$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa File: 686c395c-54ad-31c1-96df-b204d2205313.roa (raw, json) Hash identifier: Rla2oi38auTpVC+h3dMwvKkVXeDDZMsojzgeiZ4O7ew= Subject key identifier: 88:BC:62:D7:78:9F:33:AF:3D:A7:5D:FA:86:67:B3:FB:27:A7:52:5E Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584A77808E6082F4CA2E5B2F0500 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 965 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8e:60:82:f4:ca:2e:5b:2f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=39c6dcee-8f33-4007-8304-295c7299393c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:72:7d:f2:f1:eb:38:f2:3a:7b:3d:80:6b: cb:7a:97:80:d4:68:81:12:f5:78:a6:93:3e:02:fd: 75:0c:3f:d0:39:21:9d:4d:51:91:e3:ed:ef:ee:ed: b7:b6:ee:56:ba:48:6a:f2:ea:46:03:56:37:b9:f9: f1:4c:99:67:9b:41:d4:d1:bb:73:ac:44:4c:c5:23: 03:cd:ae:dd:a8:61:56:b6:1b:65:d7:47:18:fc:c6: da:f1:aa:22:f6:c2:22:09:a5:bf:b5:46:70:20:72: 04:5c:6a:80:da:fb:34:d8:16:a5:f1:90:2c:a0:c7: 5a:f9:ce:15:ae:02:f8:1a:cb:23:e4:b3:b0:ce:e7: d5:84:1c:d4:07:b4:b1:d0:8c:b7:00:46:ad:a4:00: 01:6b:c8:5c:52:3a:2c:f8:40:fb:c8:ab:a7:80:3d: 49:51:f1:27:60:dd:19:77:64:83:02:12:b0:96:47: 6b:71:d8:bb:05:bb:32:4c:f9:e2:f8:2f:cf:58:59: 3d:66:99:af:de:28:07:94:8c:77:86:b3:5e:67:df: bf:13:f8:28:5f:81:af:29:fa:50:dd:26:11:46:14: 49:11:cd:1d:41:cd:77:b3:37:9d:e5:b2:a2:6b:2e: 76:6b:11:95:13:1e:3c:dc:dd:5a:8b:4e:8e:32:1f: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:62:D7:78:9F:33:AF:3D:A7:5D:FA:86:67:B3:FB:27:A7:52:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:80:fc:1e:44:46:27:6f:0f:07:ee:e0:a5:f6:8c:74:ac:64: 46:0f:5c:6f:52:b0:fa:7a:2c:6e:90:e4:db:e0:54:13:a6:31: 4b:d8:8d:87:0d:ba:26:d0:e6:3a:ea:db:37:36:7c:ec:00:33: 62:c9:9d:b4:31:f9:44:db:18:4e:73:25:b7:0f:3a:23:ca:4f: 2a:5b:49:6f:f6:bd:b4:ef:a1:dd:50:ca:a2:14:12:14:ae:c6: 34:9d:84:4c:63:5d:11:74:cc:e1:0e:f4:de:d6:74:bd:6c:58: e3:cf:b8:eb:3f:2d:93:83:45:62:a1:3b:3a:b4:ed:35:7a:f9: 48:a1:8a:37:71:89:42:ef:90:b3:f4:a3:da:83:0c:89:08:cc: 37:92:9e:89:6e:74:d1:47:17:9e:61:b1:f3:02:0e:18:56:79: 88:71:c0:e0:13:39:42:c1:2e:39:84:f3:8b:ff:93:90:bd:fc: 49:36:b0:d0:dd:d6:15:f8:83:f1:4b:59:f6:22:bf:f5:cd:71: 57:b8:83:53:b6:e5:e8:40:29:59:a8:dd:f0:a6:64:31:c8:57: 84:8a:f8:b8:e3:8b:e5:0b:cd:77:ef:2b:35:51:4b:66:ae:b6: 15:a0:4b:62:ad:df:e2:ba:71:0b:8f:74:0f:2b:05:3d:f3:56: 9d:83:40:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI5ggvTKLlsvBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MzljNmRjZWUtOGYzMy00MDA3LTgzMDQtMjk1YzcyOTkzOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb9yffLx6zjyOns9gGvLepeA1GiBEvV4ppM+ Av11DD/QOSGdTVGR4+3v7u23tu5Wukhq8upGA1Y3ufnxTJlnm0HU0btzrERMxSMD za7dqGFWthtl10cY/Mba8aoi9sIiCaW/tUZwIHIEXGqA2vs02Bal8ZAsoMda+c4V rgL4Gssj5LOwzufVhBzUB7Sx0Iy3AEatpAABa8hcUjos+ED7yKungD1JUfEnYN0Z d2SDAhKwlkdrcdi7BbsyTPni+C/PWFk9Zpmv3igHlIx3hrNeZ9+/E/goX4GvKfpQ 3SYRRhRJEc0dQc13szed5bKiay52axGVEx483N1ai06OMh/GlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi8Ytd4nzOvPadd+oZns/snp1JeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNjg2YzM5NWMtNTRhZC0z MWMxLTk2ZGYtYjIwNGQyMjA1MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaA/B5ERidvDwfu4KX2jHSsZEYPXG9SsPp6LG6Q5NvgVBOmMUvYjYcN uibQ5jrq2zc2fOwAM2LJnbQx+UTbGE5zJbcPOiPKTypbSW/2vbTvod1QyqIUEhSu xjSdhExjXRF0zOEO9N7WdL1sWOPPuOs/LZODRWKhOzq07TV6+UihijdxiULvkLP0 o9qDDIkIzDeSnoludNFHF55hsfMCDhhWeYhxwOATOULBLjmE84v/k5C9/Ek2sNDd 1hX4g/FLWfYiv/XNcVe4g1O25ehAKVmo3fCmZDHIV4SK+Ljji+ULzXfvKzVRS2au thWgS2Kt3+K6cQuPdA8rBT3zVp2DQHM= -----END CERTIFICATE-----Generated at Wed Jul 23 07:58:26 2025 by rpki-client