$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa File: 2a117ee7-322f-3fb9-aaae-1c614b96e006.roa (raw, json) Hash identifier: MqbkrGHbp6egMQ6IEgvwDpoNmx1HRlKDXTisH5wSwF8= Subject key identifier: C9:22:D4:C8:8A:D0:5F:6B:80:39:46:86:2B:5D:70:0A:E0:D2:7F:F7 Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Certificate serial: 010D0C9F43285849E225322F2F09663162C74600 Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 63334 IP address blocks: 23.143.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:32:2f:2f:09:66:31:62:c7:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=fb02a78b-13c3-451f-bea1-84a43296c2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:2f:c5:4b:83:9b:83:18:12:72:01:f0:8c: cb:b8:22:1a:45:e3:57:85:ac:71:16:96:34:2e:dd: 92:2f:c1:a1:c0:15:f6:78:c7:bb:fd:b4:e6:53:4b: 51:ff:31:7e:c5:8d:f8:92:82:16:1c:c5:05:f8:98: 12:71:1f:df:7c:36:db:a0:22:1b:fd:ae:80:89:10: e9:7e:9f:27:b1:87:04:7e:58:aa:c4:6f:83:8f:60: c7:c2:b3:7b:05:ea:27:46:88:06:4a:1f:0d:e9:60: 1c:2f:5b:43:5a:98:c7:66:6e:34:e7:fd:4a:28:27: 56:43:b6:44:06:d5:cf:ee:40:7b:a5:da:be:3e:48: 80:8b:95:c9:7c:3c:1b:f2:10:ce:18:78:51:ea:02: 47:5e:ed:ba:78:25:00:1b:2a:69:ea:8c:ff:29:74: 03:fa:81:c3:fc:e9:ab:9c:b6:be:04:9e:af:ad:0f: 38:70:32:22:03:17:23:80:7c:3f:77:21:80:25:78: 5d:3b:47:ff:d2:7e:5d:38:6f:63:87:31:17:f9:d6: 6b:91:e4:fb:ca:9e:39:5c:86:72:26:e2:06:43:a0: 13:5d:48:b1:f3:3a:57:46:c9:8e:ec:a5:4d:9d:63: 92:c5:8a:f7:b0:a5:cd:98:3b:7f:0d:16:e0:df:14: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:D4:C8:8A:D0:5F:6B:80:39:46:86:2B:5D:70:0A:E0:D2:7F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl X509v3 Authority Key Identifier: keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:51:6d:ac:88:63:db:5c:c4:6f:37:4f:c5:34:7b:8b:3d:32: 8b:dc:07:f9:d5:32:b2:fb:33:02:51:97:ff:41:dc:b1:f2:65: 05:7b:0f:44:d5:23:c6:1b:4b:78:86:4e:0c:4d:b4:c9:07:43: 8a:05:80:93:4e:ee:b5:c9:81:7b:b2:2a:79:04:38:85:bc:f4: ab:0d:c2:69:f5:d6:5d:8d:9c:ee:5d:78:b0:1d:a6:27:d7:9f: 0b:ff:9a:20:66:60:f0:a4:a4:fc:9c:65:ff:06:b4:4b:23:9a: 14:43:f8:66:33:32:1b:36:26:68:74:ec:cd:fb:25:58:4d:2b: 53:5b:48:bb:08:b6:a1:a3:06:3c:28:f5:bb:2c:08:7f:09:96: 17:30:a3:ed:a6:9f:36:59:be:3f:a4:a4:4a:66:fd:f1:07:48: 17:2e:59:0f:94:94:0d:63:7e:82:f9:ad:b3:78:b6:af:11:c7: d0:7b:28:b2:db:e5:09:18:71:3f:ed:62:1d:7f:89:b9:18:77: 53:4a:a3:31:1b:f7:cf:59:2a:d5:f9:d6:6e:62:ad:3a:4c:e3: b0:35:9e:3c:5c:3e:9d:d3:0e:b4:28:7b:f8:9f:8a:fb:e0:70: 11:ed:da:d3:de:5e:75:b2:22:e9:03:da:ae:21:44:2d:44:6a: 9c:26:31:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTIvLwlmMWLHRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk ZGI0MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZmIwMmE3OGItMTNjMy00NTFmLWJlYTEtODRhNDMyOTZjMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXIvxUuDm4MYEnIB8IzLuCIaReNXhaxxFpY0 Lt2SL8GhwBX2eMe7/bTmU0tR/zF+xY34koIWHMUF+JgScR/ffDbboCIb/a6AiRDp fp8nsYcEfliqxG+Dj2DHwrN7BeonRogGSh8N6WAcL1tDWpjHZm405/1KKCdWQ7ZE BtXP7kB7pdq+PkiAi5XJfDwb8hDOGHhR6gJHXu26eCUAGypp6oz/KXQD+oHD/Omr nLa+BJ6vrQ84cDIiAxcjgHw/dyGAJXhdO0f/0n5dOG9jhzEX+dZrkeT7yp45XIZy JuIGQ6ATXUix8zpXRsmO7KVNnWOSxYr3sKXNmDt/DRbg3xTuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMki1MiK0F9rgDlGhitdcArg0n/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMmExMTdlZTctMzIyZi0z ZmI5LWFhYWUtMWM2MTRiOTZlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1 OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5 ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh NTgzOWRkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFRbayIY9tcxG83T8U0e4s9MovcB/nVMrL7MwJRl/9B3LHyZQV7D0TV I8YbS3iGTgxNtMkHQ4oFgJNO7rXJgXuyKnkEOIW89KsNwmn11l2NnO5deLAdpifX nwv/miBmYPCkpPycZf8GtEsjmhRD+GYzMhs2Jmh07M37JVhNK1NbSLsItqGjBjwo 9bssCH8Jlhcwo+2mnzZZvj+kpEpm/fEHSBcuWQ+UlA1jfoL5rbN4tq8Rx9B7KLLb 5QkYcT/tYh1/ibkYd1NKozEb989ZKtX51m5irTpM47A1njxcPp3TDrQoe/ifivvg cBHt2tPeXnWyIukD2q4hRC1EapwmMeg= -----END CERTIFICATE-----Generated at Sun Jun 15 13:59:02 2025 by rpki-client