$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa File: 957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json) Hash identifier: 7LDEL1irfqEgv9mU/tJCo1x4dZl8g8oqe6Y23oEEJe8= Subject key identifier: 01:B1:4B:4A:94:64:44:ED:92:0D:73:DF:77:F4:AA:59:9A:18:82:CE Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F43285849F87A7F29A2F7C7BE49967C00 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 23.179.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7f:29:a2:f7:c7:be:49:96:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=abbf4dac-59b9-4b2c-a1f2-073c32b7e3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:67:85:09:a2:b4:52:d5:ae:d9:7b:f6:00: 50:ae:8b:0c:87:df:a3:51:0b:42:fa:9f:d2:21:58: f1:1b:26:99:e4:d7:3d:31:b9:2c:0f:be:f6:fe:53: 11:9b:2f:28:2b:a3:93:09:91:32:bc:df:a7:9a:74: 45:2d:0b:be:31:1d:ba:7e:84:9f:83:3b:f8:d4:05: 5f:d4:d6:93:4c:08:11:12:b2:27:2f:78:3e:06:33: b8:a4:33:d5:d9:03:43:97:fe:5d:61:16:7d:40:26: 2e:c5:26:6e:16:87:51:ec:39:db:5b:74:2c:8e:b1: 82:31:5c:06:91:69:aa:48:55:7e:81:5c:ee:f8:8c: eb:e2:2a:98:1b:08:49:cc:04:73:0c:8a:98:43:16: ae:0e:fc:25:f1:2d:ad:a7:ca:ed:d6:85:f4:9b:0f: ec:de:0b:d9:af:ca:90:39:75:10:18:2c:d8:e7:88: 76:89:82:c7:46:3f:df:c1:ff:33:e4:8c:75:09:10: 37:a5:c1:67:47:be:d6:24:81:81:3e:41:7c:8b:9d: 16:91:46:94:c2:9a:8c:2a:3a:7c:1d:da:8e:e8:f4: fb:c7:c4:67:07:fe:3b:12:1d:18:9c:2e:4f:aa:00: 06:09:da:d8:34:5b:84:30:d6:2a:03:1c:e2:d4:3e: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B1:4B:4A:94:64:44:ED:92:0D:73:DF:77:F4:AA:59:9A:18:82:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:28:06:ea:17:f4:87:57:dc:32:05:48:c0:c3:7f:1d:48:71: b3:7c:ba:73:1a:2b:04:5d:56:25:21:2c:98:fe:a8:d5:9d:32: c2:9e:ac:f5:9f:08:d8:b9:f0:4f:b2:0e:e7:df:87:ea:82:f3: 6c:d3:b3:d0:65:28:de:ef:f3:94:bc:cb:b3:d6:f1:c5:5e:ff: 1f:41:04:90:8d:f1:57:b3:99:1a:a5:0b:55:d5:93:eb:fc:69: 65:d5:af:57:87:17:b0:55:c2:d3:8f:20:1c:64:fa:2b:71:32: 7f:9d:29:03:55:30:22:90:72:c2:a4:e8:33:b1:de:4c:ff:8d: 22:d8:9f:8d:81:bf:b1:2d:d7:b6:2f:19:2b:14:b9:d5:e4:d1: ab:9d:68:05:ac:b3:74:24:67:fc:f0:1e:43:01:f3:74:21:93: 20:8c:a3:f5:e0:d3:dd:00:1f:39:eb:3f:b9:23:72:d8:8f:0f: 2e:a8:a7:ca:33:b1:3b:bb:58:cd:2b:72:b4:01:67:27:a3:aa: f9:0d:7a:3a:cb:d8:c3:ba:3c:59:f5:74:8d:ba:6a:31:39:80: 6d:3e:38:fd:7b:05:88:c6:72:e2:73:f0:ee:8d:57:b2:a4:4c: 57:9f:d0:90:4a:73:98:28:93:7d:11:81:eb:40:9b:4a:24:31: de:96:6f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4en8povfHvkmWfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YWJiZjRkYWMtNTliOS00YjJjLWExZjItMDczYzMyYjdlM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRnhQmitFLVrtl79gBQrosMh9+jUQtC+p/S IVjxGyaZ5Nc9MbksD772/lMRmy8oK6OTCZEyvN+nmnRFLQu+MR26foSfgzv41AVf 1NaTTAgRErInL3g+BjO4pDPV2QNDl/5dYRZ9QCYuxSZuFodR7DnbW3QsjrGCMVwG kWmqSFV+gVzu+Izr4iqYGwhJzARzDIqYQxauDvwl8S2tp8rt1oX0mw/s3gvZr8qQ OXUQGCzY54h2iYLHRj/fwf8z5Ix1CRA3pcFnR77WJIGBPkF8i50WkUaUwpqMKjp8 HdqO6PT7x8RnB/47Eh0YnC5PqgAGCdrYNFuEMNYqAxzi1D5TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGxS0qUZETtkg1z33f0qlmaGILOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTU3ZTU0MWYtM2IyNS0z MWNmLWEwZTktZTdkZWNmZThhMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEoBuoX9IdX3DIFSMDDfx1IcbN8unMaKwRdViUhLJj+qNWdMsKerPWf CNi58E+yDuffh+qC82zTs9BlKN7v85S8y7PW8cVe/x9BBJCN8VezmRqlC1XVk+v8 aWXVr1eHF7BVwtOPIBxk+itxMn+dKQNVMCKQcsKk6DOx3kz/jSLYn42Bv7Et17Yv GSsUudXk0audaAWss3QkZ/zwHkMB83QhkyCMo/Xg090AHznrP7kjctiPDy6op8oz sTu7WM0rcrQBZyejqvkNejrL2MO6PFn1dI26ajE5gG0+OP17BYjGcuJz8O6NV7Kk TFef0JBKc5gok30RgetAm0okMd6Wb5w= -----END CERTIFICATE-----Generated at Sat Jun 14 06:19:11 2025 by rpki-client