$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa File: cb3b5a70-df8d-3963-a739-28f2b078237e.roa (raw, json) Hash identifier: +sXKtV9XsFghuecPPdmOffqHg82ABps+U3emBB8CglI= Subject key identifier: 69:9A:75:53:69:66:13:67:B2:6A:38:04:D3:D5:68:10:71:F5:0C:F5 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B004BE85B98AD80C042573FC0 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 23.234.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e8:5b:98:ad:80:c0:42:57:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=4dd673b6-ebcc-44eb-b347-9265b8ca8463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:29:af:42:b6:05:73:08:96:d3:3f:54:dd: 62:27:6f:95:ec:e6:80:1b:2f:a3:ef:20:f4:d4:7a: ea:fa:39:8d:47:43:1b:c3:1d:02:5a:f5:f3:55:c2: 59:8a:af:fd:1c:80:81:a5:98:73:eb:c1:6b:39:1b: 22:86:fd:1c:4f:42:12:85:7e:45:0a:c8:e7:32:fb: 10:7c:7b:db:f7:b2:e1:24:a6:ca:68:fe:c8:46:3b: 8c:d3:0c:e1:e4:8f:21:9a:a2:80:06:9f:96:50:ad: 84:21:e0:7a:36:aa:58:16:9c:7e:d3:45:92:f6:f4: 19:c6:f4:a6:f3:04:4b:f2:fd:03:7e:88:4b:6e:a6: bf:b7:6a:6c:6c:87:fd:e9:0e:a0:38:1e:34:63:08: 2c:bb:8c:40:30:20:96:03:5e:7f:b3:03:1a:60:2a: 90:17:56:59:a5:fc:26:71:52:81:ae:cd:21:18:00: 0c:0d:ad:04:f0:b4:42:61:dd:f9:49:46:01:68:99: 6c:69:4f:58:78:f3:91:94:29:91:93:85:2a:7c:34: 91:1b:62:f6:da:78:6f:f4:6e:54:d1:6f:95:3a:8c: b5:d6:b0:46:79:d3:86:79:3a:64:a4:72:2a:6d:e4: 1b:5b:02:0d:7c:a1:40:02:36:12:5f:a6:b3:cc:87: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9A:75:53:69:66:13:67:B2:6A:38:04:D3:D5:68:10:71:F5:0C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:47:db:7f:95:fa:02:56:54:76:ab:24:2d:49:79:78:2d:bd: 5e:af:e0:ce:02:8b:c7:20:a8:75:d3:b5:84:89:46:ec:59:8b: 8d:a9:bc:f8:9c:70:d6:40:df:86:bd:79:fc:99:6c:58:2d:ce: fc:34:dd:7e:98:02:12:59:59:cb:2e:ad:83:6d:e2:2f:aa:60: 44:d9:b7:88:b6:02:8c:23:20:92:39:d0:42:a3:3b:0f:72:bd: 05:71:6d:dd:06:04:ef:ca:dc:c2:b5:25:06:5c:97:31:da:2a: 99:41:e3:23:bf:9a:41:59:8f:be:b5:3c:85:ef:b6:0b:b9:0b: 7d:64:24:a1:2e:e8:e8:80:8d:6b:64:68:d9:2a:9b:73:44:23: 7e:ca:6c:fb:cd:bf:4f:af:7e:cb:dc:b2:49:01:62:08:b8:ad: a9:23:a8:b1:d2:a2:1a:23:e5:1b:69:62:92:fa:57:7f:46:ba: ed:eb:ff:85:2c:62:c6:42:de:a5:9e:2a:b7:37:83:09:d3:15: c7:55:9d:df:10:8d:08:11:b6:da:a8:0a:4b:a8:36:10:c4:2b: 56:d9:35:a6:4b:c8:8c:a8:57:5b:18:07:55:48:7c:90:1a:18: 5e:fe:94:cb:66:2d:1f:8a:42:19:e7:bf:81:a2:fd:49:db:4c: 3d:53:0b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+hbmK2AwEJXP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NGRkNjczYjYtZWJjYy00NGViLWIzNDctOTI2NWI4Y2E4NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR0pr0K2BXMIltM/VN1iJ2+V7OaAGy+j7yD0 1Hrq+jmNR0Mbwx0CWvXzVcJZiq/9HICBpZhz68FrORsihv0cT0IShX5FCsjnMvsQ fHvb97LhJKbKaP7IRjuM0wzh5I8hmqKABp+WUK2EIeB6NqpYFpx+00WS9vQZxvSm 8wRL8v0DfohLbqa/t2psbIf96Q6gOB40Ywgsu4xAMCCWA15/swMaYCqQF1ZZpfwm cVKBrs0hGAAMDa0E8LRCYd35SUYBaJlsaU9YePORlCmRk4UqfDSRG2L22nhv9G5U 0W+VOoy11rBGedOGeTpkpHIqbeQbWwINfKFAAjYSX6azzIeOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmadVNpZhNnsmo4BNPVaBBx9Qz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvY2IzYjVhNzAtZGY4ZC0z OTYzLWE3MzktMjhmMmIwNzgyMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9H23+V+gJWVHarJC1JeXgtvV6v4M4Ci8cgqHXTtYSJRuxZi42pvPic cNZA34a9efyZbFgtzvw03X6YAhJZWcsurYNt4i+qYETZt4i2AowjIJI50EKjOw9y vQVxbd0GBO/K3MK1JQZclzHaKplB4yO/mkFZj761PIXvtgu5C31kJKEu6OiAjWtk aNkqm3NEI37KbPvNv0+vfsvcskkBYgi4rakjqLHSohoj5RtpYpL6V39Guu3r/4Us YsZC3qWeKrc3gwnTFcdVnd8QjQgRttqoCkuoNhDEK1bZNaZLyIyoV1sYB1VIfJAa GF7+lMtmLR+KQhnnv4Gi/UnbTD1TC8E= -----END CERTIFICATE-----Generated at Sat Sep 6 16:25:55 2025 by rpki-client