$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa File: 5db9e575-272d-3e10-953b-26aad7a2b5b8.roa (raw, json) Hash identifier: l+w6tj5aStwOkCqH9d7IrYyB6g15eHmo7BWgu9mM1n4= Subject key identifier: DB:AB:3B:1E:13:EC:DF:44:F6:92:D2:B1:BD:1F:1E:02:F5:3B:7A:17 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B13D6AE16D7C3F814DC6BE440 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 17639 IP address blocks: 8.45.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ae:16:d7:c3:f8:14:dc:6b:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e8cd26dd-f49e-4fa8-bb7e-d40f7bcfc07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:77:da:56:21:68:1f:0a:be:84:0a:70:b3: 68:32:c2:db:de:7e:92:6c:7b:f8:50:6b:4b:37:ba: c0:90:97:31:f3:43:27:12:19:1a:2f:8f:96:17:43: 73:65:5c:3b:4c:ba:26:47:2d:dd:b6:8c:19:d8:ee: e0:4f:08:20:50:7d:83:56:1e:7c:ec:71:52:50:f0: 87:c5:f9:57:c0:78:f1:ad:49:e5:24:34:99:ad:b1: 39:b3:ca:6a:9a:83:b3:d2:b4:68:37:15:0e:ce:95: 4b:97:bd:55:3d:f8:a5:e0:ba:5d:a0:00:8b:b6:af: d4:a4:63:d1:c9:6d:9f:b0:8a:f1:99:e7:21:dd:f1: af:96:8e:28:fb:86:5b:57:95:69:c5:4b:db:95:0b: 59:1d:4b:99:95:57:8e:94:13:08:7b:15:ad:d3:e1: b8:8f:f1:30:6a:8a:df:5e:b8:43:86:60:ec:1b:86: f7:b8:d9:a5:62:42:8d:90:44:d2:f5:60:ac:68:2a: 0e:2e:86:17:9d:2b:7d:ff:fb:27:46:4f:b3:7f:5c: 04:96:97:34:cd:4b:80:64:eb:f2:a4:14:35:4f:a3: ca:4e:72:88:eb:64:eb:69:ea:6c:aa:e3:3d:c5:85: b0:19:75:ce:f8:88:38:8e:14:7f:ca:c2:54:99:20: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:3B:1E:13:EC:DF:44:F6:92:D2:B1:BD:1F:1E:02:F5:3B:7A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5db9e575-272d-3e10-953b-26aad7a2b5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bd:83:d8:41:30:13:95:99:aa:ac:7d:b0:c7:00:3b:7d:90: 9e:a9:ef:e0:ac:45:98:05:f1:4a:50:45:5c:e1:39:6f:97:a3: ad:f0:41:f4:2d:c7:80:bf:bb:0a:6a:ac:90:ee:19:81:d7:ba: 2a:5c:e8:cf:a9:a0:08:75:0b:b7:f5:9f:e2:40:7e:14:57:68: 39:90:f8:0d:2e:63:66:93:92:f7:dd:8c:4a:12:87:86:45:30: b9:38:1b:b7:3c:d9:ab:e8:0d:cd:6a:b2:fb:f1:54:ea:ff:ef: db:9e:9b:74:c3:c2:ca:25:0b:36:f9:ac:13:23:b3:36:e1:d0: 38:11:b8:2b:7c:c7:1d:f8:7f:9b:2d:3b:84:ca:8e:95:4d:76: 67:58:a6:fa:36:f5:85:14:bf:52:19:0d:6b:4f:09:32:ef:99: e4:5b:a2:09:99:98:d7:4f:9b:4a:bc:74:69:97:ab:6e:3b:58: 8d:c2:3e:7a:8b:f9:b8:0b:b3:03:80:f9:a8:61:fa:09:4a:d3: e8:3b:25:25:0b:6e:c2:1b:31:55:df:65:21:0f:02:d2:15:6e: 72:c1:e5:8e:54:62:27:63:8d:78:8a:34:f8:d9:b5:cb:c6:da: 58:c4:85:cc:db:50:f3:59:2b:b4:97:f3:77:3e:24:01:bd:26: 3c:5a:a4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1q4W18P4FNxr5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZThjZDI2ZGQtZjQ5ZS00ZmE4LWJiN2UtZDQwZjdiY2ZjMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy132lYhaB8KvoQKcLNoMsLb3n6SbHv4UGtL N7rAkJcx80MnEhkaL4+WF0NzZVw7TLomRy3dtowZ2O7gTwggUH2DVh587HFSUPCH xflXwHjxrUnlJDSZrbE5s8pqmoOz0rRoNxUOzpVLl71VPfil4LpdoACLtq/UpGPR yW2fsIrxmech3fGvlo4o+4ZbV5VpxUvblQtZHUuZlVeOlBMIexWt0+G4j/Ewaorf XrhDhmDsG4b3uNmlYkKNkETS9WCsaCoOLoYXnSt9//snRk+zf1wElpc0zUuAZOvy pBQ1T6PKTnKI62TraepsquM9xYWwGXXO+Ig4jhR/ysJUmSD3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNurOx4T7N9E9pLSsb0fHgL1O3oXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWRiOWU1NzUtMjcyZC0z ZTEwLTk1M2ItMjZhYWQ3YTJiNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi9g9hBMBOVmaqsfbDHADt9kJ6p7+CsRZgF8UpQRVzhOW+Xo63wQfQt x4C/uwpqrJDuGYHXuipc6M+poAh1C7f1n+JAfhRXaDmQ+A0uY2aTkvfdjEoSh4ZF MLk4G7c82avoDc1qsvvxVOr/79uem3TDwsolCzb5rBMjszbh0DgRuCt8xx34f5st O4TKjpVNdmdYpvo29YUUv1IZDWtPCTLvmeRbogmZmNdPm0q8dGmXq247WI3CPnqL +bgLswOA+ahh+glK0+g7JSULbsIbMVXfZSEPAtIVbnLB5Y5UYidjjXiKNPjZtcvG 2ljEhczbUPNZK7SX83c+JAG9JjxapDc= -----END CERTIFICATE-----Generated at Sat Sep 6 10:05:50 2025 by rpki-client