$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eea8620-1e69-3bf1-b275-c8f1d26f9e64.roa File: 5eea8620-1e69-3bf1-b275-c8f1d26f9e64.roa (raw, json) Hash identifier: AsYjLusn09iPlgRciWUNldgWlmzg+JV++OLMAM8Yg0k= Subject key identifier: 5F:44:20:25:CD:B2:80:C2:FC:70:4E:76:BE:FD:81:02:19:34:5A:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84118792105E470960C47220 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eea8620-1e69-3bf1-b275-c8f1d26f9e64.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 23.251.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:87:92:10:5e:47:09:60:c4:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e586bdba-e355-415c-90f6-f8f6f11a4d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:23:2a:09:2b:bb:58:6e:ed:6e:8a:36:4b: af:87:07:fd:68:47:8b:a5:c9:ac:2a:1a:17:70:5a: 26:17:f7:25:63:91:41:51:9c:ea:45:3e:ac:7d:00: f4:a4:63:8a:b4:5f:54:68:00:5c:4c:da:8e:ad:96: 22:a6:cb:5e:0e:a7:da:50:b6:12:a8:02:0f:a9:75: ee:ac:d4:00:b4:88:3a:dd:37:46:6f:5a:58:79:51: e6:7d:72:fb:18:b7:9d:a8:ec:49:f9:33:75:ba:f8: f6:0a:1e:e9:b5:d4:8c:49:27:a6:dc:52:d7:be:6d: 1f:b7:dc:fe:57:31:23:c6:08:23:d8:29:b4:16:16: 2d:f9:5c:ad:6c:f3:2a:73:b7:b5:8f:c1:d4:ad:ec: 74:b5:fc:a3:87:9d:5e:a3:1d:87:9f:83:1f:ef:91: 4c:d0:b1:92:44:0a:68:dd:5c:f0:70:da:6d:29:13: ab:3a:22:7e:18:35:1d:32:fe:71:9b:85:81:32:c0: 5e:52:2d:32:52:b6:44:e8:42:d3:8e:47:35:8e:6d: b3:61:69:bc:67:00:bd:d7:01:d0:a1:d7:5c:c5:10: 86:f5:82:b1:65:8a:ad:ee:dc:bf:e1:6e:b3:02:56: 16:39:76:ec:d9:b1:48:9b:4b:ff:02:a5:a9:9e:b7: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:20:25:CD:B2:80:C2:FC:70:4E:76:BE:FD:81:02:19:34:5A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5eea8620-1e69-3bf1-b275-c8f1d26f9e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:be:2e:81:33:a3:55:73:97:3a:d0:b3:52:da:1a:08:f6:94: 95:37:51:89:77:48:0b:e6:9d:fc:70:1e:f2:21:69:b8:14:fb: 25:89:61:af:2c:1d:46:c5:0b:b5:f2:8f:45:be:17:be:fa:2e: 0a:19:62:e2:ad:77:12:2d:3e:b2:ff:99:7b:13:32:5d:80:de: 3d:19:29:a1:e9:8f:78:9c:44:66:54:de:42:39:70:f0:73:04: 46:91:a6:8a:9c:8b:ff:46:73:75:65:a4:69:55:ad:5d:2e:53: 26:0c:0c:6a:5e:1a:83:df:65:15:b1:df:1d:d7:32:f3:6a:37: de:69:9b:b0:4f:f0:38:be:77:e2:6a:64:a2:8b:bf:d9:4e:84: 82:98:de:00:b0:94:0f:85:43:5f:1a:34:b9:07:64:06:2d:e0: ca:82:d0:a9:d4:2e:25:4c:b8:cf:11:f9:89:e9:eb:9f:c1:44: bb:ac:3b:66:64:57:78:fc:a4:26:de:01:9c:ad:66:bc:6d:8c: 39:bf:6e:e1:55:6d:7b:a0:d6:00:ed:63:fc:7b:46:b1:40:d8: b1:fe:84:ab:d6:74:8e:50:cb:3b:6f:a4:dd:33:aa:b4:0a:57: 7e:37:d3:cd:e5:55:28:80:fe:33:19:0d:43:f6:98:a2:a6:af: 71:4b:25:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYeSEF5HCWDEciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTU4NmJkYmEtZTM1NS00MTVjLTkwZjYtZjhmNmYxMWE0ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXYjKgkru1hu7W6KNkuvhwf9aEeLpcmsKhoX cFomF/clY5FBUZzqRT6sfQD0pGOKtF9UaABcTNqOrZYipsteDqfaULYSqAIPqXXu rNQAtIg63TdGb1pYeVHmfXL7GLedqOxJ+TN1uvj2Ch7ptdSMSSem3FLXvm0ft9z+ VzEjxggj2Cm0FhYt+VytbPMqc7e1j8HUrex0tfyjh51eox2Hn4Mf75FM0LGSRApo 3VzwcNptKROrOiJ+GDUdMv5xm4WBMsBeUi0yUrZE6ELTjkc1jm2zYWm8ZwC91wHQ oddcxRCG9YKxZYqt7ty/4W6zAlYWOXbs2bFIm0v/AqWpnrfvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9EICXNsoDC/HBOdr79gQIZNFr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWVlYTg2MjAtMWU2OS0z YmYxLWIyNzUtYzhmMWQyNmY5ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG++LoEzo1VzlzrQs1LaGgj2lJU3UYl3SAvmnfxwHvIhabgU+yWJYa8s HUbFC7Xyj0W+F776LgoZYuKtdxItPrL/mXsTMl2A3j0ZKaHpj3icRGZU3kI5cPBz BEaRpoqci/9Gc3VlpGlVrV0uUyYMDGpeGoPfZRWx3x3XMvNqN95pm7BP8Di+d+Jq ZKKLv9lOhIKY3gCwlA+FQ18aNLkHZAYt4MqC0KnULiVMuM8R+Ynp65/BRLusO2Zk V3j8pCbeAZytZrxtjDm/buFVbXug1gDtY/x7RrFA2LH+hKvWdI5QyztvpN0zqrQK V343083lVSiA/jMZDUP2mKKmr3FLJVc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:16 2025 by rpki-client