$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json) Hash identifier: g/pxKEoFFaMOQRm16X6VN0UxeV1URV4qCDyAKh7M65g= Subject key identifier: FA:A2:BD:F0:C8:AC:EF:A9:90:DB:35:9D:09:87:A3:C4:DA:33:D5:18 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584A71EB501887B4E301EF1FF280 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 209242 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:50:18:87:b4:e3:01:ef:1f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=606f9032-6842-4dd7-b700-d519d9fbc63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:ce:52:61:43:24:d0:6e:a3:35:52:aa:6f: 0a:b7:b5:68:b7:9f:c2:08:b8:a4:ca:37:3a:06:31: b3:17:f7:07:53:e3:38:bb:fa:8b:ee:7f:8a:18:a8: 1b:8e:b0:b4:6c:7d:36:c5:15:06:ed:f6:99:ec:8e: bd:49:6f:43:dc:08:ed:7f:cd:cc:9d:f0:b2:ed:61: e4:17:2b:9b:14:d6:38:1d:32:17:e5:9c:22:e7:25: 74:db:ab:c6:45:6e:da:ab:15:89:2c:5f:b8:14:1c: 43:2c:4a:99:eb:59:54:ed:52:c6:ce:a2:b9:75:64: d9:fa:a7:57:cb:b9:8b:59:4c:bb:fc:9d:40:aa:c3: 60:91:d6:4c:31:ba:21:b0:f8:b2:37:f7:2d:a8:43: b1:b0:35:bc:b0:1c:60:ae:8b:f5:cb:c7:dd:45:68: ed:ed:e7:6c:ae:d4:84:ea:bd:33:ed:ef:25:99:c9: a4:9e:77:a3:97:4f:94:4d:5e:68:f9:21:8f:e9:05: 88:85:54:e0:5f:4d:6a:fb:44:e0:dc:71:2c:0a:0f: b1:75:a2:26:26:dd:06:db:dd:fa:93:70:fe:53:75: 59:c9:e9:7a:47:27:53:19:55:9f:d7:a5:48:a3:a2: c6:ee:d9:cf:9a:46:d4:af:8e:31:1d:ad:7f:8a:61: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A2:BD:F0:C8:AC:EF:A9:90:DB:35:9D:09:87:A3:C4:DA:33:D5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a5:80:da:80:10:f4:71:fd:34:cf:d8:c6:46:68:f3:d3:d7: da:15:44:f6:0e:81:dd:e9:03:c2:3d:f7:8a:76:ba:2a:10:0c: 3d:9e:fc:c5:6a:46:1c:a2:f5:1f:0e:e5:9f:e1:83:a0:07:e7: 37:88:3c:41:f1:ce:06:9b:b1:89:47:26:60:c2:45:a9:fd:fe: 33:7c:79:f2:ac:4e:3f:4a:ca:87:29:cb:7c:6f:76:64:99:e7: 37:5f:c7:25:08:6f:65:da:99:b3:c9:77:4c:10:25:4a:6d:5d: c3:b8:e6:22:9e:b7:5e:ec:74:c1:6c:b5:a0:f7:56:b1:e0:b8: 5c:31:f6:91:ab:bf:85:64:8b:4e:6a:60:6b:df:c5:bb:cc:0e: db:16:87:7d:fb:7e:ab:af:78:2a:57:96:36:c1:3c:a7:91:d3: ba:a8:17:79:dc:02:c9:d7:bd:88:08:40:78:bc:e8:b7:34:71: f2:fd:76:56:48:07:06:25:64:87:e0:a3:ae:55:27:d5:fc:cc: 17:7c:ec:b7:c5:45:89:93:4b:85:84:23:50:bb:77:87:87:05: 9b:ad:d2:01:50:ba:83:be:33:a9:13:61:34:37:58:d5:02:5a: 91:0e:e7:29:9d:49:50:2b:07:98:fb:9b:06:18:c4:fb:e3:48: 3c:23:89:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61AYh7TjAe8f8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk NjA2ZjkwMzItNjg0Mi00ZGQ3LWI3MDAtZDUxOWQ5ZmJjNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrHOUmFDJNBuozVSqm8Kt7Vot5/CCLikyjc6 BjGzF/cHU+M4u/qL7n+KGKgbjrC0bH02xRUG7faZ7I69SW9D3Ajtf83MnfCy7WHk FyubFNY4HTIX5Zwi5yV026vGRW7aqxWJLF+4FBxDLEqZ61lU7VLGzqK5dWTZ+qdX y7mLWUy7/J1AqsNgkdZMMbohsPiyN/ctqEOxsDW8sBxgrov1y8fdRWjt7edsrtSE 6r0z7e8lmcmknnejl0+UTV5o+SGP6QWIhVTgX01q+0Tg3HEsCg+xdaImJt0G2936 k3D+U3VZyel6RydTGVWf16VIo6LG7tnPmkbUr44xHa1/imFCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqivfDIrO+pkNs1nQmHo8TaM9UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvZDNiNDFjOWYtNWE5OC0z ZGM5LTkwOGUtOGI0YzEwZWU4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWlgNqAEPRx/TTP2MZGaPPT19oVRPYOgd3pA8I994p2uioQDD2e/MVq Rhyi9R8O5Z/hg6AH5zeIPEHxzgabsYlHJmDCRan9/jN8efKsTj9Kyocpy3xvdmSZ 5zdfxyUIb2XambPJd0wQJUptXcO45iKet17sdMFstaD3VrHguFwx9pGrv4Vki05q YGvfxbvMDtsWh337fquveCpXljbBPKeR07qoF3ncAsnXvYgIQHi86Lc0cfL9dlZI BwYlZIfgo65VJ9X8zBd87LfFRYmTS4WEI1C7d4eHBZut0gFQuoO+M6kTYTQ3WNUC WpEO5ymdSVArB5j7mwYYxPvjSDwjie4= -----END CERTIFICATE-----Generated at Thu Jul 10 09:19:38 2025 by rpki-client