$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa File: 7775276c-856c-33de-af30-3ede7fad10f3.roa (raw, json) Hash identifier: pWbl7ZsauHFCyVqeeoGRNvMMRLl5UVz0xP4d9NNUJck= Subject key identifier: 41:05:47:94:DB:3A:BC:B9:EE:83:CF:4B:3B:3C:42:08:E9:FA:69:D4 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584A9900B753B4526379DCB95780 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 0 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:b7:53:b4:52:63:79:dc:b9:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=594cb9cf-e31f-425d-a900-c5874e257ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:4a:8a:e3:51:70:d0:de:2c:95:83:cb:4e: 3c:57:b9:6b:91:e6:e7:81:05:00:9e:d7:8f:db:40: df:c0:2b:48:1d:71:91:d8:07:c2:7a:1a:7a:fc:69: 64:cb:d3:b9:0c:cd:87:26:38:cc:9c:76:cb:69:eb: 74:ef:03:22:ef:a4:56:dc:59:dc:e1:30:e2:42:88: 06:5a:ca:62:b3:ff:6b:4c:40:16:20:6b:98:99:1f: e1:df:59:18:15:3e:cd:0d:96:d9:c4:05:38:8e:97: 53:36:ca:5f:a3:32:32:c5:29:c0:1a:f4:28:b6:db: 34:8d:51:25:fe:c9:90:4a:2f:99:58:bd:97:ea:c7: fa:1e:d9:e8:40:6a:0b:8f:eb:ba:c3:e7:86:95:cd: 3a:a3:56:c7:34:05:93:2b:41:b3:aa:c8:c8:54:c7: 76:8d:f9:ea:a6:8c:d3:95:08:98:33:78:ba:3d:43: 8b:c5:ce:83:54:ec:b1:86:a2:9c:4d:86:f6:92:1f: 17:0d:fd:ca:d0:d2:8a:9e:e6:0c:e5:91:6b:9e:bc: 92:6c:fb:74:a5:d9:af:4c:13:d4:76:87:b4:b0:9e: 5e:fa:db:7c:6d:b4:fb:98:75:fc:0b:4c:87:b8:a4: 08:40:a1:ab:aa:85:a4:6a:49:d5:df:ae:24:c5:c0: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:05:47:94:DB:3A:BC:B9:EE:83:CF:4B:3B:3C:42:08:E9:FA:69:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c0:9c:82:fd:54:93:98:de:94:71:a8:40:30:0a:8d:cc:1d: b3:06:d5:6f:9d:1d:dc:7e:33:03:79:d9:bb:79:75:2c:0d:b2: b4:39:6f:f2:04:9c:eb:f9:c1:7c:5b:c1:64:07:75:82:fd:8b: 09:b5:ad:9b:c8:b1:41:25:6d:6b:f9:49:62:b1:a4:ca:23:ff: 5b:7d:0c:ca:d6:da:af:47:44:c7:5a:81:2c:df:1d:23:3d:9c: 48:0c:1e:9b:b6:59:60:35:9c:68:a7:59:67:72:da:4a:0f:68: 16:c2:f4:47:3a:cc:6c:34:fb:c7:bf:8c:62:d8:c2:e2:a0:48: 70:1c:15:fb:43:93:9e:aa:5a:82:c0:75:1e:5d:af:00:00:92: 01:c4:f6:22:40:77:29:65:85:4a:46:5b:5b:f0:92:44:e6:0f: 8e:88:e8:83:5e:38:53:61:2c:27:87:63:e2:da:78:b1:10:d7: 45:eb:ca:58:6c:d9:b5:36:9d:cf:cc:0d:d5:75:5e:61:9d:33: 80:53:65:e7:64:2c:62:bd:85:53:ea:0c:7e:52:ad:b9:af:12: 5c:43:d9:06:17:54:04:ce:3c:07:8e:5d:d9:72:4b:29:a5:e2: 36:46:c8:ca:5b:05:20:d6:17:36:7c:7e:a6:aa:5a:14:e2:77: 04:8b:7a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALdTtFJjedy5V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTk0Y2I5Y2YtZTMxZi00MjVkLWE5MDAtYzU4NzRlMjU3ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TpKiuNRcNDeLJWDy048V7lrkebngQUAnteP 20DfwCtIHXGR2AfCehp6/Glky9O5DM2HJjjMnHbLaet07wMi76RW3Fnc4TDiQogG Wspis/9rTEAWIGuYmR/h31kYFT7NDZbZxAU4jpdTNspfozIyxSnAGvQotts0jVEl /smQSi+ZWL2X6sf6HtnoQGoLj+u6w+eGlc06o1bHNAWTK0GzqsjIVMd2jfnqpozT lQiYM3i6PUOLxc6DVOyxhqKcTYb2kh8XDf3K0NKKnuYM5ZFrnrySbPt0pdmvTBPU doe0sJ5e+tt8bbT7mHX8C0yHuKQIQKGrqoWkaknV364kxcDOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEFR5TbOry57oPPSzs8Qgjp+mnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNzc3NTI3NmMtODU2Yy0z M2RlLWFmMzAtM2VkZTdmYWQxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvAnIL9VJOY3pRxqEAwCo3MHbMG1W+dHdx+MwN52bt5dSwNsrQ5b/IE nOv5wXxbwWQHdYL9iwm1rZvIsUElbWv5SWKxpMoj/1t9DMrW2q9HRMdagSzfHSM9 nEgMHpu2WWA1nGinWWdy2koPaBbC9Ec6zGw0+8e/jGLYwuKgSHAcFftDk56qWoLA dR5drwAAkgHE9iJAdyllhUpGW1vwkkTmD46I6INeOFNhLCeHY+LaeLEQ10Xrylhs 2bU2nc/MDdV1XmGdM4BTZedkLGK9hVPqDH5SrbmvElxD2QYXVATOPAeOXdlySyml 4jZGyMpbBSDWFzZ8fqaqWhTidwSLeiY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:59:14 2025 by rpki-client