$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa File: bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa (raw, json) Hash identifier: pua6S+RC38di8Jt6MeP9aFM4dyanoQ7nl9wbTwiLM6k= Subject key identifier: DD:3D:65:DD:32:B3:15:ED:F8:4F:D0:8B:5D:95:D6:68:68:09:6A:6F Certificate issuer: /CN=d986e6c8-51ac-405e-9e0d-388a9f423fb4 Certificate serial: 010D0C9F4328584A14657AC748F3AD0A9C6CC13C Authority key identifier: D1:8F:22:04:A7:12:5C:CF:45:E6:54:FE:06:80:3F:31:3B:B6:97:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 63023 IP address blocks: 23.166.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7a:c7:48:f3:ad:0a:9c:6c:c1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d986e6c8-51ac-405e-9e0d-388a9f423fb4 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=96e612c5-4ac7-4030-8172-92552e7a75e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:fe:ea:26:7a:4d:72:2d:fc:ef:d7:f7:33: c9:88:72:2c:88:1b:20:00:ab:ff:57:e7:bd:5c:53: be:e4:fb:02:8f:44:d5:97:5a:e0:87:f7:61:4f:1f: a3:ac:17:9a:77:0b:47:85:b5:9b:ec:de:27:14:a5: 88:08:37:ec:00:75:55:cd:91:e4:dd:b6:94:db:b9: 2b:3c:40:81:b6:08:02:5b:1c:15:f2:8c:b0:59:d1: f4:67:7e:bc:ec:f3:59:2c:da:29:f5:61:f8:cf:42: 6a:e9:76:e5:e2:99:6c:34:a4:05:ac:65:2d:03:e7: e7:23:80:9a:75:b4:b5:47:22:ec:20:ff:9f:67:83: 85:b1:80:06:21:fb:55:e9:bf:af:db:28:51:9d:a0: 30:aa:81:bc:62:66:bf:16:c1:3e:88:5a:f4:d2:24: 89:b3:51:42:97:ce:99:ce:be:39:0c:d0:57:b7:a1: 5e:7e:61:47:dc:8e:5e:34:40:b0:bc:7a:a1:cc:06: 9f:5f:5b:db:52:7b:7b:c9:99:6f:86:2c:1d:8e:6a: 3b:dc:d3:40:84:6c:6e:84:f4:7c:2d:60:65:13:50: 19:70:df:fa:2b:c7:21:6f:64:8b:72:92:3b:f0:b3: da:0b:4b:6c:00:4c:7d:d2:65:eb:6f:b0:6b:38:84: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3D:65:DD:32:B3:15:ED:F8:4F:D0:8B:5D:95:D6:68:68:09:6A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.crl X509v3 Authority Key Identifier: keyid:D1:8F:22:04:A7:12:5C:CF:45:E6:54:FE:06:80:3F:31:3B:B6:97:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer sbgp-ipAddrBlock: critical IPv4: 23.166.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:19:c9:a0:28:dc:3b:d9:58:32:df:6b:0c:bc:3b:53:02:0e: 4c:9e:72:29:12:d2:ac:75:82:32:11:79:50:6f:e7:dd:c0:93: c4:14:9e:27:51:39:77:af:ed:69:37:d9:51:de:d3:01:ff:10: 9a:92:18:01:8f:05:c2:1d:a0:9a:64:63:00:a2:3b:b1:ad:70: 52:84:e3:8e:84:86:b6:61:81:2f:51:18:9f:d6:aa:e5:2b:6e: 98:24:91:9f:21:37:40:ce:26:ba:b3:21:f8:41:5c:36:81:a8: 25:7f:fd:93:98:8c:ce:da:44:f9:c2:52:53:a7:78:b2:cc:58: 9b:4d:a0:22:61:6c:3e:20:7c:87:2e:42:90:b9:7f:15:92:53: f2:23:fe:0e:29:d4:e7:c7:3c:47:1d:82:00:85:f5:24:02:50: a7:90:f0:14:5c:20:4c:96:d7:b6:40:5d:72:c6:b1:3d:96:b8: e1:44:f2:db:84:79:34:30:2d:43:70:bb:a0:cb:af:ba:30:67: a9:c7:11:bc:c6:53:e5:66:99:cb:40:3b:55:46:2e:42:c7:c9: c0:53:ca:3d:84:54:f6:d1:a2:d7:15:49:cd:21:dd:86:fe:2d: bc:7a:19:48:56:96:89:a7:a4:ac:50:0e:2b:d2:27:ae:75:b5: 5d:2f:5b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXrHSPOtCpxswTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk4NmU2YzgtNTFhYy00MDVlLTllMGQtMzg4YTlmNDIz ZmI0MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTZlNjEyYzUtNGFjNy00MDMwLTgxNzItOTI1NTJlN2E3NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpP+6iZ6TXIt/O/X9zPJiHIsiBsgAKv/V+e9 XFO+5PsCj0TVl1rgh/dhTx+jrBeadwtHhbWb7N4nFKWICDfsAHVVzZHk3baU27kr PECBtggCWxwV8oywWdH0Z3687PNZLNop9WH4z0Jq6Xbl4plsNKQFrGUtA+fnI4Ca dbS1RyLsIP+fZ4OFsYAGIftV6b+v2yhRnaAwqoG8Yma/FsE+iFr00iSJs1FCl86Z zr45DNBXt6FefmFH3I5eNECwvHqhzAafX1vbUnt7yZlvhiwdjmo73NNAhGxuhPR8 LWBlE1AZcN/6K8chb2SLcpI78LPaC0tsAEx90mXrb7BrOIRwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN09Zd0ysxXt+E/Qi12V1mhoCWpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOTg2 ZTZjOC01MWFjLTQwNWUtOWUwZC0zODhhOWY0MjNmYjQvYmM3ZjMyMTEtNDJmZi0z MTc5LWJlMWYtNmQ5N2Q5YWE5YWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDk4NmU2YzgtNTFhYy00MDVlLTll MGQtMzg4YTlmNDIzZmI0L2Q5ODZlNmM4LTUxYWMtNDA1ZS05ZTBkLTM4OGE5ZjQy M2ZiNC5jcmwwHwYDVR0jBBgwFoAU0Y8iBKcSXM9F5lT+BoA/MTu2l0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOTg2ZTZjOC01MWFjLTQwNWUtOWUwZC0zODhh OWY0MjNmYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOsZyaAo3DvZWDLfawy8O1MCDkyecikS0qx1gjIReVBv593Ak8QUnidR OXev7Wk32VHe0wH/EJqSGAGPBcIdoJpkYwCiO7GtcFKE446EhrZhgS9RGJ/WquUr bpgkkZ8hN0DOJrqzIfhBXDaBqCV//ZOYjM7aRPnCUlOneLLMWJtNoCJhbD4gfIcu QpC5fxWSU/Ij/g4p1OfHPEcdggCF9SQCUKeQ8BRcIEyW17ZAXXLGsT2WuOFE8tuE eTQwLUNwu6DLr7owZ6nHEbzGU+VmmctAO1VGLkLHycBTyj2EVPbRotcVSc0h3Yb+ Lbx6GUhWlomnpKxQDivSJ651tV0vW60= -----END CERTIFICATE-----Generated at Sun Jun 15 22:02:01 2025 by rpki-client