$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa File: 7775276c-856c-33de-af30-3ede7fad10f3.roa (raw, json) Hash identifier: MgMm2RfzEie1WKTnUIyyehkTNplQjb6N4ewzSXRZvMw= Subject key identifier: 5B:71:6B:B1:F1:B6:01:6D:9B:0D:85:64:CD:47:BA:B2:30:F8:83:DF Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F43285849B939F05C886F08233AE57940 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa Signing time: Fri 02 May 2025 21:15:07 +0000 ROA not before: Fri 02 May 2025 21:15:07 +0000 ROA not after: Thu 31 Jul 2025 21:15:07 +0000 asID: 0 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:39:f0:5c:88:6f:08:23:3a:e5:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: May 2 21:15:07 2025 GMT Not After : Jul 31 21:15:07 2025 GMT Subject: CN=bcd0f160-004b-490e-adc6-d07c2373eb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4a:7e:07:be:cc:db:03:e3:9b:c5:16:08:5c: c3:98:63:1e:fd:54:8d:3c:2c:6a:99:f7:2e:65:01: 1a:3f:91:b7:fd:0d:8f:ae:82:1c:27:9c:cc:67:84: 26:d5:2a:17:ca:dd:a3:fd:2e:56:69:23:ae:0e:36: 16:a7:08:29:8e:a8:54:14:2c:40:02:4d:e4:dc:89: 5b:8e:04:93:55:95:28:f7:5d:a3:00:ec:97:3e:ef: aa:6a:da:c4:21:d6:a9:51:3b:a4:ff:45:33:14:08: ac:6e:30:67:a0:12:15:e5:db:24:10:f3:ac:c1:cb: 7a:5a:15:a4:a4:cc:19:0b:eb:21:8c:85:03:6c:51: 86:79:d2:20:fa:3e:82:d3:e8:19:15:7e:c9:e2:f5: 53:0f:25:17:06:52:08:f9:4f:b0:2d:4d:e0:8c:2d: fb:98:53:5f:fe:63:22:24:b4:e0:eb:73:fd:21:7e: a3:52:50:37:04:87:52:d4:4a:6e:cd:57:38:ad:72: 43:e7:4a:8b:87:bd:01:3b:98:2a:81:e3:6c:8b:66: 4f:00:1d:65:fd:bd:7a:90:e9:2d:ee:4f:01:3d:1e: bd:3e:66:c9:9f:4e:c8:30:5f:11:6b:53:e7:58:68: d3:19:3d:44:be:df:37:42:fd:9b:c4:30:35:04:90: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:71:6B:B1:F1:B6:01:6D:9B:0D:85:64:CD:47:BA:B2:30:F8:83:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1e:aa:77:59:55:84:31:f1:d6:02:aa:53:f0:2a:6f:78:16: a6:48:61:bc:e4:69:8c:f2:08:45:7b:6c:f7:02:8d:08:5c:ac: 21:1d:16:77:ec:41:26:13:2a:86:c6:fe:82:db:14:69:95:ce: 61:18:aa:93:ad:4f:88:5e:81:aa:8c:a7:17:bd:8c:06:57:b8: 05:0e:cb:7c:e3:50:ed:c0:8c:81:16:1c:ab:91:ad:e5:1b:55: 88:27:14:36:bb:df:de:53:52:1f:e7:eb:0c:db:1a:37:b6:13: 5c:22:59:0f:b2:32:d7:47:02:85:7c:76:1f:5b:13:ca:c0:5b: f2:9a:c8:64:59:eb:df:24:39:7f:eb:d5:3e:1c:c9:15:91:9e: e7:61:be:16:15:2c:07:f3:63:ac:4d:db:0a:ce:3d:ae:b8:71: 35:56:33:01:27:e8:93:e4:cb:dc:19:c8:fb:c8:cf:16:94:7e: 69:7c:c5:c7:62:34:d6:55:b4:93:4b:99:36:57:20:83:93:39: e8:da:9d:61:cd:32:a0:42:03:1d:f0:2c:54:8f:a3:4a:5e:db: c6:13:5d:25:fb:f0:6d:da:f2:a8:75:ab:57:9d:ec:99:62:67: 28:ef:44:c0:f6:a9:f5:61:c5:2e:a6:38:a5:df:14:e6:40:9d: a9:a0:0f:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5OfBciG8IIzrleUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDUwMjIxMTUwN1oXDTI1MDczMTIxMTUwN1owLzEtMCsGA1UEAxMk YmNkMGYxNjAtMDA0Yi00OTBlLWFkYzYtZDA3YzIzNzNlYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkp+B77M2wPjm8UWCFzDmGMe/VSNPCxqmfcu ZQEaP5G3/Q2ProIcJ5zMZ4Qm1SoXyt2j/S5WaSOuDjYWpwgpjqhUFCxAAk3k3Ilb jgSTVZUo912jAOyXPu+qatrEIdapUTuk/0UzFAisbjBnoBIV5dskEPOswct6WhWk pMwZC+shjIUDbFGGedIg+j6C0+gZFX7J4vVTDyUXBlII+U+wLU3gjC37mFNf/mMi JLTg63P9IX6jUlA3BIdS1EpuzVc4rXJD50qLh70BO5gqgeNsi2ZPAB1l/b16kOkt 7k8BPR69PmbJn07IMF8Ra1PnWGjTGT1Evt83Qv2bxDA1BJDjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtxa7HxtgFtmw2FZM1HurIw+IPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNzc3NTI3NmMtODU2Yy0z M2RlLWFmMzAtM2VkZTdmYWQxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYeqndZVYQx8dYCqlPwKm94FqZIYbzkaYzyCEV7bPcCjQhcrCEdFnfs QSYTKobG/oLbFGmVzmEYqpOtT4hegaqMpxe9jAZXuAUOy3zjUO3AjIEWHKuRreUb VYgnFDa7395TUh/n6wzbGje2E1wiWQ+yMtdHAoV8dh9bE8rAW/KayGRZ698kOX/r 1T4cyRWRnudhvhYVLAfzY6xN2wrOPa64cTVWMwEn6JPky9wZyPvIzxaUfml8xcdi NNZVtJNLmTZXIIOTOejanWHNMqBCAx3wLFSPo0pe28YTXSX78G3a8qh1q1ed7Jli ZyjvRMD2qfVhxS6mOKXfFOZAnamgDw4= -----END CERTIFICATE-----Generated at Sun Jun 15 18:50:17 2025 by rpki-client