$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa File: 64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa (raw, json) Hash identifier: d5Srcqujh5hrWl5Oub7T/hMibzcHiF8uIZXk8u/x1Fo= Subject key identifier: 56:77:46:3D:D5:E3:3E:4B:70:0D:88:30:E9:DE:0B:6F:E6:EF:7E:DD Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584A71EB54E7A87C39AA8A0586C0 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 20057 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:54:e7:a8:7c:39:aa:8a:05:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=cb5fff68-2a31-4074-b0de-7b756bca98e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:02:40:35:b8:92:87:03:df:d2:3b:e5:83: 23:be:bd:36:99:58:d2:0b:95:de:e7:f2:a7:76:ad: aa:c0:79:90:90:4b:a2:49:26:11:f6:c5:92:bc:bd: 4a:86:1d:d4:95:dc:9b:68:aa:b7:3c:71:5d:eb:78: 86:a2:8a:92:0d:25:f8:77:6a:57:bf:fc:00:17:2f: 2e:5d:c5:cc:6e:41:b8:9b:7f:ad:f9:74:c9:9f:4a: 62:22:24:73:8c:6b:de:5a:69:9e:56:35:97:d5:7e: 79:b5:99:fc:a0:d0:fe:78:24:c4:71:e7:56:be:1e: 0a:c9:b1:c5:c1:94:3f:d3:b4:68:09:30:c4:35:ab: 8b:58:d3:70:a8:c1:dd:87:15:d5:08:f3:62:ac:b0: de:73:ae:5d:8a:4f:2e:18:63:a2:27:01:46:48:c3: 05:09:0a:2e:5f:a6:7a:57:c2:21:78:9b:97:bb:1c: 85:52:cc:87:48:a1:89:59:4b:15:92:c8:19:a6:07: 7c:24:a8:fa:24:ca:1a:37:04:b3:68:a5:44:e7:2d: a5:89:2e:58:6a:84:4a:de:5a:2e:c6:f3:fa:92:c8: 12:03:cc:e6:af:fd:73:05:58:25:33:15:3f:4c:39: 63:02:39:26:3e:69:23:db:7a:80:eb:ff:27:42:5c: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:46:3D:D5:E3:3E:4B:70:0D:88:30:E9:DE:0B:6F:E6:EF:7E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:db:ac:44:48:c7:c3:7a:bc:29:9f:e8:8b:b5:f0:61:fd:78: 75:47:7d:8b:5e:3b:6b:3b:3a:cf:23:bf:25:08:8c:7c:48:48: 60:a3:83:c9:08:63:c7:9e:02:89:32:56:a6:e1:06:7e:58:7c: 96:31:77:1e:6a:12:68:c1:e2:3b:e1:e0:46:6e:d3:51:66:19: eb:6a:4b:ff:12:f9:79:fe:a1:83:91:79:25:97:22:95:23:dc: f6:f4:9d:d6:8b:26:5c:31:bd:a0:b6:cc:48:a7:e5:41:53:03: 3f:49:12:11:69:be:8e:f2:e7:97:03:26:9b:f9:ed:4a:5a:fb: 47:da:5d:97:23:df:15:dd:b8:0a:fb:a1:1b:c3:b2:7e:1f:fa: f5:5a:ee:cf:d4:03:88:b1:86:5d:73:0b:04:2d:e2:7d:3d:a3: 93:4a:47:bb:86:39:e4:01:0b:2f:ff:39:74:7b:7d:2f:6b:eb: 93:98:06:63:3c:46:cc:d5:84:ae:6a:86:1d:05:a4:83:79:da: b8:d0:10:a9:c8:75:24:05:e1:e8:00:0d:66:f6:a4:40:14:25: ec:fe:e5:a1:1b:ed:55:36:3b:b2:91:4b:26:85:ff:63:9b:9c: bf:df:e9:71:8b:6a:a4:71:60:a0:5a:79:f9:2f:f1:69:fa:e3: 9e:03:84:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61TnqHw5qooFhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk Y2I1ZmZmNjgtMmEzMS00MDc0LWIwZGUtN2I3NTZiY2E5OGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptsCQDW4kocD39I75YMjvr02mVjSC5Xe5/Kn dq2qwHmQkEuiSSYR9sWSvL1Khh3UldybaKq3PHFd63iGooqSDSX4d2pXv/wAFy8u XcXMbkG4m3+t+XTJn0piIiRzjGveWmmeVjWX1X55tZn8oND+eCTEcedWvh4KybHF wZQ/07RoCTDENauLWNNwqMHdhxXVCPNirLDec65dik8uGGOiJwFGSMMFCQouX6Z6 V8IheJuXuxyFUsyHSKGJWUsVksgZpgd8JKj6JMoaNwSzaKVE5y2liS5YaoRK3lou xvP6ksgSA8zmr/1zBVglMxU/TDljAjkmPmkj23qA6/8nQlz/owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ3Rj3V4z5LcA2IMOneC2/m737dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNjRiYjhhMmMtNTI1NS0z N2JiLTgzZDMtYTE1YzhhNjhhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATbrERIx8N6vCmf6Iu18GH9eHVHfYteO2s7Os8jvyUIjHxISGCjg8kI Y8eeAokyVqbhBn5YfJYxdx5qEmjB4jvh4EZu01FmGetqS/8S+Xn+oYOReSWXIpUj 3Pb0ndaLJlwxvaC2zEin5UFTAz9JEhFpvo7y55cDJpv57Upa+0faXZcj3xXduAr7 oRvDsn4f+vVa7s/UA4ixhl1zCwQt4n09o5NKR7uGOeQBCy//OXR7fS9r65OYBmM8 RszVhK5qhh0FpIN52rjQEKnIdSQF4egADWb2pEAUJez+5aEb7VU2O7KRSyaF/2Ob nL/f6XGLaqRxYKBaefkv8Wn6454DhNs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:55 2025 by rpki-client