$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa File: 810d6f61-ce29-38e9-85b1-7c663e562d69.roa (raw, json) Hash identifier: 3ALFaOXwma4DMXhWocjyQa+kSgiMpqR1l3Rtks9r25s= Subject key identifier: 32:AA:AD:86:0D:D7:0E:13:72:CD:9A:58:9B:95:71:6D:5B:6A:47:AF Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584A6825FC41F246914B6E096F80 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 800 IP address blocks: 23.160.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:fc:41:f2:46:91:4b:6e:09:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2d1ae898-e071-4a79-bd07-d0dd8fbe226d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:e5:02:93:d4:35:cd:d0:4b:cc:7a:49:a2: cc:40:34:8c:08:78:71:92:46:7e:0f:f3:a5:47:4f: c7:7a:56:32:d4:50:be:0b:1e:b7:59:66:cd:0a:24: e4:40:1b:bb:16:db:ba:97:84:b7:e8:77:2e:a0:f8: 84:70:dd:a4:04:72:d1:f2:ef:71:84:f4:75:f6:94: 28:87:55:5c:f5:9b:78:d0:25:19:c7:dc:b7:7e:fa: e5:37:44:1f:7c:a8:a1:d8:80:72:67:68:c6:b4:bf: 60:ee:66:4c:44:d8:be:2b:b3:b4:99:24:9b:39:c4: 96:51:f6:e2:6c:15:cd:58:d8:23:7a:36:c2:cf:20: 5a:13:c4:61:5e:0a:f4:6f:93:0f:cc:60:7b:29:66: b7:66:dd:00:41:d8:28:0c:62:43:ef:8e:48:3a:4b: f9:85:dc:0b:23:2b:88:50:33:73:55:cd:97:48:d4: 9b:ea:30:07:a8:d9:30:19:90:d6:07:c0:4d:cd:30: e0:e5:a9:ba:42:47:67:59:f3:2f:6e:30:e6:e0:68: 3b:92:3f:7c:38:9a:62:bb:a1:27:9d:58:50:1c:36: 08:b8:86:22:f2:4b:9e:b2:86:1f:d1:7d:87:91:75: 2e:8c:57:fc:b0:e2:7a:52:bd:d6:02:b5:56:0d:53: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:AD:86:0D:D7:0E:13:72:CD:9A:58:9B:95:71:6D:5B:6A:47:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/810d6f61-ce29-38e9-85b1-7c663e562d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 23.160.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9d:0f:43:7c:78:74:27:2d:dd:bf:67:be:9f:92:ae:ef:5d: 90:8b:d6:5f:1e:06:01:b9:dd:0e:b8:92:c2:4d:ab:10:d0:13: 30:68:df:e5:d6:1c:5b:73:07:5e:86:0b:25:c4:64:2e:41:06: d4:6c:8b:72:69:3c:bf:2c:50:67:bd:9e:15:60:03:a8:ee:9a: da:ee:97:ba:79:c7:00:f3:41:8f:6f:c0:ac:5a:e7:bf:7c:f5: 40:7b:b7:69:55:ad:82:e0:a7:a9:23:26:00:db:22:19:85:74: 9a:b2:9f:86:32:83:bd:64:47:fc:ff:22:3e:a7:3e:44:0e:27: 90:3d:d7:fc:02:a6:31:a2:87:78:5c:cc:0a:f7:0d:88:6a:bd: ba:d0:e8:92:ec:3a:9b:a4:0b:37:e6:41:6f:75:27:01:6d:73: 7d:fe:d8:d4:6b:1a:98:9d:ff:31:f7:d3:2b:b0:dc:a2:76:2f: 29:ed:e3:0a:cc:19:6c:6f:07:55:9a:5e:49:ee:ab:31:63:fc: cd:95:ee:93:e8:f5:91:b9:c8:f7:81:f1:f1:20:b9:55:ef:d3: fc:1c:63:57:6c:e5:bf:2b:2f:0f:36:a6:d6:5f:19:05:8b:cd: f0:cc:bb:ca:7c:69:ed:9a:74:33:c3:9e:70:a9:9f:60:9c:cf: 0b:5b:20:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJfxB8kaRS24Jb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmQxYWU4OTgtZTA3MS00YTc5LWJkMDctZDBkZDhmYmUyMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbHlApPUNc3QS8x6SaLMQDSMCHhxkkZ+D/Ol R0/HelYy1FC+Cx63WWbNCiTkQBu7Ftu6l4S36HcuoPiEcN2kBHLR8u9xhPR19pQo h1Vc9Zt40CUZx9y3fvrlN0QffKih2IByZ2jGtL9g7mZMRNi+K7O0mSSbOcSWUfbi bBXNWNgjejbCzyBaE8RhXgr0b5MPzGB7KWa3Zt0AQdgoDGJD745IOkv5hdwLIyuI UDNzVc2XSNSb6jAHqNkwGZDWB8BNzTDg5am6QkdnWfMvbjDm4Gg7kj98OJpiu6En nVhQHDYIuIYi8kuesoYf0X2HkXUujFf8sOJ6Ur3WArVWDVNqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKqrYYN1w4Tcs2aWJuVcW1bakevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvODEwZDZmNjEtY2UyOS0z OGU5LTg1YjEtN2M2NjNlNTYyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqdD0N8eHQnLd2/Z76fkq7vXZCL1l8eBgG53Q64ksJNqxDQEzBo3+XW HFtzB16GCyXEZC5BBtRsi3JpPL8sUGe9nhVgA6jumtrul7p5xwDzQY9vwKxa5798 9UB7t2lVrYLgp6kjJgDbIhmFdJqyn4Yyg71kR/z/Ij6nPkQOJ5A91/wCpjGih3hc zAr3DYhqvbrQ6JLsOpukCzfmQW91JwFtc33+2NRrGpid/zH30yuw3KJ2Lynt4wrM GWxvB1WaXknuqzFj/M2V7pPo9ZG5yPeB8fEguVXv0/wcY1ds5b8rLw82ptZfGQWL zfDMu8p8ae2adDPDnnCpn2CczwtbIME= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:14 2025 by rpki-client