$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa File: 591d919e-d164-336f-b379-4a31755502f0.roa (raw, json) Hash identifier: Y59i1mySrDE/kLlLT2fXB4RX0X/QJu84OgfjLvotEgU= Subject key identifier: F8:E3:00:E0:A4:F7:B9:32:67:15:29:62:FB:B9:38:34:5F:BC:C1:30 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AFEE69C5DA24C2DBB440E1F80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 11178 IP address blocks: 8.20.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9c:5d:a2:4c:2d:bb:44:0e:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=8ab09cb9-e5ad-40fa-9ea2-fbc6423467d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:66:63:1b:91:96:b4:57:63:dd:3d:5c:b0: 4f:9f:5e:31:23:10:f7:97:ed:32:b5:3d:cb:5f:8f: 13:f2:27:ad:b9:26:24:6d:fb:97:f9:30:61:80:1a: 6a:ff:b1:7f:91:48:24:20:f1:74:0b:0d:72:5d:64: aa:c5:60:d8:ef:30:a7:36:67:61:54:cc:93:af:07: dd:54:ca:f1:c6:47:75:f7:ee:fa:b9:78:ae:a4:d9: 42:a7:b5:63:ae:b4:96:4d:61:95:f6:77:08:b9:e5: 27:72:dd:e5:3f:cd:d7:3c:f7:73:d9:6c:77:01:22: 0d:91:a7:97:8a:71:51:1f:11:16:da:77:b2:42:4a: f1:75:cd:a9:46:e2:f8:0c:53:b8:3f:7f:e1:6e:f0: ae:0d:c3:72:1f:d2:d0:67:8f:df:2c:40:7a:42:92: fb:7f:c2:62:6b:59:65:a0:a1:99:97:a6:c6:b1:83: 92:a5:62:dd:3c:2f:00:64:41:03:11:1f:90:ed:2d: 79:ca:13:3a:04:7d:9e:52:0f:12:63:0c:5c:9d:8d: 99:54:e9:d0:3e:a7:32:57:dd:56:ae:78:05:3c:e5: d0:11:47:c8:93:ab:71:a5:f7:ca:b1:18:cc:c8:56: 93:f4:bc:0d:af:cf:e2:dd:64:8a:96:41:52:49:55: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:00:E0:A4:F7:B9:32:67:15:29:62:FB:B9:38:34:5F:BC:C1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:29:92:85:2d:80:4e:92:a6:ca:00:ce:cd:43:18:65:c4:73: c8:cc:aa:dd:de:6d:c3:f0:69:34:1c:53:87:e2:d7:b8:cb:97: 8b:59:37:1a:93:78:3d:2d:a7:a5:cf:df:4e:22:36:9a:04:0a: 1e:2d:2b:0b:aa:bd:93:dc:50:ee:eb:8c:dc:08:66:84:32:13: e3:c6:a7:52:0e:cd:f5:b1:b4:ce:9f:da:aa:66:c9:8c:e2:a8: 4f:f5:de:5c:0b:a6:6f:82:6f:e0:d7:4b:06:9c:96:eb:cf:97: 35:36:a5:67:db:4d:05:eb:ef:29:82:bb:5c:29:2c:e1:9d:76: 3e:3e:8f:1b:3b:87:ec:f5:02:5a:85:bf:8a:f4:61:88:24:66: 6a:6b:32:83:dc:c8:1d:72:c3:4a:64:7d:67:0b:db:f9:8e:03: fb:2a:79:ea:23:c8:66:d1:55:29:8d:1a:42:11:9f:be:7c:7e: ba:e9:9b:2e:9c:47:ff:c3:e6:d1:a5:d8:6a:74:94:f3:89:fa: 33:f6:ba:8a:14:83:99:24:2b:fb:ee:d9:53:a1:73:6d:91:9c: 70:f5:af:11:d1:61:14:75:d8:0f:36:46:e1:f7:fa:f0:4c:67: 2d:60:c1:65:13:01:16:d9:c4:5e:19:cf:8c:67:ad:70:31:89: 84:3d:9c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5pxdokwtu0QOH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OGFiMDljYjktZTVhZC00MGZhLTllYTItZmJjNjQyMzQ2N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySFmYxuRlrRXY909XLBPn14xIxD3l+0ytT3L X48T8ietuSYkbfuX+TBhgBpq/7F/kUgkIPF0Cw1yXWSqxWDY7zCnNmdhVMyTrwfd VMrxxkd19+76uXiupNlCp7VjrrSWTWGV9ncIueUnct3lP83XPPdz2Wx3ASINkaeX inFRHxEW2neyQkrxdc2pRuL4DFO4P3/hbvCuDcNyH9LQZ4/fLEB6QpL7f8Jia1ll oKGZl6bGsYOSpWLdPC8AZEEDER+Q7S15yhM6BH2eUg8SYwxcnY2ZVOnQPqcyV91W rngFPOXQEUfIk6txpffKsRjMyFaT9LwNr8/i3WSKlkFSSVXIzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjjAOCk97kyZxUpYvu5ODRfvMEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTkxZDkxOWUtZDE2NC0z MzZmLWIzNzktNGEzMTc1NTUwMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBSzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0pkoUtgE6SpsoAzs1DGGXEc8jMqt3ebcPwaTQcU4fi17jLl4tZNxqT eD0tp6XP304iNpoECh4tKwuqvZPcUO7rjNwIZoQyE+PGp1IOzfWxtM6f2qpmyYzi qE/13lwLpm+Cb+DXSwacluvPlzU2pWfbTQXr7ymCu1wpLOGddj4+jxs7h+z1AlqF v4r0YYgkZmprMoPcyB1yw0pkfWcL2/mOA/sqeeojyGbRVSmNGkIRn758frrpmy6c R//D5tGl2Gp0lPOJ+jP2uooUg5kkK/vu2VOhc22RnHD1rxHRYRR12A82RuH3+vBM Zy1gwWUTARbZxF4Zz4xnrXAxiYQ9nAM= -----END CERTIFICATE-----Generated at Thu Sep 18 01:37:31 2025 by rpki-client