$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8983411e-6d7a-372e-a55a-60a4f8105de8.roa File: 8983411e-6d7a-372e-a55a-60a4f8105de8.roa (raw, json) Hash identifier: yLsSgP7Mdar7SWdmtoJoHQuqM9nobh7emjuL51pgOj8= Subject key identifier: 7A:D7:79:09:BE:EB:40:B3:A5:D4:8E:24:94:53:6C:31:D7:B5:5E:84 Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Certificate serial: 010D0C9F43285849DC8FB34D5DC8D9528319B880 Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8983411e-6d7a-372e-a55a-60a4f8105de8.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 23.173.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b3:4d:5d:c8:d9:52:83:19:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d9c71759-8644-4809-828e-cd20375fb726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:76:58:28:14:88:0f:4f:92:3c:23:cb:95: fd:b3:33:f8:7d:ba:48:f7:4a:10:c0:2f:65:ac:89: bf:dc:3f:f5:fb:ae:89:35:6a:94:9c:23:3d:49:84: 25:7e:33:e3:de:45:51:ac:d7:8c:50:91:8d:d2:53: 7f:1e:7d:2a:fb:83:1a:b7:da:a6:5b:8d:1f:17:1b: ac:0d:08:47:c7:d6:4d:d9:08:59:e2:d8:80:25:32: f5:df:af:18:a0:3d:d6:a1:c6:09:b8:31:44:8b:e7: 9e:76:ab:ae:a8:a0:b1:28:c2:f8:a3:eb:26:3c:29: fa:b1:6f:ff:1a:70:ff:d2:eb:48:13:18:cd:7d:6d: 9d:45:19:3c:7c:f0:e7:29:9e:2a:ed:d7:88:c3:45: 11:0c:84:3d:5a:3a:75:3e:41:b8:39:35:48:d9:f8: b0:8e:e0:7a:c3:6f:10:1f:16:9e:e3:84:7f:30:b6: a8:65:91:01:42:76:f2:90:a1:49:21:0e:09:00:46: ba:d7:6e:bb:68:ba:d5:9c:28:b6:72:a0:44:49:5a: c4:bb:d0:75:7e:35:ff:5a:95:6b:fb:97:76:01:49: 2c:9f:de:5c:08:68:80:d5:c8:2a:a4:28:66:4b:0e: dd:70:80:66:85:16:f1:cf:58:b4:f2:49:7d:99:46: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D7:79:09:BE:EB:40:B3:A5:D4:8E:24:94:53:6C:31:D7:B5:5E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/8983411e-6d7a-372e-a55a-60a4f8105de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl X509v3 Authority Key Identifier: keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer sbgp-ipAddrBlock: critical IPv4: 23.173.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d9:d8:b1:74:65:88:57:1c:8d:1e:62:ed:83:90:d1:b6:b4: 4c:81:4f:f0:58:c7:23:e1:96:61:e6:77:5d:8a:d9:65:77:2b: 12:7d:77:5e:89:02:d1:c9:f9:0d:e0:9a:94:0c:6e:92:40:6c: d8:4c:34:22:87:1a:ae:da:95:8d:13:a8:ce:d7:e6:22:2e:de: 99:5b:e4:27:7d:be:25:54:46:74:8b:56:6f:6a:58:79:56:73: 1b:5e:54:0b:23:76:bc:7e:52:df:92:8b:f0:a0:1e:8a:16:53: 08:4d:b2:46:8a:2b:95:4d:79:89:ad:50:74:66:90:43:e6:45: 92:4d:55:13:9d:51:74:0e:c7:01:84:b5:94:59:a2:68:ed:f5: 64:03:47:30:f9:7f:92:56:d5:42:43:99:99:7f:c0:25:e9:4e: c6:cd:c6:7c:c3:f5:ba:d8:95:6f:c9:60:4b:48:ba:1f:7d:5d: 5f:55:19:2c:f9:24:5a:bc:67:09:39:b9:20:ee:77:34:d2:88: e8:b6:5d:6e:e5:c6:d2:e1:d5:29:45:c5:9a:71:e6:e5:2d:76: c2:4b:5f:ec:84:14:07:32:6f:70:05:9f:d7:03:87:88:90:9e: 8f:a1:7d:be:91:7d:33:bd:d6:b4:6a:ae:30:90:26:a5:21:13: 0d:0c:5d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7NNXcjZUoMZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2 ZmE3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDljNzE3NTktODY0NC00ODA5LTgyOGUtY2QyMDM3NWZiNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk12WCgUiA9Pkjwjy5X9szP4fbpI90oQwC9l rIm/3D/1+66JNWqUnCM9SYQlfjPj3kVRrNeMUJGN0lN/Hn0q+4Mat9qmW40fFxus DQhHx9ZN2QhZ4tiAJTL1368YoD3WocYJuDFEi+eedquuqKCxKML4o+smPCn6sW// GnD/0utIExjNfW2dRRk8fPDnKZ4q7deIw0URDIQ9Wjp1PkG4OTVI2fiwjuB6w28Q Hxae44R/MLaoZZEBQnbykKFJIQ4JAEa61267aLrVnCi2cqBESVrEu9B1fjX/WpVr +5d2AUksn95cCGiA1cgqpChmSw7dcIBmhRbxz1i08kl9mUbMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrXeQm+60CzpdSOJJRTbDHXtV6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1 MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvODk4MzQxMWUtNmQ3YS0z NzJlLWE1NWEtNjBhNGY4MTA1ZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1 ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF62wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/Z2LF0ZYhXHI0eYu2DkNG2tEyBT/BYxyPhlmHmd12K2WV3KxJ9d16J AtHJ+Q3gmpQMbpJAbNhMNCKHGq7alY0TqM7X5iIu3plb5Cd9viVURnSLVm9qWHlW cxteVAsjdrx+Ut+Si/CgHooWUwhNskaKK5VNeYmtUHRmkEPmRZJNVROdUXQOxwGE tZRZomjt9WQDRzD5f5JW1UJDmZl/wCXpTsbNxnzD9brYlW/JYEtIuh99XV9VGSz5 JFq8Zwk5uSDudzTSiOi2XW7lxtLh1SlFxZpx5uUtdsJLX+yEFAcyb3AFn9cDh4iQ no+hfb6RfTO91rRqrjCQJqUhEw0MXSM= -----END CERTIFICATE-----Generated at Sun Jun 1 03:22:37 2025 by rpki-client