$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/0fc62201-b608-3fe8-b581-a59a74b85c27.roa File: 0fc62201-b608-3fe8-b581-a59a74b85c27.roa (raw, json) Hash identifier: lOl8095PT56YcQA8NGSlnZVmVbm+mvQXFQTwF8gztrA= Subject key identifier: 73:CC:36:75:CE:45:DE:9D:DB:C6:5B:BE:06:0B:53:E2:5C:27:3B:37 Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F4328584AF7EBDE44DE29F3A7986CE0A0 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/0fc62201-b608-3fe8-b581-a59a74b85c27.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 203618 IP address blocks: 23.226.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:de:44:de:29:f3:a7:98:6c:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=fba21fe3-101e-4b53-88c7-5f13326efdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:94:d7:ea:8d:ae:03:2b:27:f7:c4:c8:30: 50:57:f3:32:04:e1:d6:79:07:00:12:ed:af:d1:9b: 3c:75:dc:15:3c:88:7b:96:0e:1a:59:40:08:b4:7f: 46:2e:dc:d5:cc:f3:de:50:c7:60:a1:e2:f7:79:21: 1c:af:54:3c:2a:9d:fc:f7:2b:73:19:63:1a:ab:5e: 54:a0:cf:05:84:c5:80:22:ce:d1:46:23:c6:f5:f7: 77:fd:d0:68:d7:54:02:0c:c9:3d:63:7a:80:12:79: 22:62:1e:32:fe:d8:e8:33:d3:56:30:9e:a5:84:9e: 01:7b:52:6c:fe:44:05:31:da:61:ce:9f:28:8a:33: 5c:56:5e:94:d5:32:e5:9a:7b:1a:dc:70:7a:c8:e2: c6:63:dd:24:6d:29:92:ae:60:36:d0:21:a4:b6:8c: bf:e0:1d:44:2a:ab:c2:0f:2b:05:a0:79:75:a1:b4: d3:dd:cc:09:35:60:6c:ad:a1:06:e1:65:f2:70:a0: 72:55:7a:82:a0:e7:22:b2:76:ab:21:cf:ba:01:5d: cc:11:fa:93:eb:fd:a3:b6:44:4e:1c:a0:0b:e0:14: 83:9b:2c:19:19:44:30:cc:93:94:26:62:26:ee:a4: bc:f7:be:d0:69:73:ab:2a:42:29:7d:30:21:3f:a3: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CC:36:75:CE:45:DE:9D:DB:C6:5B:BE:06:0B:53:E2:5C:27:3B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/0fc62201-b608-3fe8-b581-a59a74b85c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3b:de:fc:58:40:15:db:33:1e:b4:82:1a:7d:07:7e:ec:0c: 5e:3c:4e:7d:52:65:9a:28:f5:f2:42:9c:3f:07:0e:a7:86:1a: 51:6b:04:63:a7:80:80:1e:4f:c7:f8:02:c0:a3:52:33:c2:bc: 6b:f7:83:bd:a1:3f:1f:c3:8b:d9:6f:3a:d1:58:bc:6f:b7:96: 56:b0:44:52:58:df:13:04:5b:b0:9a:af:d0:49:29:7a:66:d9: ae:76:6d:39:99:d0:8a:8b:05:ba:d7:39:ef:7f:5c:9c:92:cb: 61:5c:d1:b9:30:5b:42:23:60:db:78:da:74:07:98:86:49:c4: 96:0f:49:75:dd:7e:20:67:2b:3f:f0:af:59:34:47:e1:14:7e: 5e:90:64:e5:b8:5f:c7:cf:90:6a:76:c2:f1:b5:d2:bb:2f:31: 5a:ec:c9:c5:1f:f0:55:5c:35:b0:0b:7f:eb:5b:0d:1d:3a:97: 73:58:18:46:dd:51:7f:49:1c:32:b0:40:4f:37:a8:be:fe:e5: 6c:d3:d0:e4:92:e3:23:b8:7a:bb:49:e8:5d:0e:61:ef:cb:b2: ce:f6:df:19:26:29:ce:9b:5f:d7:4f:2c:d6:32:b3:d0:e4:33: cb:fe:30:9a:72:0a:0b:8c:ad:e4:24:1e:a7:6f:43:ad:55:e2: d0:0a:dd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3695E3inzp5hs4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmJhMjFmZTMtMTAxZS00YjUzLTg4YzctNWYxMzMyNmVmZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpyU1+qNrgMrJ/fEyDBQV/MyBOHWeQcAEu2v 0Zs8ddwVPIh7lg4aWUAItH9GLtzVzPPeUMdgoeL3eSEcr1Q8Kp389ytzGWMaq15U oM8FhMWAIs7RRiPG9fd3/dBo11QCDMk9Y3qAEnkiYh4y/tjoM9NWMJ6lhJ4Be1Js /kQFMdphzp8oijNcVl6U1TLlmnsa3HB6yOLGY90kbSmSrmA20CGktoy/4B1EKqvC DysFoHl1obTT3cwJNWBsraEG4WXycKByVXqCoOcisnarIc+6AV3MEfqT6/2jtkRO HKAL4BSDmywZGUQwzJOUJmIm7qS8977QaXOrKkIpfTAhP6OZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPMNnXORd6d28ZbvgYLU+JcJzs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvMGZjNjIyMDEtYjYwOC0z ZmU4LWI1ODEtYTU5YTc0Yjg1YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+JwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA73vxYQBXbMx60ghp9B37sDF48Tn1SZZoo9fJCnD8HDqeGGlFrBGOn gIAeT8f4AsCjUjPCvGv3g72hPx/Di9lvOtFYvG+3llawRFJY3xMEW7Car9BJKXpm 2a52bTmZ0IqLBbrXOe9/XJySy2Fc0bkwW0IjYNt42nQHmIZJxJYPSXXdfiBnKz/w r1k0R+EUfl6QZOW4X8fPkGp2wvG10rsvMVrsycUf8FVcNbALf+tbDR06l3NYGEbd UX9JHDKwQE83qL7+5WzT0OSS4yO4ertJ6F0OYe/Lss723xkmKc6bX9dPLNYys9Dk M8v+MJpyCguMreQkHqdvQ61V4tAK3R0= -----END CERTIFICATE-----Generated at Tue Aug 26 09:11:35 2025 by rpki-client