$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/65654d0b-cfcf-30a5-8379-aa3618384043.roa File: 65654d0b-cfcf-30a5-8379-aa3618384043.roa (raw, json) Hash identifier: LpTRKqEebIyKI6Y2KY7TORe2le8XtczK84hyvn6QCqs= Subject key identifier: 60:8E:D1:AD:00:F5:96:13:27:56:02:0C:A7:49:37:3A:80:F4:CA:46 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AFFC5E3CD8299F125E9306538 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/65654d0b-cfcf-30a5-8379-aa3618384043.roa Signing time: Wed 27 Aug 2025 20:30:37 +0000 ROA not before: Wed 27 Aug 2025 20:30:37 +0000 ROA not after: Tue 25 Nov 2025 21:30:37 +0000 asID: 3356 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:c5:e3:cd:82:99:f1:25:e9:30:65:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 27 20:30:37 2025 GMT Not After : Nov 25 21:30:37 2025 GMT Subject: CN=f07c3f2b-48e7-442f-9b47-6efbdc97f28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:97:46:b6:41:cb:dc:bd:a4:67:88:af:6c: c9:36:52:6a:7b:31:c4:f7:76:a9:2a:54:45:cb:97: fc:78:bc:69:f3:81:75:fd:07:cb:e7:ca:9b:9a:03: 94:2f:9e:51:99:b5:11:9a:21:08:9f:92:12:a2:35: 96:24:69:6d:b4:56:e7:5c:1a:fb:49:6b:eb:d2:f9: 5a:26:90:2a:cf:9a:28:cb:70:c2:b2:c7:fa:73:1a: be:c2:59:01:55:ff:2c:d5:ed:5e:ab:44:48:47:75: 56:7d:6d:8d:e6:85:57:eb:ec:74:55:2d:11:ef:e2: 09:37:ad:f4:90:3f:fa:e1:71:68:0b:f2:52:b3:eb: 2e:27:9b:8d:8d:f9:73:5b:63:b4:96:62:d1:b4:8b: de:98:7e:5f:ef:22:a4:30:f8:dc:19:d9:71:af:d5: 62:ba:52:00:7a:b5:37:25:e5:d0:9d:89:7b:3a:fb: 78:8f:84:7e:35:e0:df:23:a5:79:13:bd:00:5d:fe: d5:9a:b1:7d:76:6f:08:f6:03:3d:f0:93:84:76:b8: 5c:78:a8:07:85:e0:e8:d0:d6:75:82:2d:f5:53:f4: 13:52:d5:e9:e4:1d:75:c2:95:f5:f7:58:1f:f7:a4: 53:2c:16:3e:3b:df:8e:4e:f5:a0:0b:82:85:f3:ef: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8E:D1:AD:00:F5:96:13:27:56:02:0C:A7:49:37:3A:80:F4:CA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/65654d0b-cfcf-30a5-8379-aa3618384043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5b:89:1e:b5:45:72:b3:9c:7c:07:bd:6f:c5:21:f1:e7:f5: 65:16:57:af:d3:c3:e5:e5:3d:d1:29:dc:b9:8f:73:77:2f:8a: 28:e1:ae:70:4a:a6:10:b6:1a:c6:92:4f:91:40:ba:fc:59:18: 8e:06:9b:07:37:ab:21:2e:00:fd:b5:e1:a9:12:4d:ee:f1:eb: b4:e8:6a:d9:39:83:d4:c6:c9:47:7b:fc:18:9b:c3:60:c2:9f: 80:28:30:b1:72:66:3a:02:5b:86:9b:f8:21:44:50:2f:1f:2c: aa:e8:48:a7:30:16:41:2c:37:c0:0b:58:d9:c9:4f:01:f7:33: 4b:5d:4b:f0:36:2b:f3:1c:6b:c6:b2:72:61:82:51:6f:f8:8c: c6:7e:2d:9a:63:f9:5f:98:76:d4:6d:f0:21:c3:f6:4c:82:c5: dd:be:69:b4:73:74:dd:ff:1f:a5:b3:3d:24:e9:29:25:50:e7: e8:c6:74:60:93:95:65:68:0e:3b:03:c6:fb:8f:b8:db:77:84: 5b:2c:67:19:ba:6e:f2:69:4e:11:95:77:e3:79:8c:d6:04:3a: ed:9c:b0:55:de:03:5e:be:8b:9a:15:cf:0d:8c:8f:1f:bd:b9: b2:fd:34:5f:5d:7a:54:41:b5:a3:7c:91:3c:59:b6:99:22:60: 70:2a:5b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/xePNgpnxJekwZTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyNzIwMzAzN1oXDTI1MTEyNTIxMzAzN1owLzEtMCsGA1UEAxMk ZjA3YzNmMmItNDhlNy00NDJmLTliNDctNmVmYmRjOTdmMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUuXRrZBy9y9pGeIr2zJNlJqezHE93apKlRF y5f8eLxp84F1/QfL58qbmgOUL55RmbURmiEIn5ISojWWJGlttFbnXBr7SWvr0vla JpAqz5ooy3DCssf6cxq+wlkBVf8s1e1eq0RIR3VWfW2N5oVX6+x0VS0R7+IJN630 kD/64XFoC/JSs+suJ5uNjflzW2O0lmLRtIvemH5f7yKkMPjcGdlxr9ViulIAerU3 JeXQnYl7Ovt4j4R+NeDfI6V5E70AXf7VmrF9dm8I9gM98JOEdrhceKgHheDo0NZ1 gi31U/QTUtXp5B11wpX191gf96RTLBY+O9+OTvWgC4KF8+96rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCO0a0A9ZYTJ1YCDKdJNzqA9MpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjU2NTRkMGItY2ZjZi0z MGE1LTgzNzktYWEzNjE4Mzg0MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxbiR61RXKznHwHvW/FIfHn9WUWV6/Tw+XlPdEp3LmPc3cviijhrnBK phC2GsaST5FAuvxZGI4Gmwc3qyEuAP214akSTe7x67Toatk5g9TGyUd7/Bibw2DC n4AoMLFyZjoCW4ab+CFEUC8fLKroSKcwFkEsN8ALWNnJTwH3M0tdS/A2K/Mca8ay cmGCUW/4jMZ+LZpj+V+YdtRt8CHD9kyCxd2+abRzdN3/H6WzPSTpKSVQ5+jGdGCT lWVoDjsDxvuPuNt3hFssZxm6bvJpThGVd+N5jNYEOu2csFXeA16+i5oVzw2Mjx+9 ubL9NF9delRBtaN8kTxZtpkiYHAqW/s= -----END CERTIFICATE-----Generated at Wed Sep 17 04:01:08 2025 by rpki-client