$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa File: 99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (raw, json) Hash identifier: IkuM0+j/jigmk8iAUDcxzAMPgIYXKmGhOLxVAQRe5GM= Subject key identifier: E8:B6:4A:CD:8F:EB:37:A4:7F:6F:88:0A:9A:E7:33:80:FF:B5:0C:11 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F43285849F44A5A181397ACAE432DC500 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 400967 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5a:18:13:97:ac:ae:43:2d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=9ff10a49-d1c5-42c0-862c-cdac06df722f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:29:d3:28:93:b1:c7:92:87:fe:49:54:7e: a8:5e:1d:5c:3b:db:07:3c:2c:57:2b:b2:b1:e1:96: 12:15:f4:eb:43:4d:06:8d:0f:82:ea:2d:b0:d2:07: f1:15:eb:d8:73:79:e8:99:b9:98:d0:a0:7c:94:f4: 8a:b8:ed:04:2b:56:65:91:56:88:63:27:d4:bf:27: a1:80:13:0b:38:fd:75:38:47:08:5a:0b:6f:8c:0a: 76:9b:52:1a:df:0d:e1:0d:7b:22:48:5c:7a:9c:2b: 7d:96:95:a8:d1:ff:20:fb:8f:4c:09:54:7c:9f:ca: a5:e4:86:2a:4a:9f:b7:44:0c:06:c0:ea:b5:d5:77: 8f:80:ed:eb:6c:fc:2b:6c:d7:ef:f8:6f:0b:50:3c: 9a:49:48:9a:ea:c4:21:b1:94:b9:9f:6e:5a:f8:93: b4:e2:0f:fb:71:fb:e2:ba:74:66:99:fb:83:f1:9b: 55:63:60:37:87:56:6f:d1:cd:24:fe:2b:56:ff:fa: b8:1d:62:47:f4:6f:24:d0:2e:d0:10:8b:5d:9a:c3: ba:1c:e5:b7:a7:05:71:78:86:f2:cb:11:37:1b:ff: 37:0e:2e:7f:d5:1f:44:39:97:1f:00:3d:ad:12:d9: d3:38:46:f0:85:b9:8d:54:77:4e:06:0f:08:4d:e1: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B6:4A:CD:8F:EB:37:A4:7F:6F:88:0A:9A:E7:33:80:FF:B5:0C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:44:8e:ed:c2:5d:68:c6:24:63:7f:8c:ee:2e:57:bc:7e:33: c5:96:e8:15:b1:24:77:9d:9e:7b:6a:78:9d:f7:bf:37:41:19: 42:1b:d7:3b:c5:7b:1d:e1:b7:73:7f:56:c9:3c:ce:cf:41:b4: 4f:b3:f2:dc:31:fb:53:c3:da:37:35:83:58:34:a4:70:c4:81: e9:5a:54:75:b4:68:b7:2c:c2:17:c7:20:a4:12:e2:00:f1:f5: 6e:df:6c:35:3f:17:cb:bc:33:3e:94:34:f3:9f:da:61:58:65: 8b:11:ce:2a:17:fa:0a:ce:a8:cf:26:1b:4a:62:8f:86:c1:cf: 61:f4:a6:e4:d2:f5:2e:28:29:12:98:e8:6e:0f:c8:55:b1:7d: d9:8d:0c:55:49:0c:8d:bc:19:f7:2b:3a:8a:4a:7d:a3:dc:f7: 1d:09:d5:ad:7c:72:3a:04:18:ba:40:d5:d5:68:a4:ec:fd:a7: ac:dc:67:a5:bb:e6:d1:87:7c:03:66:f0:60:40:82:02:f9:3e: ca:62:e5:ed:97:d9:1b:db:a1:7f:28:f3:fe:40:90:9f:66:14: da:f1:a3:12:83:79:9b:42:6d:4c:ea:0c:78:1a:5d:e2:6e:54: 08:7f:d1:31:e0:ee:3d:27:1d:94:ca:a5:81:2c:a7:4d:df:40: c1:c9:7b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SloYE5esrkMtxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk OWZmMTBhNDktZDFjNS00MmMwLTg2MmMtY2RhYzA2ZGY3MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIQp0yiTsceSh/5JVH6oXh1cO9sHPCxXK7Kx 4ZYSFfTrQ00GjQ+C6i2w0gfxFevYc3nombmY0KB8lPSKuO0EK1ZlkVaIYyfUvyeh gBMLOP11OEcIWgtvjAp2m1Ia3w3hDXsiSFx6nCt9lpWo0f8g+49MCVR8n8ql5IYq Sp+3RAwGwOq11XePgO3rbPwrbNfv+G8LUDyaSUia6sQhsZS5n25a+JO04g/7cfvi unRmmfuD8ZtVY2A3h1Zv0c0k/itW//q4HWJH9G8k0C7QEItdmsO6HOW3pwVxeIby yxE3G/83Di5/1R9EOZcfAD2tEtnTOEbwhbmNVHdOBg8ITeF7JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi2Ss2P6zekf2+ICprnM4D/tQwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvOTllOTJhOTgtNmNlYi0z ZDJkLThkYzUtNzM3Njg0NGNmMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Eju3CXWjGJGN/jO4uV7x+M8WW6BWxJHednntqeJ33vzdBGUIb1zvF ex3ht3N/Vsk8zs9BtE+z8twx+1PD2jc1g1g0pHDEgelaVHW0aLcswhfHIKQS4gDx 9W7fbDU/F8u8Mz6UNPOf2mFYZYsRzioX+grOqM8mG0pij4bBz2H0puTS9S4oKRKY 6G4PyFWxfdmNDFVJDI28GfcrOopKfaPc9x0J1a18cjoEGLpA1dVopOz9p6zcZ6W7 5tGHfANm8GBAggL5Pspi5e2X2RvboX8o8/5AkJ9mFNrxoxKDeZtCbUzqDHgaXeJu VAh/0THg7j0nHZTKpYEsp03fQMHJe5Y= -----END CERTIFICATE-----Generated at Mon Jun 9 03:04:17 2025 by rpki-client