e3:4e:7a:dd:06:f3:ae:61:68:ca: d2:9d:74:e9:62:1b:5c:f3:45:13:4e:e4:a5:1f:66: b3:a5:e8:67:2d:17:e7:ac:b6:40:b5:7b:1e:c6:30: e9:f8:69:4e:cd:2f:b5:6e:85:84:3a:b4:4b:c5:15: 3f:cb:19:ad:35:d6:76:a9:43:a3:6b:70:c1:0c:5e: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:22:A8:57:A8:E2:B7:89:C4:22:EA:43:C3:9E:32:E3:49:47:38:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1b4d4076-fc9e-3109-81f5-1ec49514fb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:27:a1:ec:de:80:f9:d8:92:a2:f3:1d:b5:1d:b3:fd:34:cc: 5d:10:c2:dc:20:1b:ae:d2:4a:25:cd:82:94:6f:6a:cc:d3:3f: 15:c7:54:89:40:7c:ec:7f:19:c7:ae:94:b0:e3:ec:0c:6b:bb: cf:a1:e7:4d:a1:d1:b4:80:b1:56:24:41:4e:92:2a:68:28:fb: db:cc:49:e0:dd:bd:e9:a2:80:59:2c:fa:7d:4d:fe:16:0d:7a: c8:c7:af:bc:92:2f:be:6c:bb:b7:bd:12:0d:4a:28:78:eb:fa: 3f:fa:f2:7e:13:e0:fa:66:2a:da:6e:f4:28:7a:b0:ea:0d:d2: c2:cb:c3:57:33:cd:a2:ca:23:72:00:9e:0f:3c:e8:59:14:ab: e6:69:43:b8:41:cc:27:ed:34:6a:fd:1f:7c:57:32:89:9a:52: 6c:0a:b3:c3:3c:ae:0b:4d:a1:e4:6a:72:69:79:af:9a:8d:50: 32:13:d3:fd:e8:a3:bf:cb:d6:67:8b:77:6d:71:d9:61:02:30: 44:99:8d:ae:11:9a:f4:64:27:04:73:26:a0:dd:cb:54:f9:80: 8d:ad:f1:f5:77:bc:90:13:c9:fd:76:bb:6c:e8:95:90:f7:aa: f2:40:84:17:a8:ba:7d:f1:46:b1:bd:1a:04:9c:81:f8:cc:95: 17:5a:2c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixpgXtJVQIBFGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MjBjMmZhYWYtODE2NS00YTMyLWIxZjQtYzU2ZjEwYWQzYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK8GaIfLpxaa+UKd41QaPLSWmNZZFqdcJTLv x7ZcPiXwxkA2j1hMSyf4lNJT12GKqcAHgdZD49f+v8jrwuB4G/n9UG0hxiVv6ru0 moTpl721X3uBCZG0nIHyZo1h4PUsF4OKfmQmM22HYWcjlGmz3CpNn+VaKbi+sjiE R8RLQqZZcm+ruJyJh5FI/czkVbMQwG7kQQ2s7FXpGtiryLPFZhMhKHbUbyQWubsd tHgr2FZ+jRwFLfrT0eNOet0G865haMrSnXTpYhtc80UTTuSlH2azpehnLRfnrLZA tXsexjDp+GlOzS+1boWEOrRLxRU/yxmtNdZ2qUOja3DBDF4+TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAiqFeo4reJxCLqQ8OeMuNJRziPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWI0ZDQwNzYtZmM5ZS0z MTA5LTgxZjUtMWVjNDk1MTRmYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKknoezegPnYkqLzHbUds/00zF0QwtwgG67SSiXNgpRvaszTPxXHVIlA fOx/GceulLDj7Axru8+h502h0bSAsVYkQU6SKmgo+9vMSeDdvemigFks+n1N/hYN esjHr7ySL75su7e9Eg1KKHjr+j/68n4T4PpmKtpu9Ch6sOoN0sLLw1czzaLKI3IA ng886FkUq+ZpQ7hBzCftNGr9H3xXMomaUmwKs8M8rgtNoeRqcml5r5qNUDIT0/3o o7/L1meLd21x2WECMESZja4RmvRkJwRzJqDdy1T5gI2t8fV3vJATyf12u2zolZD3 qvJAhBeoun3xRrG9GgScgfjMlRdaLNE= -----END CERTIFICATE-----Generated at Thu Jul 31 07:35:15 2025 by rpki-client