$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json) Hash identifier: z3fAm+y5C3GJ4HMYlTLk2LmizFlqjRLRT1IozxvOeTQ= Subject key identifier: 6D:B0:A8:49:1C:01:70:22:55:58:E0:53:2C:76:B6:95:85:CD:45:04 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584AB91BB36096D2B14DF7B9AF00 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 26904 IP address blocks: 23.247.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b3:60:96:d2:b1:4d:f7:b9:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=214ee671-2553-438c-b1ef-9b19f79172ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:50:b1:d4:f1:c6:05:77:53:3b:b7:dd:e6: 7f:41:08:5d:41:c2:87:8a:1b:83:75:ec:27:07:0b: eb:2b:50:bd:b7:bd:5d:21:48:81:2e:98:5c:00:ee: 64:55:d2:70:3d:fb:21:62:40:fc:01:01:c8:7f:cf: 4f:26:7e:46:4a:45:ec:ef:cd:7d:b9:29:ed:ad:6d: 29:e7:42:7d:ff:41:e7:70:c1:5a:53:94:1e:18:64: 9a:ce:ad:29:d2:ad:80:39:13:4d:97:50:cd:cc:f0: 78:21:83:f7:1e:3b:90:cc:43:43:a5:42:c4:b1:3b: a2:e4:5c:de:b6:5e:35:d3:2b:34:e5:c1:63:ec:0e: 2e:ce:a3:78:89:89:b8:1d:ed:4e:af:d0:43:0c:38: 3c:e3:dc:a9:2a:08:31:cb:c8:9b:c4:f1:09:4b:4c: 5e:e3:66:1e:ff:12:45:67:c2:c3:74:a3:2d:98:e2: b4:11:01:a5:b0:0f:48:22:63:95:25:6e:ce:d5:0d: bb:d0:67:d0:37:00:00:02:15:c6:f5:e0:02:1b:1d: 05:c2:b6:91:79:1f:f1:5a:30:40:a3:96:70:f3:34: 2d:e2:12:16:13:4a:57:03:0c:a6:75:b4:2d:d7:f2: bc:01:ce:14:33:21:6a:60:fa:c1:f0:37:1a:f9:d0: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:A8:49:1C:01:70:22:55:58:E0:53:2C:76:B6:95:85:CD:45:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:16:65:8d:e8:8b:d2:e7:e3:37:bd:a0:9a:49:c5:aa:b4:f9: 72:37:84:41:2e:9b:bd:cf:27:b3:19:06:39:47:93:59:b1:6d: 4e:e3:66:2c:0d:68:bf:65:7b:8b:0f:f1:91:7e:6b:49:ff:04: 9b:18:05:4f:72:d8:0a:90:45:ae:dd:eb:85:82:ef:64:b4:ff: 6e:58:cb:23:21:20:7b:89:27:c4:b0:cd:1b:16:59:85:b1:f6: 12:06:c9:b2:cc:c9:2e:a3:6d:58:99:a7:00:fc:05:3a:18:a2: fc:68:fc:49:b3:8b:73:42:32:40:9a:84:83:0c:45:f4:77:f7: dd:dd:e6:12:13:c3:19:4c:5d:38:a7:3a:e3:c1:08:0f:66:a4: 18:f4:07:8b:b1:93:9e:6a:4c:3a:e4:58:86:a7:04:30:e9:72: 24:86:ea:94:77:9a:05:f7:e2:08:7b:29:68:7b:c9:75:0d:cf: cb:52:fe:60:da:32:75:81:f9:97:de:35:c5:0f:54:a1:95:24: 71:7a:5f:af:f8:1b:3e:83:23:25:d8:1b:4f:d1:ca:21:2a:a3: ae:e1:92:68:c8:ea:6f:0a:e3:a1:cf:be:6b:05:e6:cd:32:a9: 9b:5c:bf:b1:2f:55:1f:b4:e3:d5:fd:ca:0c:6a:e1:7a:1b:e9: 1e:41:df:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7NgltKxTfe5rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjE0ZWU2NzEtMjU1My00MzhjLWIxZWYtOWIxOWY3OTE3MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2RQsdTxxgV3Uzu33eZ/QQhdQcKHihuDdewn BwvrK1C9t71dIUiBLphcAO5kVdJwPfshYkD8AQHIf89PJn5GSkXs7819uSntrW0p 50J9/0HncMFaU5QeGGSazq0p0q2AORNNl1DNzPB4IYP3HjuQzENDpULEsTui5Fze tl410ys05cFj7A4uzqN4iYm4He1Or9BDDDg849ypKggxy8ibxPEJS0xe42Ye/xJF Z8LDdKMtmOK0EQGlsA9IImOVJW7O1Q270GfQNwAAAhXG9eACGx0FwraReR/xWjBA o5Zw8zQt4hIWE0pXAwymdbQt1/K8Ac4UMyFqYPrB8Dca+dD2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2wqEkcAXAiVVjgUyx2tpWFzUUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvODgyZDBlYzQtODM4Ny0z OGUzLTkzZTktZTQ4MDZlYjJhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYWZY3oi9Ln4ze9oJpJxaq0+XI3hEEum73PJ7MZBjlHk1mxbU7jZiwN aL9le4sP8ZF+a0n/BJsYBU9y2AqQRa7d64WC72S0/25YyyMhIHuJJ8SwzRsWWYWx 9hIGybLMyS6jbViZpwD8BToYovxo/Emzi3NCMkCahIMMRfR3993d5hITwxlMXTin OuPBCA9mpBj0B4uxk55qTDrkWIanBDDpciSG6pR3mgX34gh7KWh7yXUNz8tS/mDa MnWB+ZfeNcUPVKGVJHF6X6/4Gz6DIyXYG0/RyiEqo67hkmjI6m8K46HPvmsF5s0y qZtcv7EvVR+049X9ygxq4Xob6R5B3y8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:12 2025 by rpki-client