$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa File: 8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa (raw, json) Hash identifier: i1g5DRVsTp3+6FyakuPtAJqyttKi1MGF4eZyyP8miXQ= Subject key identifier: 8F:87:56:8B:85:3A:BA:FB:E8:AE:F9:DB:22:22:68:F5:0C:62:33:ED Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B004BE23AC6BD78582634E400 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 23.234.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e2:3a:c6:bd:78:58:26:34:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=02c406be-db35-4f46-ad33-b33e05a80bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ee:af:7f:7a:ff:84:16:d8:af:a4:32:39:b2: a0:4f:da:73:4f:97:6e:08:4b:3a:af:92:44:96:cd: 5f:b5:1c:70:51:65:b0:04:08:ac:61:eb:39:ec:8a: 8a:e0:c7:32:43:72:94:59:e0:12:11:99:b5:d5:85: fe:bd:3d:ac:fa:02:3b:21:24:d0:09:df:97:84:f6: ff:78:33:7e:56:e3:53:46:6e:be:0a:f7:00:15:7f: 44:10:1e:c6:29:2b:c8:9f:f2:ed:f5:16:c9:49:dd: 9d:f7:ff:69:a5:ef:8e:61:23:74:1a:b9:45:b0:f2: bf:85:36:e8:55:25:95:13:e3:f2:3e:9f:ff:f6:43: c6:73:50:a5:19:fd:77:d5:cf:16:3f:4d:bf:c6:8c: 37:c3:3f:c0:30:35:89:70:17:c8:c4:0f:28:d1:5c: fc:b3:b5:d1:6f:c5:2d:16:7d:ba:16:5a:68:9f:33: 30:d8:fb:af:46:9c:cf:d1:b5:68:88:cc:2b:b5:b9: 7e:1b:aa:10:ec:38:22:11:fd:25:5b:e6:25:d5:b9: 38:75:7c:91:04:43:93:e4:2a:8c:af:2a:87:db:f1: 40:b1:9a:6c:ee:3b:e4:56:ef:18:86:69:95:07:0b: f6:e4:42:6f:2b:76:90:6d:60:c7:d1:3f:cc:62:27: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:87:56:8B:85:3A:BA:FB:E8:AE:F9:DB:22:22:68:F5:0C:62:33:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:88:e3:3a:98:34:fa:65:49:29:f2:3e:b6:fd:9b:d6:f6:70: 5e:70:3e:b6:1a:8e:0e:0d:d0:d5:0e:bd:e7:ed:58:9d:5d:fe: 7f:07:bd:4a:25:3b:38:ab:03:a3:77:84:89:06:27:f6:00:6f: 28:30:aa:d6:61:07:59:09:13:aa:22:58:d3:71:48:7b:2c:2b: 79:3f:b9:ea:81:f1:84:a6:71:c4:9f:6b:95:e2:b7:57:ed:d4: ca:1d:05:e6:33:de:5d:cd:40:37:27:52:08:e0:b5:f0:e7:0c: 81:06:b3:41:4f:4e:30:ac:90:f1:dd:92:e0:47:f9:56:67:25: b8:84:d9:da:a4:d3:b7:55:31:34:ea:08:66:36:3e:b4:aa:04: 4a:9f:85:bf:11:95:c7:fa:62:62:ff:1f:01:e3:8c:47:2d:22: f0:ff:d8:10:c9:40:80:14:7f:5a:f4:10:20:49:60:f1:23:04: 2a:f3:ed:1b:e7:ee:71:1a:3c:44:ab:e3:cf:f1:78:47:de:e3: 9a:46:53:c3:a5:e2:65:6a:6f:9e:67:77:0d:11:4c:c2:dd:9e: f6:f4:59:79:fa:3a:a0:49:7e:64:11:11:23:67:24:ca:d7:fe: 55:c1:22:1d:b6:b1:36:9d:ee:ca:9d:4d:fd:21:99:ff:75:98: 6b:05:b5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+I6xr14WCY05AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDJjNDA2YmUtZGIzNS00ZjQ2LWFkMzMtYjMzZTA1YTgwYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+6vf3r/hBbYr6QyObKgT9pzT5duCEs6r5JE ls1ftRxwUWWwBAisYes57IqK4McyQ3KUWeASEZm11YX+vT2s+gI7ISTQCd+XhPb/ eDN+VuNTRm6+CvcAFX9EEB7GKSvIn/Lt9RbJSd2d9/9ppe+OYSN0GrlFsPK/hTbo VSWVE+PyPp//9kPGc1ClGf131c8WP02/xow3wz/AMDWJcBfIxA8o0Vz8s7XRb8Ut Fn26FlponzMw2PuvRpzP0bVoiMwrtbl+G6oQ7DgiEf0lW+Yl1bk4dXyRBEOT5CqM ryqH2/FAsZps7jvkVu8YhmmVBwv25EJvK3aQbWDH0T/MYifJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+HVouFOrr76K752yIiaPUMYjPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvOGM3YTE4NzItMzFhMi0z YWRlLWJjODEtNjUzMWYyY2Y0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOI4zqYNPplSSnyPrb9m9b2cF5wPrYajg4N0NUOveftWJ1d/n8HvUol OzirA6N3hIkGJ/YAbygwqtZhB1kJE6oiWNNxSHssK3k/ueqB8YSmccSfa5Xit1ft 1ModBeYz3l3NQDcnUgjgtfDnDIEGs0FPTjCskPHdkuBH+VZnJbiE2dqk07dVMTTq CGY2PrSqBEqfhb8Rlcf6YmL/HwHjjEctIvD/2BDJQIAUf1r0ECBJYPEjBCrz7Rvn 7nEaPESr48/xeEfe45pGU8Ol4mVqb55ndw0RTMLdnvb0WXn6OqBJfmQRESNnJMrX /lXBIh22sTad7sqdTf0hmf91mGsFtYA= -----END CERTIFICATE-----Generated at Sat Sep 6 16:29:05 2025 by rpki-client