$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa File: 7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa (raw, json) Hash identifier: WN3EiaATQzmeIPjiVOp7OEHqep5Y2QD/XxTMOLf9AfQ= Subject key identifier: 61:4E:27:94:6D:9D:D3:0D:D0:67:D7:F7:5D:67:01:AF:7C:9D:4C:4E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A841174B0B52CBEA3D33FF680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 23.251.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:74:b0:b5:2c:be:a3:d3:3f:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ad1d624c-ab19-426b-87c8-7abc656bcd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:75:6d:4b:f9:b9:0c:78:88:c7:71:9c:f4: ba:35:f0:0b:5e:8a:01:2d:ef:34:92:b1:df:76:c6: 4a:ae:ea:36:79:a5:ab:21:a3:73:61:5b:5a:74:16: f4:5f:8d:34:39:de:b6:c5:93:a2:cb:23:22:63:d6: 2c:f2:25:b5:81:22:e5:7e:3d:51:ed:76:4c:05:94: ca:55:e9:51:39:86:64:b6:9d:48:cb:ab:8f:12:8e: 7d:5a:4c:c8:db:c3:06:35:31:7a:0a:0c:00:a2:c1: dd:23:71:e7:82:3b:fb:d6:fa:3e:7e:5f:56:36:eb: 7f:d0:6f:a2:b5:67:b6:9e:97:99:c7:83:3d:a3:b5: 32:4c:3d:e4:9c:95:6b:6a:ff:d9:11:76:cf:bd:74: fe:26:dd:f5:0f:e6:13:d4:bc:e9:49:b7:f1:04:f5: 84:d8:66:6c:07:5b:19:52:e3:5d:4a:ab:c9:d2:2c: 02:5b:d7:59:3d:08:bc:4d:28:87:9f:2d:31:2f:f7: bb:34:b2:8f:33:27:05:91:8e:74:0a:73:c3:be:3f: dc:76:46:50:4d:fb:9f:3b:80:6a:ac:95:49:c8:09: be:75:1f:b5:5d:0e:42:ad:b9:ad:04:96:08:77:50: 9b:57:33:3b:73:c1:7b:be:c1:ef:2f:41:55:6f:50: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4E:27:94:6D:9D:D3:0D:D0:67:D7:F7:5D:67:01:AF:7C:9D:4C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9e:ac:e3:70:c2:40:ed:da:0b:c3:0d:e0:a6:19:88:40:39: 36:a1:68:3f:a0:ce:04:61:fb:42:54:c2:4a:de:7a:e9:76:33: 7c:c6:39:d7:93:21:fb:27:bd:2e:82:79:39:64:4c:98:95:f8: 08:1e:3d:8a:98:ff:82:c5:07:e1:99:87:99:b9:ed:9b:2f:47: c9:d9:2e:b4:62:50:c5:9b:2b:eb:23:61:9a:a1:0c:a3:cd:c8: 7b:5c:3a:fc:45:a3:ff:cc:88:cf:42:b6:f6:0b:da:2c:a9:61: 57:77:de:e1:c6:79:0f:fd:14:a7:ad:2a:35:a0:0a:10:e6:f2: 4a:68:8d:97:85:9a:d1:19:ea:75:d9:a6:a8:3c:7a:87:87:f8: 02:e0:02:b3:13:24:0f:46:b9:22:29:ab:3a:cd:a8:c3:b0:cd: aa:5f:75:94:dc:58:ad:ea:04:4d:cb:6d:f1:92:dc:9b:cb:28: 99:95:6b:49:5a:76:2e:0e:85:a4:d3:3c:b2:23:af:83:90:7e: 31:83:15:e8:6a:45:88:76:dc:8c:66:4e:1a:63:de:61:4e:f4: 0e:f1:f8:d7:11:19:3b:e4:dc:a6:40:a8:cf:9f:d2:0c:56:74: 81:38:dd:bd:5f:f0:24:4a:af:53:57:8c:6a:94:ce:82:f5:0f: 06:2e:ea:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXSwtSy+o9M/9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWQxZDYyNGMtYWIxOS00MjZiLTg3YzgtN2FiYzY1NmJjZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxF1bUv5uQx4iMdxnPS6NfALXooBLe80krHf dsZKruo2eaWrIaNzYVtadBb0X400Od62xZOiyyMiY9Ys8iW1gSLlfj1R7XZMBZTK VelROYZktp1Iy6uPEo59WkzI28MGNTF6CgwAosHdI3Hngjv71vo+fl9WNut/0G+i tWe2npeZx4M9o7UyTD3knJVrav/ZEXbPvXT+Jt31D+YT1LzpSbfxBPWE2GZsB1sZ UuNdSqvJ0iwCW9dZPQi8TSiHny0xL/e7NLKPMycFkY50CnPDvj/cdkZQTfufO4Bq rJVJyAm+dR+1XQ5CrbmtBJYId1CbVzM7c8F7vsHvL0FVb1CXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFOJ5RtndMN0GfX911nAa98nUxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzcwOWY4ZGUtYWYwYy0z ZWU5LTk2NWMtN2EzZTVlZDJiMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOerONwwkDt2gvDDeCmGYhAOTahaD+gzgRh+0JUwkreeul2M3zGOdeT IfsnvS6CeTlkTJiV+AgePYqY/4LFB+GZh5m57ZsvR8nZLrRiUMWbK+sjYZqhDKPN yHtcOvxFo//MiM9CtvYL2iypYVd33uHGeQ/9FKetKjWgChDm8kpojZeFmtEZ6nXZ pqg8eoeH+ALgArMTJA9GuSIpqzrNqMOwzapfdZTcWK3qBE3LbfGS3JvLKJmVa0la di4OhaTTPLIjr4OQfjGDFehqRYh23IxmThpj3mFO9A7x+NcRGTvk3KZAqM+f0gxW dIE43b1f8CRKr1NXjGqUzoL1DwYu6jg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:10 2025 by rpki-client