$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa File: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (raw, json) Hash identifier: t+z1U7e5tIO4EyyYhOQSiDr4MRNqLvGwtMG8cgKKRD0= Subject key identifier: 3A:F8:89:36:D1:B1:F9:6D:BB:78:1A:11:FF:5E:35:7E:C4:84:5F:69 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F43285849CBCFA9511389118FA1A17F80 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 46733 IP address blocks: 23.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a9:51:13:89:11:8f:a1:a1:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=191ef358-4d6f-443e-8c8f-05f42c6f12b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b4:2c:12:ce:6d:94:2d:91:90:26:7f:2c:c6: 77:cb:4b:2a:1d:9f:ec:91:b2:d0:3d:da:9e:4e:2c: b5:29:87:b9:6f:eb:e1:f2:91:ea:5c:fa:9c:a8:0b: d3:e4:2b:1b:f5:9b:77:31:63:8a:e2:22:c1:65:d5: d7:7a:a9:cd:a1:07:68:19:90:56:e5:3a:e1:30:49: e4:c1:6a:6a:09:5f:9e:36:3c:a2:90:5a:a5:cc:2c: 8b:36:47:29:40:b3:31:19:f9:99:85:14:dc:67:15: c8:ef:85:86:42:bc:ca:09:2b:f1:26:17:ec:b4:d5: 32:d6:38:c5:4b:68:7d:0b:bf:f2:24:58:de:72:d8: 83:9f:85:02:c0:cb:8b:df:21:3c:4e:79:ac:35:6f: 95:05:f1:25:b9:16:87:ec:73:58:c4:f4:27:e7:9b: a7:e1:c7:82:df:7f:48:ab:3c:e4:da:b5:fa:d1:b2: da:18:7d:0c:16:a6:f1:f5:9d:50:20:08:b7:77:7b: e1:99:63:d2:7d:cb:31:ee:78:ac:6f:73:4a:2d:27: 68:43:24:53:02:93:5e:84:64:91:6a:83:e6:23:ea: b8:d7:fe:e1:f8:d9:67:2f:dd:fb:80:76:3f:70:dd: 50:d8:75:c5:a3:df:55:ff:77:02:34:37:4d:cb:b8: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:89:36:D1:B1:F9:6D:BB:78:1A:11:FF:5E:35:7E:C4:84:5F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2c:68:69:a2:9e:b3:86:55:92:3b:a9:f2:02:a4:6d:6c:33: d5:c2:a6:c1:d8:00:86:15:03:25:97:9e:12:17:ac:cc:a9:6c: 82:25:46:f5:68:d0:b8:ae:f2:6f:7b:be:18:aa:9f:bc:c4:57: 1b:61:14:e0:e6:f6:55:93:5e:c1:de:d5:cb:31:48:39:10:88: da:6a:1b:dc:bb:24:67:eb:fa:2b:c5:50:8e:e4:ea:99:f1:7d: bd:8c:43:39:92:2c:4d:3f:f5:22:1e:64:50:0f:c6:52:2e:dc: a7:43:e4:bf:7a:1d:d9:1d:ae:95:f4:26:2c:48:26:92:ef:05: 78:90:8b:9f:98:a6:fd:b1:ab:60:55:ee:b3:83:f2:14:b2:80: 40:e3:c8:8c:44:17:de:0c:ea:0c:94:42:24:23:2d:cf:e1:8e: 96:02:4b:cb:13:bb:8d:ea:ab:6c:d0:3c:06:34:0e:e6:61:73: ff:46:09:f1:3f:4d:57:01:5e:6d:e6:4d:1b:10:e6:44:f0:61: 5c:89:3c:28:d0:0a:68:1d:5b:5e:6c:56:34:7c:bd:af:67:0d: b4:75:22:bc:1c:e7:15:34:a0:b1:9c:67:26:a8:43:0d:b2:89: fb:69:a9:a1:14:d9:0c:7f:93:39:24:c2:60:bb:22:6c:3e:bd: 54:b8:f0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6lRE4kRj6Ghf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MTkxZWYzNTgtNGQ2Zi00NDNlLThjOGYtMDVmNDJjNmYxMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bQsEs5tlC2RkCZ/LMZ3y0sqHZ/skbLQPdqe Tiy1KYe5b+vh8pHqXPqcqAvT5Csb9Zt3MWOK4iLBZdXXeqnNoQdoGZBW5TrhMEnk wWpqCV+eNjyikFqlzCyLNkcpQLMxGfmZhRTcZxXI74WGQrzKCSvxJhfstNUy1jjF S2h9C7/yJFjectiDn4UCwMuL3yE8TnmsNW+VBfEluRaH7HNYxPQn55un4ceC339I qzzk2rX60bLaGH0MFqbx9Z1QIAi3d3vhmWPSfcsx7nisb3NKLSdoQyRTApNehGSR aoPmI+q41/7h+NlnL937gHY/cN1Q2HXFo99V/3cCNDdNy7hBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr4iTbRsfltu3gaEf9eNX7EhF9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvMDdmNmI1ZDAtZTgwYS0z NDRiLWEyNTItMjEyOWM2NGQ5NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQsaGminrOGVZI7qfICpG1sM9XCpsHYAIYVAyWXnhIXrMypbIIlRvVo 0Liu8m97vhiqn7zEVxthFODm9lWTXsHe1csxSDkQiNpqG9y7JGfr+ivFUI7k6pnx fb2MQzmSLE0/9SIeZFAPxlIu3KdD5L96HdkdrpX0JixIJpLvBXiQi5+Ypv2xq2BV 7rOD8hSygEDjyIxEF94M6gyUQiQjLc/hjpYCS8sTu43qq2zQPAY0DuZhc/9GCfE/ TVcBXm3mTRsQ5kTwYVyJPCjQCmgdW15sVjR8va9nDbR1Irwc5xU0oLGcZyaoQw2y iftpqaEU2Qx/kzkkwmC7Imw+vVS48Ew= -----END CERTIFICATE-----Generated at Sun Jun 15 12:00:20 2025 by rpki-client