$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1467305-3d56-3fe8-8e3f-eb14b2e558b9.roa File: f1467305-3d56-3fe8-8e3f-eb14b2e558b9.roa (raw, json) Hash identifier: tPHWvQtPdZ6XdiO4Y0sOsh1OSjyRr6ar7rvvP9fnKcs= Subject key identifier: 2D:40:B3:2D:4F:31:25:18:58:2E:AD:A6:2F:52:2D:38:CC:3D:D0:40 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A1B600BD8CF083BF6348D5060 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1467305-3d56-3fe8-8e3f-eb14b2e558b9.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 3356 IP address blocks: 207.83.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0b:d8:cf:08:3b:f6:34:8d:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=a7671c8f-9ebd-4a91-b294-83f128e3234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:4d:16:22:c1:54:3e:70:cd:2b:83:f5:75: 71:ec:e3:9c:86:67:5b:33:d0:3c:b1:53:d8:66:9c: 0c:9c:a7:77:e8:45:c2:c1:c3:5b:df:be:c5:94:02: 94:1e:c7:c3:bd:69:1e:28:f4:77:13:cb:21:0b:e1: b8:33:79:88:13:7f:4e:1f:39:9a:7c:4d:1a:40:e2: f9:cb:70:87:75:38:c8:6a:b7:d9:c7:5f:b6:e9:73: 0e:41:b7:77:b9:e7:19:de:33:3f:21:4e:aa:b8:45: 62:9b:a0:ee:45:83:4b:50:bf:f3:bc:4a:ce:15:63: 64:4a:fd:20:15:6a:10:4a:50:cd:6d:e5:46:12:3f: 4b:54:a6:0a:63:9f:8f:d6:49:27:2c:c3:57:ef:2c: a8:40:98:88:18:03:f4:b2:df:36:72:3e:fc:5b:25: ab:6e:81:ab:e5:b4:4d:be:8e:39:a8:92:17:b3:a5: e4:aa:98:55:15:19:65:ee:16:1b:84:40:ac:c3:79: 0b:1b:8a:93:bc:0c:f5:1a:46:9b:2b:86:45:36:a9: 95:48:45:6d:9c:25:3c:06:6b:8f:b8:4f:1d:46:df: 8d:77:21:2c:7b:88:19:ec:e8:fa:a5:e5:53:b2:84: 77:0c:8b:72:f3:26:89:bc:48:7e:0a:97:07:96:e3: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:B3:2D:4F:31:25:18:58:2E:AD:A6:2F:52:2D:38:CC:3D:D0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1467305-3d56-3fe8-8e3f-eb14b2e558b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.83.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:df:1b:e1:b6:9c:89:a1:86:37:51:e0:f9:9d:a8:47:f6:46: 68:67:d0:cc:3b:a1:3d:dc:88:a1:96:38:bd:e1:f7:2d:8a:37: e0:1c:c8:c3:5a:d6:23:14:39:53:a3:44:64:8d:10:55:3b:2e: cd:03:88:0c:0c:9c:cb:bb:ba:e9:4c:df:fe:92:dc:5c:12:7b: 7a:1a:16:92:a9:94:83:90:f0:60:6b:69:50:56:68:6a:80:cf: 10:35:55:73:de:14:d2:95:57:64:6d:6c:3e:d2:ba:1a:fa:a4: 53:17:72:f6:a5:5b:7a:89:19:07:45:94:d3:22:dc:e3:b1:3c: 1b:43:ae:7e:db:ff:58:84:25:19:44:be:f5:14:73:fe:0e:e6: f3:aa:bc:f8:37:d9:23:24:26:c9:d0:30:75:ab:b4:59:81:16: d9:a6:9a:a9:c4:96:e6:4e:19:20:18:82:59:b8:85:f0:b7:d7: a5:e1:48:70:f4:47:6b:7b:8c:f2:9d:dd:4d:1f:0d:5e:43:2f: 54:6f:b5:47:d2:62:4f:18:27:2f:88:d5:82:96:dd:5a:52:72: 55:a7:ea:dc:2b:da:05:73:0a:1e:cc:83:68:b1:a0:33:84:89: 23:ed:1e:27:88:51:dd:fa:64:d5:e4:10:46:ab:8b:ae:b7:3a: 9b:c0:24:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAvYzwg79jSNUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YTc2NzFjOGYtOWViZC00YTkxLWIyOTQtODNmMTI4ZTMyMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyxNFiLBVD5wzSuD9XVx7OOchmdbM9A8sVPY ZpwMnKd36EXCwcNb377FlAKUHsfDvWkeKPR3E8shC+G4M3mIE39OHzmafE0aQOL5 y3CHdTjIarfZx1+26XMOQbd3uecZ3jM/IU6quEVim6DuRYNLUL/zvErOFWNkSv0g FWoQSlDNbeVGEj9LVKYKY5+P1kknLMNX7yyoQJiIGAP0st82cj78WyWrboGr5bRN vo45qJIXs6XkqphVFRll7hYbhECsw3kLG4qTvAz1GkabK4ZFNqmVSEVtnCU8BmuP uE8dRt+NdyEse4gZ7Oj6peVTsoR3DIty8yaJvEh+CpcHluMqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Asy1PMSUYWC6tpi9SLTjMPdBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjE0NjczMDUtM2Q1Ni0z ZmU4LThlM2YtZWIxNGIyZTU1OGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1MwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/fG+G2nImhhjdR4PmdqEf2Rmhn0Mw7oT3ciKGWOL3h9y2KN+AcyMNa 1iMUOVOjRGSNEFU7Ls0DiAwMnMu7uulM3/6S3FwSe3oaFpKplIOQ8GBraVBWaGqA zxA1VXPeFNKVV2RtbD7Suhr6pFMXcvalW3qJGQdFlNMi3OOxPBtDrn7b/1iEJRlE vvUUc/4O5vOqvPg32SMkJsnQMHWrtFmBFtmmmqnEluZOGSAYglm4hfC316XhSHD0 R2t7jPKd3U0fDV5DL1RvtUfSYk8YJy+I1YKW3VpSclWn6twr2gVzCh7Mg2ixoDOE iSPtHieIUd36ZNXkEEari663OpvAJEs= -----END CERTIFICATE-----Generated at Sun Jun 15 22:05:54 2025 by rpki-client