$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa File: 591d919e-d164-336f-b379-4a31755502f0.roa (raw, json) Hash identifier: 2CZY8jU3nsl8D7+25WdoB+9Liy/GbekmdDDFvlim1Qc= Subject key identifier: 5C:B3:9F:2B:91:25:FF:83:57:1E:3E:87:91:9C:F0:03:B0:0E:74:DA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A1E2AA05AA22D3B2A010FC580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 11178 IP address blocks: 8.20.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a0:5a:a2:2d:3b:2a:01:0f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=738d0865-1e55-4d73-8640-fd11a04e9f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:da:eb:ae:c0:38:96:63:16:ce:e8:d6:3e: e0:8f:7e:e9:0b:cf:67:00:32:67:d2:90:0a:a3:36: b7:2d:8a:48:32:bf:e1:ad:20:5c:3f:ed:ef:92:2d: 20:f9:5c:be:76:46:d3:5c:26:ea:03:68:15:69:a2: ce:32:fd:97:61:09:f6:0b:c1:18:9e:2b:ce:5d:0b: e4:cd:fb:b7:ca:a9:ff:19:93:34:98:4f:1e:9e:31: 43:40:9e:d7:b6:2b:b7:b6:7b:05:8f:07:6f:b0:9b: d0:20:f5:28:3f:a4:e3:c0:2a:be:07:39:85:94:af: 7e:8f:59:5f:09:8b:ad:ff:6d:fe:b0:b8:47:ad:45: 87:6e:6f:90:53:5a:08:a4:a9:e2:5b:75:8d:b3:4f: c7:dc:c3:1d:cd:5f:93:30:15:0b:36:7e:df:59:57: ac:a2:49:47:c6:48:11:62:8d:ef:37:67:59:85:38: 88:46:47:82:5a:32:90:40:31:5a:5d:44:3d:e5:48: d9:b4:27:90:6b:05:07:ae:b5:2e:c6:a8:a8:a6:df: bf:2d:ac:a7:77:b9:75:d5:04:ba:12:61:76:e4:2a: 72:a5:a4:23:10:e2:b7:ab:9f:f3:c4:07:65:0d:83: b8:22:d9:be:ab:3b:6a:6d:e3:d3:87:95:85:ce:a3: 49:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:9F:2B:91:25:FF:83:57:1E:3E:87:91:9C:F0:03:B0:0E:74:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:35:ce:e5:0a:ad:d2:6a:1a:f2:74:8b:d8:33:3a:c2:87:50: 7a:73:71:d8:94:4d:7c:3a:61:47:db:d4:78:8e:fc:30:ef:f6: bc:f2:e6:d0:70:01:d1:2f:00:fe:c0:1b:fc:2c:38:43:d7:0b: 8e:49:5c:21:ad:b8:05:bf:8a:26:71:90:97:df:ac:f9:d7:e3: 65:3d:8b:96:e8:92:c4:7c:f0:e0:cc:5d:c5:de:ae:59:3b:a8: c8:3f:0c:f1:25:36:ea:30:e7:d0:99:0f:06:93:d2:b5:72:74: eb:30:f2:9d:17:15:6f:6c:28:72:a8:37:6b:32:02:c2:d7:26: 6c:4c:84:3e:56:28:5e:96:f2:c7:bf:b3:8b:7d:55:fd:9a:8b: 4e:d9:f8:07:ea:35:0e:77:6c:01:10:fd:a7:fb:82:af:b4:1b: 73:c8:56:08:86:a7:1e:27:95:e7:e8:e9:74:e2:1a:69:2b:3b: 36:37:29:43:6d:4c:1f:0f:a6:f8:dc:ba:03:c9:93:fc:6f:db: 7a:9e:dc:fd:ba:78:4c:b1:f5:da:c3:66:95:5d:e7:47:99:31: fa:d9:f5:3b:cf:dd:0b:5c:4b:69:54:a9:fc:ed:40:ce:97:cf: fb:68:cc:59:13:d0:10:8c:cd:60:e1:07:cd:50:41:79:64:ac: 29:fa:e2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqBaoi07KgEPxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NzM4ZDA4NjUtMWU1NS00ZDczLTg2NDAtZmQxMWEwNGU5ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDDa667AOJZjFs7o1j7gj37pC89nADJn0pAK oza3LYpIMr/hrSBcP+3vki0g+Vy+dkbTXCbqA2gVaaLOMv2XYQn2C8EYnivOXQvk zfu3yqn/GZM0mE8enjFDQJ7Xtiu3tnsFjwdvsJvQIPUoP6TjwCq+BzmFlK9+j1lf CYut/23+sLhHrUWHbm+QU1oIpKniW3WNs0/H3MMdzV+TMBULNn7fWVesoklHxkgR Yo3vN2dZhTiIRkeCWjKQQDFaXUQ95UjZtCeQawUHrrUuxqiopt+/Laynd7l11QS6 EmF25CpypaQjEOK3q5/zxAdlDYO4Itm+qztqbePTh5WFzqNJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyznyuRJf+DVx4+h5Gc8AOwDnTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTkxZDkxOWUtZDE2NC0z MzZmLWIzNzktNGEzMTc1NTUwMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBSzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs1zuUKrdJqGvJ0i9gzOsKHUHpzcdiUTXw6YUfb1HiO/DDv9rzy5tBw AdEvAP7AG/wsOEPXC45JXCGtuAW/iiZxkJffrPnX42U9i5boksR88ODMXcXerlk7 qMg/DPElNuow59CZDwaT0rVydOsw8p0XFW9sKHKoN2syAsLXJmxMhD5WKF6W8se/ s4t9Vf2ai07Z+AfqNQ53bAEQ/af7gq+0G3PIVgiGpx4nlefo6XTiGmkrOzY3KUNt TB8PpvjcugPJk/xv23qe3P26eEyx9drDZpVd50eZMfrZ9TvP3QtcS2lUqfztQM6X z/tozFkT0BCMzWDhB81QQXlkrCn64l8= -----END CERTIFICATE-----Generated at Mon Jun 16 22:10:38 2025 by rpki-client