$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa File: 87e5dc05-d4f4-377e-a112-331e02304f9e.roa (raw, json) Hash identifier: D6C7My8lNfQwT/tiZEnPq+k73ozhIcVeRw+KOZkZsfM= Subject key identifier: E7:17:3A:95:40:A8:DF:68:EA:07:BE:E4:AA:5D:9E:0B:DE:D0:86:B0 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849FF7515CB368411200A4FA240 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 216.54.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:15:cb:36:84:11:20:0a:4f:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=0ed0e8b0-ea5d-406f-995d-1c7f855ad281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:db:67:10:17:0f:b4:6d:6c:43:47:a1:a5: 6b:c9:33:57:66:b3:93:ac:7e:8a:c5:d0:07:c0:f2: f4:3a:4d:5c:92:96:a9:73:eb:ff:98:ef:c4:a6:e0: 7f:5d:8a:ae:5f:21:e2:84:a6:21:8a:73:ac:01:37: 13:fa:ae:a4:0d:b9:6f:05:07:36:e1:eb:b5:c6:dd: 5b:40:52:e5:e2:0f:1d:b2:a7:29:94:dc:a4:28:f7: 43:68:e9:ec:0e:dc:6c:97:3c:c3:e7:9a:77:1b:7e: 14:ce:8d:48:b0:68:b0:8b:60:61:31:16:91:dd:d8: 91:46:fc:3d:b6:4b:df:47:84:f7:c3:bd:19:48:30: ea:c8:fd:44:e0:d1:05:55:81:7a:10:45:7c:84:48: 8a:02:6f:b8:d0:df:df:55:4c:30:04:59:64:91:04: 29:f1:dd:f3:98:89:b2:fe:90:22:95:7b:66:b9:9c: 15:c6:97:e7:26:27:65:32:82:74:8c:e6:41:a1:77: e6:b5:cf:ff:72:18:52:6e:31:c6:a8:aa:a0:b6:8f: 25:88:c4:e6:ad:36:c8:64:b4:10:7f:3f:40:03:33: 12:42:ec:fe:42:72:70:5e:e7:0b:96:fd:07:9e:93: 58:f8:e7:e2:74:03:ac:c4:8a:1f:cf:e4:61:c8:a8: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:17:3A:95:40:A8:DF:68:EA:07:BE:E4:AA:5D:9E:0B:DE:D0:86:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 216.54.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:58:ab:e3:48:58:26:37:95:ef:8b:4d:73:39:aa:94:5d:cc: 19:bb:b7:3c:0f:d5:30:a9:23:45:c2:9c:b5:77:df:72:7e:2a: ad:c3:ad:25:99:4b:61:17:9d:76:2d:32:4c:c3:7d:40:bf:77: c3:ce:dc:ab:c6:f7:15:5c:14:5e:78:ca:2f:63:2c:32:ad:c0: 43:69:e1:fb:c6:9f:36:cc:9d:cf:27:de:d8:0e:4d:f4:08:ea: 7f:c0:a0:b0:87:7c:dd:d7:1a:e8:90:f6:33:4a:2d:e6:f5:82: a1:8d:d5:1e:a4:b7:51:b0:58:c1:8a:5e:4f:52:c8:31:98:42: 2f:21:44:27:c0:f6:9c:c0:6a:dc:db:76:d2:5c:54:54:13:f7: df:15:06:e8:ca:6f:b6:57:1d:5a:d9:73:d4:9b:33:1d:1b:98: c5:3c:db:b2:44:21:be:3a:4e:73:20:47:af:71:8a:9c:bb:36: 3d:44:72:a2:c0:e7:1b:2e:55:b0:5d:ff:b0:21:5d:83:6e:e9: d7:ac:21:0f:47:52:57:8c:d7:36:8a:da:f8:67:3f:68:01:03: 7d:c1:06:e2:f5:e1:6f:cb:75:01:83:1c:ba:2b:c3:74:34:3a: 49:89:1d:35:c3:86:df:e6:4d:f5:64:5f:7f:91:1f:1a:64:5d: ce:f5:c1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRXLNoQRIApPokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MGVkMGU4YjAtZWE1ZC00MDZmLTk5NWQtMWM3Zjg1NWFkMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjLbZxAXD7RtbENHoaVryTNXZrOTrH6KxdAH wPL0Ok1ckpapc+v/mO/EpuB/XYquXyHihKYhinOsATcT+q6kDblvBQc24eu1xt1b QFLl4g8dsqcplNykKPdDaOnsDtxslzzD55p3G34Uzo1IsGiwi2BhMRaR3diRRvw9 tkvfR4T3w70ZSDDqyP1E4NEFVYF6EEV8hEiKAm+40N/fVUwwBFlkkQQp8d3zmImy /pAilXtmuZwVxpfnJidlMoJ0jOZBoXfmtc//chhSbjHGqKqgto8liMTmrTbIZLQQ fz9AAzMSQuz+QnJwXucLlv0HnpNY+OfidAOsxIofz+RhyKh1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcXOpVAqN9o6ge+5Kpdngve0IawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdlNWRjMDUtZDRmNC0z NzdlLWExMTItMzMxZTAyMzA0ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhYq+NIWCY3le+LTXM5qpRdzBm7tzwP1TCpI0XCnLV333J+Kq3DrSWZ S2EXnXYtMkzDfUC/d8PO3KvG9xVcFF54yi9jLDKtwENp4fvGnzbMnc8n3tgOTfQI 6n/AoLCHfN3XGuiQ9jNKLeb1gqGN1R6kt1GwWMGKXk9SyDGYQi8hRCfA9pzAatzb dtJcVFQT998VBujKb7ZXHVrZc9SbMx0bmMU827JEIb46TnMgR69xipy7Nj1EcqLA 5xsuVbBd/7AhXYNu6desIQ9HUleM1zaK2vhnP2gBA33BBuL14W/LdQGDHLorw3Q0 OkmJHTXDht/mTfVkX3+RHxpkXc71wXY= -----END CERTIFICATE-----Generated at Sun Jun 15 19:11:39 2025 by rpki-client