$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa File: 41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json) Hash identifier: ULqP74opf2mBpFL0rboHSG1OMpAUyG4Zi4D3oxQzwdE= Subject key identifier: A3:8A:13:6C:1F:26:24:7D:09:7E:1B:10:AF:F7:99:9E:64:75:39:37 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584AE4610E3F028FF22D8CEC4DC0 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:3f:02:8f:f2:2d:8c:ec:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ed1df4f2-9764-40ea-8828-1dac43a1d8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:bb:6b:19:1e:bb:7f:9b:25:a1:f9:e1:6c: 7f:7c:53:66:58:4c:0a:8b:ec:e6:e0:de:be:d6:e9: 60:fc:86:86:64:0c:f0:0b:48:1e:08:6f:82:92:f0: df:a7:97:50:01:66:26:69:f7:97:8c:d0:36:69:99: e2:3b:67:64:0f:e1:d4:b1:ab:ba:8a:7d:fd:c6:60: 4d:47:54:35:45:f2:e0:2a:82:4e:d3:c4:e0:63:d2: 78:05:a9:f2:9d:ee:be:f3:d4:cc:14:4b:88:ee:37: 2f:38:84:f8:af:21:94:19:f1:e3:30:a8:ce:11:ec: 82:86:93:09:80:f0:31:e2:a2:09:06:18:9f:4d:9d: 60:a1:bd:b6:e8:3f:4f:6b:c5:df:47:ac:0e:9b:7c: 57:3a:a3:08:25:48:c4:3b:d3:08:73:75:91:21:07: 2f:89:b6:fb:7b:cf:c7:0f:53:29:4d:40:b6:d5:16: 41:d9:81:e8:30:6b:e7:14:2b:72:b4:32:8f:14:2a: 8c:44:bb:12:63:34:f7:6b:89:af:79:bd:dc:7e:72: 52:de:2a:14:da:63:1a:96:13:c5:8b:65:97:07:5a: 13:ad:ce:c1:33:84:04:c8:6d:03:34:66:a1:fd:f6: 75:59:9d:e4:5a:a8:95:3d:92:a6:43:5f:35:9b:8b: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:13:6C:1F:26:24:7D:09:7E:1B:10:AF:F7:99:9E:64:75:39:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9c:01:2b:a3:c0:5a:61:b6:a1:db:7f:2c:b5:1e:4f:41:dd: d5:e7:65:84:7c:25:cf:32:20:80:0e:13:50:39:9e:18:b0:1a: c2:82:d1:44:72:92:d6:30:bd:b5:e5:7f:7f:af:93:94:ae:9e: 9e:fe:0c:70:4c:43:71:51:44:5f:7d:1a:44:15:36:f7:7c:6d: 16:f8:0a:10:69:d1:ea:97:35:06:9c:38:7e:40:1a:70:26:a9: 4c:02:9a:c2:b7:88:49:89:10:2a:41:ef:e3:f7:89:e8:c6:f4: 5d:cc:fb:50:26:ec:77:03:fe:16:45:4d:a0:33:ac:21:a4:68: ef:49:da:d8:d6:2e:d2:04:af:05:35:18:c7:0d:dc:2e:74:7d: 93:2f:a9:d7:7a:87:e6:93:e6:36:fd:e9:12:31:a7:1d:37:59: eb:33:05:a6:8c:1a:cf:49:97:2a:f3:19:e5:d3:23:41:1a:71: 0d:a9:2f:78:73:d2:76:8e:d8:4f:5c:2f:c6:12:b1:2c:61:a5: 34:4c:1b:b9:b7:a1:60:59:4a:b3:be:c4:4c:0e:99:94:c3:63: 04:0e:9f:1f:f3:0d:75:e5:74:ed:f2:e5:36:db:66:f2:2d:4b: ca:dd:11:6f:0b:e5:0b:90:ef:6a:cd:eb:bf:9d:35:c9:0f:b6: 4f:f6:f7:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ4/Ao/yLYzsTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQxZGY0ZjItOTc2NC00MGVhLTg4MjgtMWRhYzQzYTFkOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fG7axkeu3+bJaH54Wx/fFNmWEwKi+zm4N6+ 1ulg/IaGZAzwC0geCG+CkvDfp5dQAWYmafeXjNA2aZniO2dkD+HUsau6in39xmBN R1Q1RfLgKoJO08TgY9J4Banyne6+89TMFEuI7jcvOIT4ryGUGfHjMKjOEeyChpMJ gPAx4qIJBhifTZ1gob226D9Pa8XfR6wOm3xXOqMIJUjEO9MIc3WRIQcvibb7e8/H D1MpTUC21RZB2YHoMGvnFCtytDKPFCqMRLsSYzT3a4mveb3cfnJS3ioU2mMalhPF i2WXB1oTrc7BM4QEyG0DNGah/fZ1WZ3kWqiVPZKmQ181m4uYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOKE2wfJiR9CX4bEK/3mZ5kdTk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvNDFiNDk1YTEtMzYyNy0z NjY3LWFmNDEtZDIwNzJkNWQ5ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFecASujwFphtqHbfyy1Hk9B3dXnZYR8Jc8yIIAOE1A5nhiwGsKC0URy ktYwvbXlf3+vk5Sunp7+DHBMQ3FRRF99GkQVNvd8bRb4ChBp0eqXNQacOH5AGnAm qUwCmsK3iEmJECpB7+P3iejG9F3M+1Am7HcD/hZFTaAzrCGkaO9J2tjWLtIErwU1 GMcN3C50fZMvqdd6h+aT5jb96RIxpx03WeszBaaMGs9JlyrzGeXTI0EacQ2pL3hz 0naO2E9cL8YSsSxhpTRMG7m3oWBZSrO+xEwOmZTDYwQOnx/zDXXldO3y5TbbZvIt S8rdEW8L5QuQ72rN67+dNckPtk/29zw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:39 2025 by rpki-client