$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa File: a4c4c21b-f7d9-308d-86f5-145f67870890.roa (raw, json) Hash identifier: qAYaf2eCR5SdCBNyLt41bd6mvslxbnXM/saO/DN1W6s= Subject key identifier: 99:98:44:32:8B:ED:24:5B:71:3E:A7:FC:F2:A1:53:5C:AD:F3:6B:4F Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584A7D15FAC172D3AC9BA7BB6E80 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 54702 IP address blocks: 23.182.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fa:c1:72:d3:ac:9b:a7:bb:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=574ec107-4cb9-4f17-84c3-b5f7a1e87706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:e7:0a:04:1a:3e:7b:f7:7c:8d:79:cf:63: aa:56:4b:f4:bf:37:f6:d5:e3:46:8c:13:82:4a:bc: 36:db:84:a7:bf:d1:53:6f:d7:c7:99:36:e5:49:56: 3b:2d:03:92:5c:a8:1e:81:e4:55:94:49:61:e0:51: 43:4f:25:6b:bc:75:1d:a9:40:08:da:0f:f3:10:3f: e9:30:f9:e9:6b:f8:7b:9d:30:46:0d:74:bf:69:3d: 4f:62:9b:5f:34:05:fc:26:b3:9f:c9:46:81:ae:23: 9e:7a:eb:80:b7:13:df:fe:1d:1e:1c:70:a3:b3:5a: e2:2b:36:28:3a:20:3d:1f:b8:d7:c7:59:4d:34:dd: e9:2f:14:98:94:22:64:f0:49:64:f8:69:62:98:df: b8:c0:33:5f:30:ec:94:ad:c2:a7:4d:7e:69:e5:cf: ed:d9:db:6e:89:62:30:01:7e:55:64:f7:38:8c:19: bc:44:03:f9:24:2a:4d:f7:09:02:bf:24:a3:0d:5f: 5a:53:7e:fe:35:e5:c2:e8:9c:5d:7d:4d:88:5d:9d: e4:e6:96:39:bb:a9:ff:6d:3e:22:87:8d:76:0c:af: 36:04:7c:16:fd:d1:1f:3e:5b:4c:67:96:b2:46:f9: 88:67:eb:51:a4:9d:95:e8:ed:39:73:c8:76:72:33: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:98:44:32:8B:ED:24:5B:71:3E:A7:FC:F2:A1:53:5C:AD:F3:6B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4c4c21b-f7d9-308d-86f5-145f67870890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 23.182.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:8c:8b:94:e9:e6:fc:0a:9f:dd:ac:b0:47:a3:be:ac:0a: f9:ff:37:74:f8:e0:dc:cd:a0:ce:be:64:21:4e:98:45:1e:ed: ad:12:c2:4f:0b:eb:bf:6a:f8:00:c4:f1:6a:c3:c3:48:3a:35: 09:eb:c1:ff:91:42:07:2c:0d:f8:aa:bb:99:a3:fd:02:8d:6c: d1:49:3a:d4:1d:2d:9a:b6:c8:42:72:1e:ba:36:17:58:8c:02: df:05:31:08:ba:da:a8:0f:73:f9:92:88:c5:42:4b:bb:94:42: 8e:0c:bf:8c:62:18:c3:a2:d6:ac:64:17:6c:6a:9c:4b:ab:cb: f9:c6:22:f2:ba:5b:7f:52:c8:75:dc:6b:74:b7:40:89:8c:34: 2c:38:1e:db:31:76:a2:f4:02:45:25:82:9a:95:5c:7f:b4:f4: 3a:23:7c:64:23:e5:13:c1:4c:60:2f:9c:8f:8c:02:9b:3d:ae: 1e:e7:b1:fc:47:b8:15:8e:81:59:d3:db:02:8b:a3:92:4e:56: 3b:ed:b4:79:f0:7f:c0:fe:d8:2d:14:9a:36:9d:f1:bb:ee:c8: 1f:84:fd:67:fd:57:6c:48:0e:16:e8:c1:34:f7:e3:c8:92:c0: ce:02:1a:c8:c7:bc:a9:97:a1:12:8f:a8:e2:4c:c5:01:fa:80: 8a:08:67:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfrBctOsm6e7boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NTc0ZWMxMDctNGNiOS00ZjE3LTg0YzMtYjVmN2ExZTg3NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0DnCgQaPnv3fI15z2OqVkv0vzf21eNGjBOC Srw224Snv9FTb9fHmTblSVY7LQOSXKgegeRVlElh4FFDTyVrvHUdqUAI2g/zED/p MPnpa/h7nTBGDXS/aT1PYptfNAX8JrOfyUaBriOeeuuAtxPf/h0eHHCjs1riKzYo OiA9H7jXx1lNNN3pLxSYlCJk8Elk+GlimN+4wDNfMOyUrcKnTX5p5c/t2dtuiWIw AX5VZPc4jBm8RAP5JCpN9wkCvySjDV9aU37+NeXC6JxdfU2IXZ3k5pY5u6n/bT4i h412DK82BHwW/dEfPltMZ5ayRvmIZ+tRpJ2V6O05c8h2cjNL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmYRDKL7SRbcT6n/PKhU1yt82tPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvYTRjNGMyMWItZjdkOS0z MDhkLTg2ZjUtMTQ1ZjY3ODcwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhjIuU6eb8Cp/drLBHo76sCvn/N3T44NzNoM6+ZCFOmEUe7a0Swk8L 679q+ADE8WrDw0g6NQnrwf+RQgcsDfiqu5mj/QKNbNFJOtQdLZq2yEJyHro2F1iM At8FMQi62qgPc/mSiMVCS7uUQo4Mv4xiGMOi1qxkF2xqnEury/nGIvK6W39SyHXc a3S3QImMNCw4HtsxdqL0AkUlgpqVXH+09DojfGQj5RPBTGAvnI+MAps9rh7nsfxH uBWOgVnT2wKLo5JOVjvttHnwf8D+2C0Umjad8bvuyB+E/Wf9V2xIDhbowTT348iS wM4CGsjHvKmXoRKPqOJMxQH6gIoIZ50= -----END CERTIFICATE-----Generated at Mon Jul 21 14:41:12 2025 by rpki-client