$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/37af489c-0179-3911-ac20-55fd87eb3670.roa File: 37af489c-0179-3911-ac20-55fd87eb3670.roa (raw, json) Hash identifier: k/6lR9zg3P1au+TXU9z++LaJN096rma7Rb07NQ/iDNo= Subject key identifier: F9:FD:F9:1D:6C:5B:34:50:25:99:2E:85:2F:A9:D0:28:C9:95:3F:E7 Certificate issuer: /CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Certificate serial: 010D0C9F4328584A89D94438EE4F40FFB34E4D40 Authority key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/37af489c-0179-3911-ac20-55fd87eb3670.roa Signing time: Wed 16 Jul 2025 14:44:16 +0000 ROA not before: Wed 16 Jul 2025 14:44:16 +0000 ROA not after: Tue 14 Oct 2025 14:44:16 +0000 asID: 396856 IP address blocks: 23.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:d9:44:38:ee:4f:40:ff:b3:4e:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Validity Not Before: Jul 16 14:44:16 2025 GMT Not After : Oct 14 14:44:16 2025 GMT Subject: CN=2bef3e7e-3237-4265-b929-ba7bd1110fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:aa:6c:4b:2c:9f:7c:db:ea:89:0f:62:53:56: ed:b1:3a:da:22:aa:2a:1d:49:c2:fe:f2:46:b0:8f: 01:3e:16:9f:da:c7:9c:b3:84:93:87:a9:19:55:0c: ce:64:11:9c:83:2c:af:a8:18:b4:f9:a0:e4:f0:32: 6d:a8:55:e1:6b:c2:04:fd:2a:41:83:3e:03:d9:d1: c5:30:ea:b4:d6:55:80:72:58:2f:2a:0e:64:c1:d8: 14:1f:56:ff:b0:34:7a:99:b5:b7:83:f0:15:4f:31: 17:a5:53:9f:f5:f0:6b:39:a6:90:67:ed:ed:c0:22: f4:84:10:33:72:ca:72:87:e8:b8:93:21:8b:44:8e: 2d:a4:43:f8:5e:38:38:fd:42:d1:6f:8d:6c:22:81: 55:cd:80:d6:03:2f:f8:49:95:f4:fc:28:49:c7:6a: 06:2a:0d:d9:7d:89:0d:43:dc:67:8c:1f:15:9c:2f: 67:44:54:4f:54:4a:64:c2:22:4b:63:48:00:50:5f: 4c:f0:a7:44:ba:5e:20:9f:47:4a:8a:79:23:93:7c: 0e:25:cc:ee:85:09:05:09:1b:5d:17:f5:f9:90:78: 0e:0f:d3:d3:de:7f:fd:a1:7d:7b:5d:05:ed:68:c1: 1f:7c:60:9d:d6:4d:e5:b9:46:3c:86:cf:9c:8c:83: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:F9:1D:6C:5B:34:50:25:99:2E:85:2F:A9:D0:28:C9:95:3F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/37af489c-0179-3911-ac20-55fd87eb3670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl X509v3 Authority Key Identifier: keyid:A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:89:9f:bf:5f:a3:21:73:bc:40:6c:cf:41:bb:99:6d:38:65: b7:41:aa:8a:ae:e4:a3:6c:d5:76:fd:65:45:90:61:75:47:0f: f8:8e:72:36:65:fd:e5:2b:39:0c:5f:1a:ec:d8:00:59:25:ec: e0:86:7a:2d:74:47:26:60:e5:6d:b2:4e:95:c8:d1:bb:3b:05: c8:21:4e:b3:2e:81:e6:9e:6a:b1:76:b8:f9:2b:ea:4f:68:f5: d7:b9:b7:ed:b9:aa:d1:82:26:37:d2:cc:9d:d6:fc:95:99:14: 74:a7:76:f0:f2:bc:1d:b7:64:06:b0:f8:c2:32:cc:61:dd:1d: 40:7f:1a:12:45:8f:70:d0:6c:e6:f8:7f:a5:7e:f1:ad:88:59: af:33:84:3c:87:e2:9f:cd:24:dc:a4:4f:3a:b1:37:d1:f0:c8: 31:66:b1:9f:dc:43:a3:3f:6c:dd:e1:82:4e:4b:29:e0:98:71: 9f:b8:b4:90:fc:00:8f:f0:39:79:a4:72:d1:21:27:74:30:e3: 0f:ad:f7:9c:c8:e7:9b:7e:15:a7:9b:b2:d0:92:b6:3a:6e:39: 00:ea:48:8e:f9:62:7e:7d:2a:2b:71:86:5e:8f:65:4e:cc:6b: cd:89:d2:bf:ff:64:c1:70:9d:92:a3:70:1f:78:be:b3:17:01: ca:8c:99:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJ2UQ47k9A/7NOTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5 ZmI3MB4XDTI1MDcxNjE0NDQxNloXDTI1MTAxNDE0NDQxNlowLzEtMCsGA1UEAxMk MmJlZjNlN2UtMzIzNy00MjY1LWI5MjktYmE3YmQxMTEwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKpsSyyffNvqiQ9iU1btsTraIqoqHUnC/vJG sI8BPhaf2secs4STh6kZVQzOZBGcgyyvqBi0+aDk8DJtqFXha8IE/SpBgz4D2dHF MOq01lWAclgvKg5kwdgUH1b/sDR6mbW3g/AVTzEXpVOf9fBrOaaQZ+3twCL0hBAz cspyh+i4kyGLRI4tpEP4Xjg4/ULRb41sIoFVzYDWAy/4SZX0/ChJx2oGKg3ZfYkN Q9xnjB8VnC9nRFRPVEpkwiJLY0gAUF9M8KdEul4gn0dKinkjk3wOJczuhQkFCRtd F/X5kHgOD9PT3n/9oX17XQXtaMEffGCd1k3luUY8hs+cjINWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn9+R1sWzRQJZkuhS+p0CjJlT/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODBk ZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMzdhZjQ4OWMtMDE3OS0z OTExLWFjMjAtNTVmZDg3ZWIzNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgwZGZiZDQtMDk0NC00YzI0LWE2 NDUtYTIzOGQ5OTQ5ZmI3L2Q4MGRmYmQ0LTA5NDQtNGMyNC1hNjQ1LWEyMzhkOTk0 OWZiNy5jcmwwHwYDVR0jBBgwFoAUo997XFZGSaHviZ1tCZ96IV4ljtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4 ZDk5NDlmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF400MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKJn79foyFzvEBsz0G7mW04ZbdBqoqu5KNs1Xb9ZUWQYXVHD/iOcjZl /eUrOQxfGuzYAFkl7OCGei10RyZg5W2yTpXI0bs7BcghTrMugeaearF2uPkr6k9o 9de5t+25qtGCJjfSzJ3W/JWZFHSndvDyvB23ZAaw+MIyzGHdHUB/GhJFj3DQbOb4 f6V+8a2IWa8zhDyH4p/NJNykTzqxN9HwyDFmsZ/cQ6M/bN3hgk5LKeCYcZ+4tJD8 AI/wOXmkctEhJ3Qw4w+t95zI55t+FaebstCStjpuOQDqSI75Yn59Kitxhl6PZU7M a82J0r//ZMFwnZKjcB94vrMXAcqMmSc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:43 2025 by rpki-client