$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: 2eRkK4hf4FE2nxu+2WE5iZBvGOk/aajeQyOMyt64xsY= Subject key identifier: 8F:5C:64:36:8D:97:47:9C:35:A1:59:EF:3E:AC:61:BA:28:1D:A9:2C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374ACE29D035E8B33AE5A880 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ce:29:d0:35:e8:b3:3a:e5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f79309e9-67f0-4b1f-a2bb-dbc537998c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:4b:69:6c:2c:cf:db:e2:ef:0c:18:c0:95: 33:0e:a6:90:d9:ff:e7:1a:6c:80:01:d7:71:9f:c8: f7:e6:b9:d5:f5:26:2c:99:9d:6d:d5:f5:f6:65:e3: 42:fe:a6:3e:52:a8:3d:15:83:fb:35:62:3b:e3:53: b9:7b:08:db:c6:40:7f:a0:b2:96:17:a0:5b:34:79: 6c:ba:4b:c8:14:75:e7:54:04:07:72:04:65:e9:e0: 73:a0:16:5d:1b:b7:45:24:34:b1:ab:b5:7b:09:c9: 12:cc:ac:01:2b:df:64:a8:4e:7c:cc:a4:49:d4:3b: c1:21:21:03:ae:22:a6:20:14:69:ee:2c:73:6e:92: 15:be:ee:51:46:92:f3:87:66:12:37:24:32:05:7e: f8:21:76:8d:d9:13:48:cb:50:2c:54:18:3b:be:a9: d2:13:ce:b5:a5:62:7a:04:40:e2:af:f6:eb:b2:06: 67:cc:a6:55:53:8d:f6:d5:e6:a1:a7:6f:c4:65:ea: 4d:e8:58:c7:09:b6:04:1a:b2:dd:ef:e0:14:8e:16: 51:85:4b:c4:53:0a:0b:6f:97:0e:08:4c:0e:ae:47: 60:04:8d:92:51:b0:ff:11:84:eb:e5:4d:74:d0:0d: 3f:90:2d:78:8c:c1:b4:02:98:3b:5d:d4:d5:cc:e8: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5C:64:36:8D:97:47:9C:35:A1:59:EF:3E:AC:61:BA:28:1D:A9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6f:9d:22:45:d2:3d:0d:95:0b:c0:af:33:3f:46:6d:49:18: 32:46:0c:57:a5:30:95:c9:7c:e9:e5:0b:ea:09:01:15:90:2c: 0b:39:3c:5f:5c:fa:01:5e:55:a4:31:40:44:37:70:71:c7:88: 7b:00:51:eb:a4:80:0e:5d:2b:b5:7c:47:5b:d5:0f:3f:91:e4: e2:03:ef:05:35:25:02:8a:53:20:77:9e:41:ce:1d:ec:eb:5d: 6b:38:68:06:b1:68:f7:61:df:03:df:ba:49:47:05:23:00:85: b9:70:53:0a:e6:df:f3:5c:d6:ec:f8:6f:86:70:22:39:ff:0d: cd:45:61:b0:09:6f:a1:af:19:76:7d:86:d2:45:30:0d:c0:3a: 91:33:3f:7a:5d:f2:04:b2:e9:5f:3e:19:ba:e4:64:a3:82:aa: f1:23:d1:30:9e:bb:83:6a:9e:8e:c3:4d:44:81:6d:7a:0d:bf: 9a:81:d1:63:e4:23:92:bc:e3:b0:ca:28:82:3e:de:79:5f:09: 75:10:ab:36:0a:fd:c4:20:21:0d:d5:eb:ec:0a:ae:79:62:a7: ae:c9:12:63:7b:7a:bb:86:f3:d4:ff:41:f2:ff:d9:b5:83:56: c9:7e:c5:f7:f0:ef:66:b1:35:d4:f3:04:25:bf:45:53:29:ca: 30:dc:e6:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss4p0DXoszrlqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk Zjc5MzA5ZTktNjdmMC00YjFmLWEyYmItZGJjNTM3OTk4YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXtLaWwsz9vi7wwYwJUzDqaQ2f/nGmyAAddx n8j35rnV9SYsmZ1t1fX2ZeNC/qY+Uqg9FYP7NWI741O5ewjbxkB/oLKWF6BbNHls ukvIFHXnVAQHcgRl6eBzoBZdG7dFJDSxq7V7CckSzKwBK99kqE58zKRJ1DvBISED riKmIBRp7ixzbpIVvu5RRpLzh2YSNyQyBX74IXaN2RNIy1AsVBg7vqnSE861pWJ6 BEDir/brsgZnzKZVU4321eahp2/EZepN6FjHCbYEGrLd7+AUjhZRhUvEUwoLb5cO CEwOrkdgBI2SUbD/EYTr5U100A0/kC14jMG0Apg7XdTVzOhkUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9cZDaNl0ecNaFZ7z6sYbooHaksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZvnSJF0j0NlQvArzM/Rm1JGDJGDFelMJXJfOnlC+oJARWQLAs5PF9c +gFeVaQxQEQ3cHHHiHsAUeukgA5dK7V8R1vVDz+R5OID7wU1JQKKUyB3nkHOHezr XWs4aAaxaPdh3wPfuklHBSMAhblwUwrm3/Nc1uz4b4ZwIjn/Dc1FYbAJb6GvGXZ9 htJFMA3AOpEzP3pd8gSy6V8+GbrkZKOCqvEj0TCeu4Nqno7DTUSBbXoNv5qB0WPk I5K847DKKII+3nlfCXUQqzYK/cQgIQ3V6+wKrnlip67JEmN7eruG89T/QfL/2bWD Vsl+xffw72axNdTzBCW/RVMpyjDc5hA= -----END CERTIFICATE-----Generated at Tue Jun 17 22:05:52 2025 by rpki-client