$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa File: 863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa (raw, json) Hash identifier: GZM/DtmA0/lbXzq2fZH07V2rClTaRc4F7hmF6Dg6XqA= Subject key identifier: AB:02:0F:32:42:E0:D8:5A:14:E9:FE:13:CA:5A:BE:B3:A9:76:BF:7C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B047BF962B87A75BEA0FF1280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 394161 IP address blocks: 8.45.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:f9:62:b8:7a:75:be:a0:ff:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=7aa5943b-9028-4ee0-b577-7fb2c0de387e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:0e:5a:d2:2f:21:fe:9a:07:fc:08:1a:cb: 81:3a:33:69:15:8d:3e:4d:e0:35:df:d3:db:aa:c9: 3f:b8:6c:22:10:51:4e:12:37:85:62:7c:02:a3:e6: 45:9e:e1:b8:51:c3:34:ff:de:35:69:7a:fa:24:2d: a8:4c:3a:ca:21:1e:30:6d:c8:6a:8e:c3:4c:d2:1c: b9:74:65:4a:da:4e:f8:2c:80:ab:5f:c2:2a:bc:2d: 07:c0:61:31:be:d1:c5:93:63:81:ba:08:fd:a8:b3: 23:36:86:52:0b:49:93:f2:42:c0:a2:d2:41:62:0b: e5:e7:26:01:12:04:32:01:5f:4a:4d:b9:f2:eb:ab: 1c:f3:da:e4:d7:ec:0d:0c:e1:9d:23:f6:b9:ee:b4: 2f:87:06:34:3a:8f:a2:37:f4:ec:a6:ee:0e:f0:88: 9b:6e:06:11:ed:ee:ef:84:70:ef:1e:98:26:0f:4a: db:27:cf:9c:23:f5:32:58:32:35:a5:25:b0:5e:b5: b9:ac:96:c0:98:57:b4:8c:7d:76:80:10:36:31:a5: 08:bb:50:6c:3b:00:47:a3:21:64:0c:2b:39:4b:63: 03:16:96:de:7c:6f:66:97:24:c9:18:70:0a:59:ed: 1c:be:c7:d7:2e:f9:d4:bd:a2:81:7b:89:14:d0:8c: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:0F:32:42:E0:D8:5A:14:E9:FE:13:CA:5A:BE:B3:A9:76:BF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5a:9e:12:41:22:3e:7f:cb:51:f4:c6:46:46:a5:00:ab:b7: c3:77:64:f8:af:11:05:04:d5:84:5f:84:eb:3f:b4:44:7a:37: 3a:dd:52:0b:ea:52:01:ea:85:1c:13:84:14:8e:bd:b3:c0:10: fd:cb:43:7f:ae:c3:e3:34:82:3a:8f:38:c2:08:18:3f:bb:a0: 77:c1:1e:c5:0f:dd:dc:1b:ac:38:f2:86:f6:62:bd:22:ea:42: c4:87:d2:0a:88:0e:ab:8b:85:b4:ff:4b:f6:31:d5:43:2b:14: 48:38:51:77:19:29:ce:8f:19:62:38:77:8d:80:2b:4d:21:f3: 25:b3:26:92:52:b9:6a:f0:9a:1a:36:d0:a8:2e:6d:72:56:0c: 10:ee:be:ee:97:68:dd:2a:b9:a5:84:b8:84:ae:e3:1d:a7:a9: f1:b6:d5:83:3a:7a:6a:94:80:7e:19:bb:07:ed:70:63:40:cf: cf:56:13:16:27:cc:31:ba:7b:94:e8:74:b0:7b:fc:12:c6:34: 1a:48:b3:05:44:20:b8:79:41:67:7a:0a:af:12:06:41:5a:aa: 43:49:a0:22:db:7c:dc:a8:72:6c:cc:d6:7a:9f:04:bb:d3:06: 8e:4d:5f:fd:18:25:9e:71:29:36:1b:72:b0:0e:a6:71:7c:f4: da:ab:8d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/liuHp1vqD/EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2FhNTk0M2ItOTAyOC00ZWUwLWI1NzctN2ZiMmMwZGUzODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoQOWtIvIf6aB/wIGsuBOjNpFY0+TeA139Pb qsk/uGwiEFFOEjeFYnwCo+ZFnuG4UcM0/941aXr6JC2oTDrKIR4wbchqjsNM0hy5 dGVK2k74LICrX8IqvC0HwGExvtHFk2OBugj9qLMjNoZSC0mT8kLAotJBYgvl5yYB EgQyAV9KTbny66sc89rk1+wNDOGdI/a57rQvhwY0Oo+iN/Tspu4O8IibbgYR7e7v hHDvHpgmD0rbJ8+cI/UyWDI1pSWwXrW5rJbAmFe0jH12gBA2MaUIu1BsOwBHoyFk DCs5S2MDFpbefG9mlyTJGHAKWe0cvsfXLvnUvaKBe4kU0IwVswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsCDzJC4NhaFOn+E8pavrOpdr98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODYzZGNmZjItMzhhOC0z YzYzLWFhYTAtM2M2MTNkYjBlYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFanhJBIj5/y1H0xkZGpQCrt8N3ZPivEQUE1YRfhOs/tER6NzrdUgvq UgHqhRwThBSOvbPAEP3LQ3+uw+M0gjqPOMIIGD+7oHfBHsUP3dwbrDjyhvZivSLq QsSH0gqIDquLhbT/S/Yx1UMrFEg4UXcZKc6PGWI4d42AK00h8yWzJpJSuWrwmho2 0KgubXJWDBDuvu6XaN0quaWEuISu4x2nqfG21YM6emqUgH4ZuwftcGNAz89WExYn zDG6e5TodLB7/BLGNBpIswVEILh5QWd6Cq8SBkFaqkNJoCLbfNyocmzM1nqfBLvT Bo5NX/0YJZ5xKTYbcrAOpnF89NqrjQk= -----END CERTIFICATE-----Generated at Sun Sep 14 02:41:08 2025 by rpki-client