$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa File: 96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa (raw, json) Hash identifier: xdA8IIp10Ks88Mo2sbb4MrtJcMVFQH2dtC0AzV2WVOU= Subject key identifier: 95:ED:84:2A:17:44:34:47:C6:68:4A:FF:30:18:3E:6A:5A:77:86:E1 Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F43285849B14A0EC6825F51781105E900 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 399646 IP address blocks: 23.165.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0e:c6:82:5f:51:78:11:05:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cfee965d-5ec3-4ed4-bbb6-77109b30f821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:db:38:69:7d:0e:ce:b7:85:d7:ad:f2:6f: 3c:3d:89:17:43:c5:98:e0:5f:a5:a0:25:93:b4:b4: b6:f2:81:8b:8c:8a:e4:69:c6:62:26:d3:99:06:41: 3d:b1:b8:fa:1d:16:10:1d:83:a9:05:3f:51:a4:c8: 95:a8:56:39:5b:1f:d8:da:7c:1f:41:f8:0e:e5:3e: 7c:7c:8f:b8:9d:a0:38:15:4d:85:5f:3f:26:50:cd: 2b:d1:08:6b:dc:6e:8a:fc:3a:b5:83:ac:97:43:ee: a7:aa:95:be:e4:3c:db:a1:b4:4d:90:18:56:78:ba: 86:18:d4:9e:89:af:16:cf:2e:4d:18:3e:c0:ff:f2: c1:cc:54:ce:a7:2c:89:75:b0:f3:53:95:2e:46:6c: 00:3b:75:b0:ee:88:59:38:60:cf:ba:4e:f0:4c:a1: c7:a8:5d:c2:66:51:e4:9d:28:91:fa:03:8d:5a:68: 97:0e:e3:90:95:cc:9a:fc:3d:5a:2e:76:2a:c6:2e: f1:ea:d4:00:bb:a5:52:a6:84:c2:0b:65:cb:c4:b5: 5d:c9:0d:c0:46:5f:d6:f6:86:cb:7d:77:c2:3b:cc: 55:20:5e:8e:cc:40:0e:4e:d2:fa:ec:c5:3d:66:e7: 3b:2a:82:b0:7b:2c:b6:e7:bb:b7:47:3d:60:14:64: 37:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:84:2A:17:44:34:47:C6:68:4A:FF:30:18:3E:6A:5A:77:86:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/96521f16-4f5b-3251-bfd3-d8cfd9a26827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 23.165.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:92:eb:96:80:3a:71:1c:6f:0c:8b:d0:5a:2e:1b:d4:80:e8: 71:aa:5c:9e:f9:9b:ce:cd:1b:03:d0:c8:7e:81:78:db:8e:59: 90:05:e4:5a:18:d9:d9:4a:b9:3a:fc:f6:c2:cd:22:a8:7e:ef: ed:4c:04:7d:e7:e5:ee:2b:74:28:b8:62:60:a4:cf:2b:1b:50: ef:11:4f:18:a3:0f:f0:cb:d1:66:55:62:3c:dc:b6:49:c7:8a: e0:4f:ca:27:b5:49:42:33:06:81:00:52:dc:b1:2c:0a:82:e7: 6a:9c:ce:6b:2a:33:08:e9:4e:e8:b2:9b:2f:da:58:d8:7f:e6: bf:3b:56:b1:6d:a2:07:9d:0a:81:f1:15:b9:68:69:4b:be:a9: 5f:4e:aa:2d:d3:76:a1:84:7b:fa:17:f7:26:de:8c:96:0e:3f: 8f:87:c7:0d:2b:61:c6:f4:18:ca:8c:0b:da:a8:ff:8f:0e:84: 9d:31:d3:e3:da:b6:5e:f1:2d:f1:e6:d1:f0:81:f0:6a:ce:17: f7:1f:1a:4d:23:1d:53:68:95:b1:10:51:2e:13:80:a9:8d:7a: 24:f5:d7:1f:8b:8c:cf:85:36:53:27:7b:f8:ac:c8:df:da:f6: ee:fa:b0:cb:9b:88:af:83:7b:d6:e7:45:f1:34:2a:b0:78:9e: 44:bd:66:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg7Ggl9ReBEF6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2ZlZTk2NWQtNWVjMy00ZWQ0LWJiYjYtNzcxMDliMzBmODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYrbOGl9Ds63hdet8m88PYkXQ8WY4F+loCWT tLS28oGLjIrkacZiJtOZBkE9sbj6HRYQHYOpBT9RpMiVqFY5Wx/Y2nwfQfgO5T58 fI+4naA4FU2FXz8mUM0r0Qhr3G6K/Dq1g6yXQ+6nqpW+5DzbobRNkBhWeLqGGNSe ia8Wzy5NGD7A//LBzFTOpyyJdbDzU5UuRmwAO3Ww7ohZOGDPuk7wTKHHqF3CZlHk nSiR+gONWmiXDuOQlcya/D1aLnYqxi7x6tQAu6VSpoTCC2XLxLVdyQ3ARl/W9obL fXfCO8xVIF6OzEAOTtL67MU9Zuc7KoKweyy257u3Rz1gFGQ37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXthCoXRDRHxmhK/zAYPmpad4bhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvOTY1MjFmMTYtNGY1Yi0z MjUxLWJmZDMtZDhjZmQ5YTI2ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWS65aAOnEcbwyL0FouG9SA6HGqXJ75m87NGwPQyH6BeNuOWZAF5FoY 2dlKuTr89sLNIqh+7+1MBH3n5e4rdCi4YmCkzysbUO8RTxijD/DL0WZVYjzctknH iuBPyie1SUIzBoEAUtyxLAqC52qczmsqMwjpTuiymy/aWNh/5r87VrFtogedCoHx FbloaUu+qV9Oqi3TdqGEe/oX9ybejJYOP4+Hxw0rYcb0GMqMC9qo/48OhJ0x0+Pa tl7xLfHm0fCB8GrOF/cfGk0jHVNolbEQUS4TgKmNeiT11x+LjM+FNlMne/isyN/a 9u76sMubiK+De9bnRfE0KrB4nkS9ZjI= -----END CERTIFICATE-----Generated at Sun Jun 15 20:03:13 2025 by rpki-client