$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa File: f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa (raw, json) Hash identifier: GGiTYGIWogP1QMi37RN0kVY/dXEHcg4OlY4Yqt1VC7s= Subject key identifier: FD:9D:42:F0:5B:B0:C3:E9:38:DA:8E:26:22:AB:28:DC:B1:A1:59:46 Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F43285849E91FA85DA56129FE2ABF7D00 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 198100 IP address blocks: 23.175.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a8:5d:a5:61:29:fe:2a:bf:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=eea17693-105b-44fb-9dd0-6ffc356e3f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:6b:3e:5f:8e:83:af:28:da:4f:4f:f3:50: e0:d4:1b:df:17:cf:7c:95:59:a6:21:67:22:a2:12: 64:f1:f9:af:49:e1:aa:03:8e:b2:d7:bb:46:1c:19: 40:80:0c:96:3b:23:be:ea:51:3d:6a:9a:0b:c0:91: c8:b3:ca:0a:de:ac:e7:a9:bb:32:58:bc:3b:cb:61: 0e:75:05:49:87:1c:76:39:e4:f8:62:c1:fd:47:ad: 9f:ce:e5:66:1d:e9:dc:41:cc:a7:c6:a6:b6:1a:38: df:e8:42:43:c1:2c:3e:4a:a7:4b:1b:5e:47:1f:3e: c3:65:1d:b9:ad:dd:a2:9b:95:d4:7d:29:d3:a4:31: 48:d3:b4:5a:de:d3:5d:fc:7c:d8:6f:aa:82:19:34: bb:9f:45:bb:71:4c:ca:01:2f:15:7a:c1:27:dd:2e: 41:28:c6:d6:ac:81:a5:28:da:50:36:52:2e:f7:3a: 14:a2:cd:b7:03:a0:c1:89:ee:fc:aa:e3:e9:53:9c: b3:5a:d8:fa:15:8a:66:0e:c4:c7:37:eb:a8:e7:da: 1e:11:d3:3c:42:c6:b2:db:60:6b:d7:a1:14:77:94: 57:be:25:27:76:07:1f:07:73:e7:11:df:87:8f:84: c3:6f:48:0f:33:d9:6c:98:12:7c:b2:27:0c:02:c6: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:42:F0:5B:B0:C3:E9:38:DA:8E:26:22:AB:28:DC:B1:A1:59:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8c:a1:62:c4:a7:a2:26:8d:2a:29:a5:08:3d:1c:d2:6e:fb: 82:e5:18:0b:96:ca:a7:47:ba:c8:fa:b3:6e:20:d3:5e:36:04: 2d:0b:85:1b:08:2e:be:26:5a:60:98:96:22:32:fa:39:77:eb: 5a:b3:4a:e6:21:0b:a1:9a:e4:8b:cf:41:a8:70:b4:5e:a5:07: 4e:d5:f2:7b:da:a9:3c:d7:91:ec:6e:7a:ef:fb:2d:7a:de:47: 04:35:b7:40:f2:3b:d1:e1:e9:d7:bc:00:b6:5d:fd:a8:56:45: 64:e0:65:84:99:c9:61:66:be:1b:1b:d2:d9:de:73:05:7e:fd: a7:73:89:bb:0b:2d:72:9b:f2:f1:20:45:17:20:19:fc:94:1c: eb:09:bd:fc:6d:7a:01:d7:6c:be:5c:82:c5:a6:2c:8c:0b:6a: ad:de:72:ff:76:32:bd:43:4e:d2:fd:2d:46:8d:d8:f9:86:ea: 6e:86:95:74:29:55:6f:af:f5:27:53:ac:27:af:7a:e8:45:87: ed:41:a3:47:60:bc:e4:79:cd:14:a9:2b:3f:58:cc:92:fb:b5: b4:a8:5a:8a:0c:70:3a:1f:ed:eb:4d:97:f1:38:93:3b:e3:2b: c4:c8:87:0c:48:a1:dc:e2:a7:be:c3:ea:a6:aa:67:b7:72:67: 98:e6:9f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6hdpWEp/iq/fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZWVhMTc2OTMtMTA1Yi00NGZiLTlkZDAtNmZmYzM1NmUzZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZprPl+Og68o2k9P81Dg1BvfF898lVmmIWci ohJk8fmvSeGqA46y17tGHBlAgAyWOyO+6lE9apoLwJHIs8oK3qznqbsyWLw7y2EO dQVJhxx2OeT4YsH9R62fzuVmHencQcynxqa2Gjjf6EJDwSw+SqdLG15HHz7DZR25 rd2im5XUfSnTpDFI07Ra3tNd/HzYb6qCGTS7n0W7cUzKAS8VesEn3S5BKMbWrIGl KNpQNlIu9zoUos23A6DBie78quPpU5yzWtj6FYpmDsTHN+uo59oeEdM8Qsay22Br 16EUd5RXviUndgcfB3PnEd+Hj4TDb0gPM9lsmBJ8sicMAsYIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2dQvBbsMPpONqOJiKrKNyxoVlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZjFhODFkYTYtMjM4OC0z MDliLThiMWUtZGY1NDJjYmMxZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSMoWLEp6ImjSoppQg9HNJu+4LlGAuWyqdHusj6s24g0142BC0LhRsI Lr4mWmCYliIy+jl361qzSuYhC6Ga5IvPQahwtF6lB07V8nvaqTzXkexueu/7LXre RwQ1t0DyO9Hh6de8ALZd/ahWRWTgZYSZyWFmvhsb0tnecwV+/adzibsLLXKb8vEg RRcgGfyUHOsJvfxtegHXbL5cgsWmLIwLaq3ecv92Mr1DTtL9LUaN2PmG6m6GlXQp VW+v9SdTrCeveuhFh+1Bo0dgvOR5zRSpKz9YzJL7tbSoWooMcDof7etNl/E4kzvj K8TIhwxIodzip77D6qaqZ7dyZ5jmn84= -----END CERTIFICATE-----Generated at Sun Jun 15 23:09:33 2025 by rpki-client