$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa File: df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa (raw, json) Hash identifier: qM/V5NlJ5wb62LSuZZLJWsiNrL8pKyrgmT2qjDBkFus= Subject key identifier: 3C:FE:A1:7A:7C:DA:55:B7:08:1D:30:48:8D:88:27:8B:43:FD:97:52 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B004BE3DCBE44D021D1195E00 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 23.234.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e3:dc:be:44:d0:21:d1:19:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=af5e92f2-1454-4e4a-8465-0e296950a60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:83:5b:0b:8b:47:a2:c0:98:26:b9:49:0f: 53:a0:b7:5f:df:0e:d5:00:b9:50:c8:02:f4:a5:42: 47:b7:9c:25:1e:48:ef:d6:89:c4:84:23:ae:b3:3f: f0:b1:8b:4e:1c:e2:94:a4:5d:45:b1:37:03:c4:78: b4:8e:12:2d:fb:14:95:0a:26:97:16:a1:58:ac:53: ae:c5:f8:c8:70:16:e2:f7:58:79:4d:9f:6f:ad:47: 15:3c:b9:01:63:3a:f9:3a:e8:17:2f:45:78:d0:f7: 83:67:a7:1a:26:05:06:f8:46:a0:cf:9a:df:2a:4a: 0f:44:c8:2a:82:66:0c:8b:bd:fe:28:f1:56:66:5b: 41:38:26:e8:93:92:fd:77:22:e0:8f:2d:30:cc:51: 80:da:37:37:47:5a:7f:ac:78:32:8c:38:ec:db:fa: 98:9b:5e:91:aa:09:bc:bb:08:6d:8e:71:98:aa:97: eb:f0:87:92:78:7a:02:e3:2f:f8:48:60:cb:27:4f: 41:b5:04:95:37:62:fe:15:d2:23:81:48:2f:66:e4: 30:f1:1f:31:3c:c2:7b:66:80:2a:9b:3d:07:eb:27: 91:02:5b:a7:ce:eb:c6:f7:e3:da:a7:25:64:94:87: ca:b4:2a:f2:e0:0e:10:ac:20:0f:ae:61:c2:fe:e5: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:A1:7A:7C:DA:55:B7:08:1D:30:48:8D:88:27:8B:43:FD:97:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9c:7e:8f:a3:b1:a4:a9:fe:8b:b4:b2:fa:d9:02:33:7f:49: 21:5d:ed:d4:d3:b9:ab:6a:9d:53:17:06:81:64:f2:be:ad:5a: c6:7a:60:99:45:af:b3:c0:ac:2e:13:fa:78:39:ce:24:62:f5: c1:a8:ae:a1:b2:03:a2:8d:aa:d4:4f:d6:6c:a4:8b:c1:88:ed: 8e:ca:cd:e0:92:2a:5f:48:4c:55:d8:f5:42:68:2a:4f:ee:39: ca:65:08:52:21:a9:68:cb:1c:6e:ba:f7:3f:cb:02:d9:9a:a9: 80:66:aa:b8:ac:cb:03:02:91:e2:61:a6:f2:34:ef:9c:6e:db: b7:32:bb:97:0b:10:13:49:26:bb:7c:8c:2e:e0:22:80:b4:33: 56:26:6f:1b:99:22:bd:45:cc:41:73:57:ff:12:d1:1e:be:0b: 25:5f:e0:e8:44:94:9c:38:49:04:05:f0:fa:7e:e1:3f:df:46: ce:ed:05:9b:1a:73:1c:b2:28:14:40:c8:9f:e0:9b:d7:bd:ca: e7:32:0a:b2:4b:6c:f8:ca:a9:87:a6:99:e4:c3:a2:4d:8f:52: 32:9b:4b:f0:ec:2a:e7:7d:ad:dd:6e:f9:f7:f5:0f:d1:a6:9b: 91:2f:fe:15:51:8c:74:d7:79:63:43:92:d4:a5:e8:8e:b3:77: 6d:f1:f9:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+PcvkTQIdEZXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YWY1ZTkyZjItMTQ1NC00ZTRhLTg0NjUtMGUyOTY5NTBhNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0CDWwuLR6LAmCa5SQ9ToLdf3w7VALlQyAL0 pUJHt5wlHkjv1onEhCOusz/wsYtOHOKUpF1FsTcDxHi0jhIt+xSVCiaXFqFYrFOu xfjIcBbi91h5TZ9vrUcVPLkBYzr5OugXL0V40PeDZ6caJgUG+Eagz5rfKkoPRMgq gmYMi73+KPFWZltBOCbok5L9dyLgjy0wzFGA2jc3R1p/rHgyjDjs2/qYm16Rqgm8 uwhtjnGYqpfr8IeSeHoC4y/4SGDLJ09BtQSVN2L+FdIjgUgvZuQw8R8xPMJ7ZoAq mz0H6yeRAlunzuvG9+PapyVklIfKtCry4A4QrCAPrmHC/uXFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz+oXp82lW3CB0wSI2IJ4tD/ZdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZGY2ZTJjNDYtNzc3My0z MmNlLWE3YTgtMWNlYjBmOTk5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKScfo+jsaSp/ou0svrZAjN/SSFd7dTTuatqnVMXBoFk8r6tWsZ6YJlF r7PArC4T+ng5ziRi9cGorqGyA6KNqtRP1myki8GI7Y7KzeCSKl9ITFXY9UJoKk/u OcplCFIhqWjLHG669z/LAtmaqYBmqrisywMCkeJhpvI075xu27cyu5cLEBNJJrt8 jC7gIoC0M1YmbxuZIr1FzEFzV/8S0R6+CyVf4OhElJw4SQQF8Pp+4T/fRs7tBZsa cxyyKBRAyJ/gm9e9yucyCrJLbPjKqYemmeTDok2PUjKbS/DsKud9rd1u+ff1D9Gm m5Ev/hVRjHTXeWNDktSl6I6zd23x+eU= -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:11 2025 by rpki-client