$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa File: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (raw, json) Hash identifier: UCkQvu+wb2D+KPRvshBvzDRa+5cUVdwLriC1E5QaigY= Subject key identifier: 2D:C1:B2:C8:D0:D4:EE:8A:ED:80:07:42:C4:CF:4B:F7:81:B2:AC:D1 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584A6C55DE4E8B0E63B9DB3CBF40 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 36168 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:de:4e:8b:0e:63:b9:db:3c:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=cf266cd4-b9cb-46c2-aa54-78b5f0112077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:b8:d6:0c:e2:7e:ac:19:c4:af:97:c3:c5: 3d:67:76:d6:de:31:b9:b1:be:29:c2:11:d2:31:41: 35:92:b8:d8:c2:e1:8d:d7:ae:88:9d:d7:b4:60:e3: e8:08:b4:f7:c1:5c:de:f5:58:1d:a8:db:d9:ba:16: ef:cc:50:56:9e:9a:80:7f:18:96:73:b8:86:68:a3: 98:81:83:b8:71:ce:94:a8:7b:3f:10:bd:78:29:4e: b9:21:08:e4:ee:0c:f2:fb:4a:eb:6f:d5:dc:ff:3f: af:44:87:7e:6b:5c:96:65:cc:e6:7b:af:72:5a:54: 51:fd:21:91:d7:6a:9a:ff:25:f0:47:45:fe:df:c2: 1a:7d:81:a4:74:14:89:79:96:5d:03:7c:7d:fc:2a: 86:b7:8c:21:4e:f4:ed:86:d7:4f:69:a5:9b:7c:c9: f7:f5:18:5f:f1:c4:9b:1d:2f:26:ee:79:86:1b:b6: 04:a3:36:50:11:fe:6f:a1:e7:e6:47:d7:a5:63:40: 32:ba:ae:2c:6b:c0:37:37:65:8d:d1:c5:2b:9c:5d: 36:5b:83:46:a6:10:6a:d2:b3:d4:2c:68:ae:fc:ec: e6:95:71:40:fc:13:3c:6e:2b:7a:5f:cd:8b:0e:14: 42:e4:ca:db:60:ef:c9:8c:35:17:cc:04:85:6a:3a: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:B2:C8:D0:D4:EE:8A:ED:80:07:42:C4:CF:4B:F7:81:B2:AC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fe:18:f3:44:40:fb:c9:d3:02:74:b7:dc:4f:3d:c5:27:22: 33:3b:4a:f4:ad:48:0a:a7:c9:80:84:ec:db:4b:46:c9:c1:55: 56:ea:14:99:cc:82:2d:ce:5d:96:4e:15:77:67:e0:58:00:b1: d8:e6:cc:55:b6:89:68:bb:84:d4:f8:6c:d8:2b:76:dd:0a:40: 7e:4c:d6:10:f6:66:e7:66:92:d9:d5:bb:b6:0d:dd:71:32:b6: 4e:b9:6e:89:e7:30:db:39:c6:75:14:ce:72:c5:6c:31:f9:0c: dd:d0:42:9c:17:a2:f4:14:68:2d:ed:3c:fb:2f:7d:1f:82:74: a5:76:b2:25:6b:95:a3:55:0e:3c:f8:25:54:d1:79:5b:77:b5: 90:3d:ed:7f:a1:bd:d5:1d:4f:ae:a6:fe:d0:bf:7e:ed:20:e1: b6:57:98:f6:72:6a:2b:de:06:a0:ee:c8:3d:b0:2e:08:24:c3: 2c:5b:0a:44:ed:e4:d5:72:a2:4f:8a:ff:80:b2:5e:6d:ba:78: fa:2a:bb:99:73:41:8f:c0:26:42:c5:c7:6e:b6:6d:d5:22:be: 00:e5:e6:dc:51:68:ba:18:3b:39:70:90:30:fc:d9:8f:de:b4: 8f:e8:2d:a1:5b:51:df:1f:2a:44:e8:fb:80:7c:c2:e7:44:f1: 52:84:72:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd5Oiw5juds8v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2YyNjZjZDQtYjljYi00NmMyLWFhNTQtNzhiNWYwMTEyMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWy41gzifqwZxK+Xw8U9Z3bW3jG5sb4pwhHS MUE1krjYwuGN166Inde0YOPoCLT3wVze9VgdqNvZuhbvzFBWnpqAfxiWc7iGaKOY gYO4cc6UqHs/EL14KU65IQjk7gzy+0rrb9Xc/z+vRId+a1yWZczme69yWlRR/SGR 12qa/yXwR0X+38IafYGkdBSJeZZdA3x9/CqGt4whTvTthtdPaaWbfMn39Rhf8cSb HS8m7nmGG7YEozZQEf5voefmR9elY0Ayuq4sa8A3N2WN0cUrnF02W4NGphBq0rPU LGiu/OzmlXFA/BM8bit6X82LDhRC5MrbYO/JjDUXzASFajql6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3BssjQ1O6K7YAHQsTPS/eBsqzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvZWJmNGExNjctNmM3My0z ZWRkLWFmNDUtMjNkNTNjMWZmMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP+GPNEQPvJ0wJ0t9xPPcUnIjM7SvStSAqnyYCE7NtLRsnBVVbqFJnM gi3OXZZOFXdn4FgAsdjmzFW2iWi7hNT4bNgrdt0KQH5M1hD2ZudmktnVu7YN3XEy tk65bonnMNs5xnUUznLFbDH5DN3QQpwXovQUaC3tPPsvfR+CdKV2siVrlaNVDjz4 JVTReVt3tZA97X+hvdUdT66m/tC/fu0g4bZXmPZyaiveBqDuyD2wLggkwyxbCkTt 5NVyok+K/4CyXm26ePoqu5lzQY/AJkLFx262bdUivgDl5txRaLoYOzlwkDD82Y/e tI/oLaFbUd8fKkTo+4B8wudE8VKEcmM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:49 2025 by rpki-client