$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa File: 610c7ada-377e-34d0-9c81-d4d76be9e55d.roa (raw, json) Hash identifier: hEON1mx+NhRsO4pUNF5cp6p0JakipIPZIQ2YqX2Dd98= Subject key identifier: D2:7A:BB:99:9C:E6:53:88:77:84:9D:9D:53:C1:0C:15:FE:6F:DE:9A Certificate issuer: /CN=6aa8cf92-6ed1-444d-b120-4e622c110d10 Certificate serial: 010D0C9F43285849D594DE87CE93F2C6E78B4540 Authority key identifier: BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 398712 IP address blocks: 23.165.240.0/24 maxlen: 24 45.4.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:de:87:ce:93:f2:c6:e7:8b:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8cf92-6ed1-444d-b120-4e622c110d10 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=5b63d5b7-c02b-452d-b041-d77be0f5133a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:9b:7a:63:b9:6c:bf:fd:f4:f5:b5:95:ce: d6:12:8d:c9:03:eb:9b:16:c3:cd:b9:cf:f5:67:56: 8b:4e:7d:4a:b5:17:e9:36:b3:32:3a:ab:2a:83:97: 68:db:11:ab:30:f5:4d:95:01:d9:49:48:b1:d7:d4: e9:66:75:2a:77:61:55:a8:d6:3b:0a:ff:77:0c:06: 19:22:65:65:47:90:9a:7b:3c:4d:4a:52:68:48:8d: 3e:8e:c1:4a:2d:cb:ac:8e:b6:4d:0a:a1:89:d1:1f: 39:85:c9:5a:de:7e:d9:9d:56:4b:94:52:31:44:a2: 64:b8:d1:e0:1d:14:68:71:0b:21:8f:d2:3f:4a:81: 16:d6:98:db:56:2b:05:08:d9:39:07:19:6a:c2:b5: cf:c6:f1:85:49:0e:5d:a8:9c:16:8e:ce:ed:db:24: bd:62:10:8c:2b:a4:59:60:19:8a:00:72:90:b3:6b: 48:12:59:75:c0:28:01:1c:5f:c1:36:a0:19:68:43: 97:cf:0c:3a:93:37:9f:7e:7e:99:d6:00:96:33:d6: e2:cd:c8:f9:c0:cd:6b:7c:44:a4:88:9c:69:ed:ac: 1e:fb:e4:a4:94:2e:1a:5e:11:15:63:47:38:cd:79: e7:e6:6d:7b:23:09:c2:ce:51:98:32:4c:0a:a9:3a: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:BB:99:9C:E6:53:88:77:84:9D:9D:53:C1:0C:15:FE:6F:DE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/610c7ada-377e-34d0-9c81-d4d76be9e55d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10/6aa8cf92-6ed1-444d-b120-4e622c110d10.crl X509v3 Authority Key Identifier: keyid:BD:32:61:B6:44:20:78:C5:81:2B:AB:2D:AB:4C:0D:8D:0A:05:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6aa8cf92-6ed1-444d-b120-4e622c110d10.cer sbgp-ipAddrBlock: critical IPv4: 23.165.240.0/24 45.4.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:6f:65:d6:f4:9b:ff:e8:40:dd:39:ff:32:fe:52:41:3c:af: 64:2e:4e:77:9c:3c:b2:ce:39:8e:06:f2:0b:62:44:8c:d0:07: 2a:0c:1e:98:2b:74:35:dd:9c:0d:4b:ba:7a:85:9e:4e:37:ae: 11:ba:a9:0d:a6:fb:59:20:0f:77:97:cb:de:34:14:78:48:16: 4c:42:bd:61:ea:b0:a6:37:7b:c2:e9:26:f5:cc:00:f3:a3:5d: a2:19:47:39:c8:61:a3:26:69:78:65:f4:12:92:89:ea:d2:c7: 3a:9a:74:07:59:40:82:b8:3d:88:f8:27:99:0c:b1:bd:2f:e1: 5b:69:5c:cb:95:94:af:b7:7a:0b:1c:78:75:f9:bd:39:98:9f: 76:7a:66:0c:b4:60:32:0c:5e:aa:d7:5a:40:59:75:d1:1b:c0: 28:0e:09:32:86:e1:2f:be:a4:73:6e:19:7d:08:b4:d3:03:8f: 9f:73:8d:60:f3:42:52:d1:dc:0b:72:5a:30:84:72:d4:b9:6e: cb:20:6a:ee:8f:7c:44:33:8f:78:c5:75:fe:7c:cf:3f:86:22: 7c:86:09:57:9b:03:2f:b7:41:19:a1:32:28:78:e2:04:ea:89: 58:57:71:cb:af:20:58:ce:a7:e2:31:84:41:13:f1:f0:c4:a7: 5f:8d:a5:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnVlN6HzpPyxueLRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFhOGNmOTItNmVkMS00NDRkLWIxMjAtNGU2MjJjMTEw ZDEwMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NWI2M2Q1YjctYzAyYi00NTJkLWIwNDEtZDc3YmUwZjUxMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXibemO5bL/99PW1lc7WEo3JA+ubFsPNuc/1 Z1aLTn1KtRfpNrMyOqsqg5do2xGrMPVNlQHZSUix19TpZnUqd2FVqNY7Cv93DAYZ ImVlR5CaezxNSlJoSI0+jsFKLcusjrZNCqGJ0R85hcla3n7ZnVZLlFIxRKJkuNHg HRRocQshj9I/SoEW1pjbVisFCNk5BxlqwrXPxvGFSQ5dqJwWjs7t2yS9YhCMK6RZ YBmKAHKQs2tIEll1wCgBHF/BNqAZaEOXzww6kzeffn6Z1gCWM9bizcj5wM1rfESk iJxp7awe++SklC4aXhEVY0c4zXnn5m17IwnCzlGYMkwKqTowgQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNJ6u5mc5lOId4SdnVPBDBX+b96aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWE4 Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYyMmMxMTBkMTAvNjEwYzdhZGEtMzc3ZS0z NGQwLTljODEtZDRkNzZiZTllNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFhOGNmOTItNmVkMS00NDRkLWIx MjAtNGU2MjJjMTEwZDEwLzZhYThjZjkyLTZlZDEtNDQ0ZC1iMTIwLTRlNjIyYzEx MGQxMC5jcmwwHwYDVR0jBBgwFoAUvTJhtkQgeMWBK6stq0wNjQoF7HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YWE4Y2Y5Mi02ZWQxLTQ0NGQtYjEyMC00ZTYy MmMxMTBkMTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6XwAwQC LQTEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMNvZdb0m//oQN05/zL+UkE8r2QuTnecPLLOOY4G8gtiRIzQ ByoMHpgrdDXdnA1LunqFnk43rhG6qQ2m+1kgD3eXy940FHhIFkxCvWHqsKY3e8Lp JvXMAPOjXaIZRznIYaMmaXhl9BKSierSxzqadAdZQIK4PYj4J5kMsb0v4VtpXMuV lK+3egsceHX5vTmYn3Z6Zgy0YDIMXqrXWkBZddEbwCgOCTKG4S++pHNuGX0ItNMD j59zjWDzQlLR3AtyWjCEctS5bssgau6PfEQzj3jFdf58zz+GInyGCVebAy+3QRmh Mih44gTqiVhXccuvIFjOp+IxhEET8fDEp1+NpXI= -----END CERTIFICATE-----Generated at Mon Jun 16 00:14:58 2025 by rpki-client