$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/36bc42a7-9ef0-3e06-8b41-26a2b5737aad.roa File: 36bc42a7-9ef0-3e06-8b41-26a2b5737aad.roa (raw, json) Hash identifier: qWHVmSKFpzm/rNS8foQWjh62JCO02ZpLi9tE3yksuEQ= Subject key identifier: 5C:E1:15:41:46:72:99:A8:7D:BD:C6:39:A9:70:0F:7E:82:51:FF:8C Certificate issuer: /CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Certificate serial: 010D0C9F4328584A1F90229AD8D75F4562C59500 Authority key identifier: D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/36bc42a7-9ef0-3e06-8b41-26a2b5737aad.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 26042 IP address blocks: 23.166.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:22:9a:d8:d7:5f:45:62:c5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd4429c-5080-4da9-9cf6-c5cdcc1b2143 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=32dce7e0-f2a2-4a77-aa95-04fe19646ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:70:7f:72:f6:d1:8b:6e:dd:e7:90:78:66: 61:69:23:93:34:56:8e:ca:55:81:87:8a:7b:ee:5e: f8:1d:0c:55:cb:4f:0e:0b:dc:76:c8:d3:6f:c7:69: f5:79:91:fe:e5:29:41:31:35:d3:58:ef:16:ff:f9: d5:37:b7:71:24:12:14:7d:e2:90:08:cd:a2:1a:a5: ff:7b:9b:94:cd:f1:69:e1:ca:88:d4:94:b8:ef:93: 58:4f:82:93:ad:1c:b3:91:29:25:fb:18:30:4f:f1: 51:7c:57:33:40:6c:ec:88:a5:69:07:fb:74:f0:f6: 61:e5:ea:e6:77:1c:eb:af:6e:54:d0:e3:10:ea:34: b7:72:ef:ec:db:a3:8b:e3:8d:1d:40:70:60:d2:85: e4:cf:33:5a:e1:9b:2e:1e:7a:81:31:b3:88:d3:a3: ce:a4:12:e8:ec:30:cc:07:2c:e8:93:83:5c:41:10: 20:e6:23:ad:3d:64:f4:1d:06:16:d9:cf:66:8c:7b: 07:87:b8:1f:5b:eb:1f:54:8b:5e:2a:3c:15:e7:09: 8d:49:fa:1b:f3:66:39:78:13:27:51:8d:e6:f7:fb: 63:94:19:6f:c2:c8:b7:97:3e:b0:e5:f9:5f:b2:dc: 68:e7:62:5f:5a:93:9e:f4:98:c1:1f:1e:d1:cc:cd: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:15:41:46:72:99:A8:7D:BD:C6:39:A9:70:0F:7E:82:51:FF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/36bc42a7-9ef0-3e06-8b41-26a2b5737aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.crl X509v3 Authority Key Identifier: keyid:D9:64:C3:B5:AE:71:70:F5:6B:D4:07:6E:CA:51:9E:BA:2F:8B:A5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5dd4429c-5080-4da9-9cf6-c5cdcc1b2143.cer sbgp-ipAddrBlock: critical IPv4: 23.166.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:43:e3:fd:11:ab:dc:c1:75:38:dc:c7:dd:71:c7:63:37:c8: ce:86:79:31:ef:5c:a5:25:a5:cc:e5:9e:ab:c3:37:ef:bb:63: ae:7b:5b:5a:2a:c2:a2:30:3d:b7:6a:f2:87:05:a5:6d:03:58: 86:a9:c7:14:52:6b:01:84:a7:55:38:e5:c9:cf:f4:3a:f4:1f: 37:a1:71:20:04:fa:31:e2:b7:90:2c:98:28:36:f3:6c:6a:10: c1:35:80:65:e8:ff:a4:f6:fe:de:da:09:72:0f:1f:c5:10:81: 6d:ec:58:b1:62:eb:57:2f:4a:7c:6f:0b:6a:fb:d1:10:25:3c: 53:a3:89:c8:e2:53:f5:be:1b:15:81:e5:61:6c:30:d6:ef:01: f9:28:4e:f4:53:4c:29:9e:39:38:dc:a8:73:e7:cb:93:26:05: a5:eb:2e:34:28:97:3f:ba:02:19:1f:77:bd:84:15:d9:25:82: 31:49:4c:5a:50:ad:51:17:16:4e:b2:d5:8b:84:bf:ee:f9:51: 77:87:e9:0e:13:b2:c9:32:18:cc:b5:c1:69:5e:3d:0c:c8:e0: bc:c0:d5:73:7b:0f:ef:d2:6b:5e:f0:17:a3:97:f2:44:b8:65: c7:fd:75:d5:db:0d:3a:f7:ba:00:db:df:62:82:24:c2:9f:53: c8:c1:ca:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCKa2NdfRWLFlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkNDQyOWMtNTA4MC00ZGE5LTljZjYtYzVjZGNjMWIy MTQzMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk MzJkY2U3ZTAtZjJhMi00YTc3LWFhOTUtMDRmZTE5NjQ2ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9lwf3L20Ytu3eeQeGZhaSOTNFaOylWBh4p7 7l74HQxVy08OC9x2yNNvx2n1eZH+5SlBMTXTWO8W//nVN7dxJBIUfeKQCM2iGqX/ e5uUzfFp4cqI1JS475NYT4KTrRyzkSkl+xgwT/FRfFczQGzsiKVpB/t08PZh5erm dxzrr25U0OMQ6jS3cu/s26OL440dQHBg0oXkzzNa4ZsuHnqBMbOI06POpBLo7DDM Byzok4NcQRAg5iOtPWT0HQYW2c9mjHsHh7gfW+sfVIteKjwV5wmNSfob82Y5eBMn UY3m9/tjlBlvwsi3lz6w5flfstxo52JfWpOe9JjBHx7RzM3MlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzhFUFGcpmofb3GOalwD36CUf+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0 NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNkY2MxYjIxNDMvMzZiYzQyYTctOWVmMC0z ZTA2LThiNDEtMjZhMmI1NzM3YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRkNDQyOWMtNTA4MC00ZGE5LTlj ZjYtYzVjZGNjMWIyMTQzLzVkZDQ0MjljLTUwODAtNGRhOS05Y2Y2LWM1Y2RjYzFi MjE0My5jcmwwHwYDVR0jBBgwFoAU2WTDta5xcPVr1AduylGeui+LpUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGQ0NDI5Yy01MDgwLTRkYTktOWNmNi1jNWNk Y2MxYjIxNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5D4/0Rq9zBdTjcx91xx2M3yM6GeTHvXKUlpczlnqvDN++7Y657W1oq wqIwPbdq8ocFpW0DWIapxxRSawGEp1U45cnP9Dr0HzehcSAE+jHit5AsmCg282xq EME1gGXo/6T2/t7aCXIPH8UQgW3sWLFi61cvSnxvC2r70RAlPFOjicjiU/W+GxWB 5WFsMNbvAfkoTvRTTCmeOTjcqHPny5MmBaXrLjQolz+6Ahkfd72EFdklgjFJTFpQ rVEXFk6y1YuEv+75UXeH6Q4TsskyGMy1wWlePQzI4LzA1XN7D+/Sa17wF6OX8kS4 Zcf9ddXbDTr3ugDb32KCJMKfU8jByhs= -----END CERTIFICATE-----Generated at Sun Jun 15 18:47:13 2025 by rpki-client