$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa File: 874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa (raw, json) Hash identifier: PlMNMstOMMNfT9zJoSALKJSf4U7vn9wGS8xtf59YULE= Subject key identifier: 7E:3E:DB:F1:7D:81:81:19:B4:8D:08:28:9A:8B:C4:FC:2C:55:27:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A84118EF689DD8EE25C449040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 23.251.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8e:f6:89:dd:8e:e2:5c:44:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bae1e746-97f6-410a-ad6a-175cc21f6a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:b3:95:d3:db:80:2e:ba:e8:6f:ca:ef:6f: de:97:44:6d:6b:62:36:21:47:97:58:0a:2a:a8:d2: 9c:df:59:51:9c:92:d1:a5:9d:e2:11:c3:63:9e:21: a2:a8:5f:ff:df:9b:72:92:19:aa:db:6d:84:62:3c: 7c:02:05:b5:eb:06:e5:bb:d5:0b:4a:fc:09:b3:80: ec:15:a5:bf:26:d5:2c:22:4d:c3:3a:a3:f3:0f:0b: ef:be:ec:e7:1f:1a:42:2e:9c:5f:a5:93:f6:2e:9c: 21:aa:be:91:e9:4e:52:40:dc:82:87:02:f8:97:41: 5a:6d:ff:d7:27:44:6b:dc:9e:92:73:55:50:9f:52: 8f:e1:6d:dd:c0:91:f9:5b:32:5d:ef:7a:5b:06:a6: 09:0f:79:03:5e:cc:58:38:78:ed:aa:93:9b:bd:ec: 58:99:b6:44:30:a1:29:fe:cd:65:0f:86:f4:71:4a: 93:c8:5a:36:c8:71:25:09:ca:20:36:fb:17:6a:84: 76:9e:33:e2:75:14:40:27:60:46:85:5e:c4:ab:5a: 0e:e0:5a:b7:45:f3:99:a2:dc:93:8e:cc:b7:ab:ab: 03:08:82:f1:11:02:5c:c6:06:c9:a3:00:f3:30:a8: cb:af:5b:6c:55:68:8a:b4:55:ca:28:2f:a2:eb:d1: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:DB:F1:7D:81:81:19:B4:8D:08:28:9A:8B:C4:FC:2C:55:27:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:27:ef:df:b2:ed:c0:25:ec:04:5e:4f:b4:6a:d8:8c:ae:56: e8:6c:78:22:a2:f8:d0:a7:33:9d:52:bd:97:d7:45:15:ad:a1: c5:d6:46:8b:fd:b6:26:7c:ed:1b:d0:a4:f1:8a:cc:10:b5:ef: 0d:69:7e:b3:ae:ce:c4:d8:b2:6d:96:39:bc:c4:ad:96:36:58: c7:40:2c:c1:85:5e:1c:69:c2:50:af:bb:84:f6:53:5b:cc:34: b1:27:98:da:b1:ac:fb:d5:d6:8c:c8:11:bf:69:c5:40:ec:ee: 21:4e:13:53:6e:42:26:31:41:9d:ff:9a:65:c3:17:f3:f1:aa: f6:0c:33:e1:1e:de:3e:ca:39:a1:84:a2:f4:8f:31:37:c7:57: 54:d6:a1:d1:d3:b6:8c:73:a7:8a:dd:fc:cd:47:c7:42:0d:b8: f8:a8:2a:50:b4:ec:72:64:7d:a6:66:bc:4d:ff:69:b7:0d:9c: 64:fc:ac:f7:28:df:52:af:9a:db:5a:9b:e5:c7:0e:e0:b6:84: 9b:85:0c:7d:42:01:0f:67:ed:51:e4:e9:a9:1b:9f:58:5b:4e: ba:14:47:17:28:9d:97:81:d3:05:80:00:1b:a7:88:ea:1d:e1: 9a:27:a3:87:cd:00:11:bd:a2:2c:13:cb:47:dc:c9:71:7c:32: 39:1e:31:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY72id2O4lxEkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmFlMWU3NDYtOTdmNi00MTBhLWFkNmEtMTc1Y2MyMWY2YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqzldPbgC666G/K72/el0Rta2I2IUeXWAoq qNKc31lRnJLRpZ3iEcNjniGiqF//35tykhmq222EYjx8AgW16wblu9ULSvwJs4Ds FaW/JtUsIk3DOqPzDwvvvuznHxpCLpxfpZP2Lpwhqr6R6U5SQNyChwL4l0Fabf/X J0Rr3J6Sc1VQn1KP4W3dwJH5WzJd73pbBqYJD3kDXsxYOHjtqpObvexYmbZEMKEp /s1lD4b0cUqTyFo2yHElCcogNvsXaoR2njPidRRAJ2BGhV7Eq1oO4Fq3RfOZotyT jsy3q6sDCILxEQJcxgbJowDzMKjLr1tsVWiKtFXKKC+i69FYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4+2/F9gYEZtI0IKJqLxPwsVSfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc0ZjVlNGUtZDQ1Mi0z ZGZlLThlOWItZGNmNjkyMDRhMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkn79+y7cAl7AReT7Rq2IyuVuhseCKi+NCnM51SvZfXRRWtocXWRov9 tiZ87RvQpPGKzBC17w1pfrOuzsTYsm2WObzErZY2WMdALMGFXhxpwlCvu4T2U1vM NLEnmNqxrPvV1ozIEb9pxUDs7iFOE1NuQiYxQZ3/mmXDF/PxqvYMM+Ee3j7KOaGE ovSPMTfHV1TWodHTtoxzp4rd/M1Hx0INuPioKlC07HJkfaZmvE3/abcNnGT8rPco 31Kvmttam+XHDuC2hJuFDH1CAQ9n7VHk6akbn1hbTroURxconZeB0wWAABuniOod 4Zono4fNABG9oiwTy0fcyXF8MjkeMec= -----END CERTIFICATE-----Generated at Tue Jul 22 04:26:40 2025 by rpki-client