$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json) Hash identifier: QDegmqQzmIxBjuyfHrUDmXLsRV/i0xMQIi0SeaIUQK8= Subject key identifier: D4:8A:60:0C:56:C0:29:35:5B:40:CB:EC:08:20:43:64:BD:B2:68:86 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584AECC1217A8FA7F000B0461900 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 400312 IP address blocks: 23.131.168.0/24 maxlen: 24 2602:fbf0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:7a:8f:a7:f0:00:b0:46:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a29bf1c2-038e-4fc5-aed7-33c975e51f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:af:e3:24:c6:39:ff:d6:9d:23:73:8e:9e: e7:da:d6:27:52:54:93:4f:5e:c6:f1:fb:d6:94:e6: ea:35:54:d0:e6:b1:4f:03:1f:6f:37:b9:09:0c:38: d8:5d:e5:bd:00:be:53:52:f7:18:2c:53:48:54:3c: e5:6d:86:b9:01:73:7c:9b:4d:b0:7f:08:ff:76:e1: 07:24:23:a1:5c:df:cf:01:fe:a4:9f:25:62:89:44: 7e:88:4f:8a:57:fd:74:9e:ee:63:ae:ad:06:82:54: ed:08:e0:34:ae:84:34:f7:f5:cc:43:23:ec:a1:57: 5a:c0:3a:70:47:3f:86:ae:0c:7d:85:13:df:3f:fa: ef:dd:38:4e:49:db:64:36:59:ea:6e:6b:8a:59:f8: b8:3b:40:c1:90:14:13:bd:3f:2d:8a:c9:9d:d8:56: 4b:97:0d:c3:89:ac:79:0d:57:21:3b:ee:1c:43:95: d9:92:ae:fc:77:25:d8:0f:1b:d5:63:f4:22:b6:97: 0e:63:f7:b6:94:9e:01:da:d9:46:48:a0:27:99:cd: c6:b2:a4:62:2e:11:f2:b3:17:bb:4a:b6:b3:ec:22: fd:1d:5f:98:64:6e:78:b4:46:6d:dc:9b:1f:3f:dc: ba:d8:3a:fd:e3:dd:f6:8d:c4:49:68:bc:bf:1d:94: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:60:0C:56:C0:29:35:5B:40:CB:EC:08:20:43:64:BD:B2:68:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.168.0/24 IPv6: 2602:fbf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:36:e4:fe:88:91:61:b4:46:94:0a:9c:93:ba:5d:0d:f8:a5: 98:4a:2b:69:fa:b8:bc:f3:b5:15:f5:fe:7f:39:46:78:16:7b: dc:50:56:74:6b:83:56:f6:e1:3c:30:22:a4:c8:d2:29:28:da: f9:e6:4c:4a:98:db:19:86:ec:eb:72:15:f1:e5:33:49:ac:48: 2b:62:16:cc:e4:f4:10:6a:ef:1c:6e:81:f0:5a:50:67:f0:69: cb:37:07:55:d0:42:9a:b7:a0:0f:94:9e:6c:77:56:7a:62:ba: 19:dd:06:44:79:87:47:48:b0:5e:93:da:39:e0:ee:e4:7c:4e: a2:15:41:4a:2c:da:d7:f3:a2:d6:53:6d:24:c1:ce:49:5e:30: ef:4a:a6:dd:a2:63:77:5b:fa:1e:c5:e0:28:3f:59:27:2e:3b: 67:09:27:96:a2:ce:67:7c:dc:7c:f8:c8:87:e3:07:f2:e1:13: af:d5:3e:4f:13:fe:ba:59:f1:a6:fe:0a:5a:7f:36:68:cf:aa: 10:e5:96:33:5c:49:09:4e:f1:9b:c2:a7:68:7a:6f:09:89:a0: 7b:11:d7:fa:f4:bc:92:48:d3:b9:18:00:8b:cf:2f:97:ca:63: 70:d5:3a:28:1a:e0:97:92:40:e9:51:94:36:10:e7:44:9a:91: fc:4c:d3:3c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErswSF6j6fwALBGGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTI5YmYxYzItMDM4ZS00ZmM1LWFlZDctMzNjOTc1ZTUxZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ6v4yTGOf/WnSNzjp7n2tYnUlSTT17G8fvW lObqNVTQ5rFPAx9vN7kJDDjYXeW9AL5TUvcYLFNIVDzlbYa5AXN8m02wfwj/duEH JCOhXN/PAf6knyViiUR+iE+KV/10nu5jrq0GglTtCOA0roQ09/XMQyPsoVdawDpw Rz+Grgx9hRPfP/rv3ThOSdtkNlnqbmuKWfi4O0DBkBQTvT8tismd2FZLlw3Diax5 DVchO+4cQ5XZkq78dyXYDxvVY/QitpcOY/e2lJ4B2tlGSKAnmc3GsqRiLhHysxe7 Sraz7CL9HV+YZG54tEZt3JsfP9y62Dr94932jcRJaLy/HZTQnQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNSKYAxWwCk1W0DL7AggQ2S9smiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYTA1ZWRjYjEtY2Q1My0z MzYxLTlhNGEtZjkyODEyYzUwMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4OoMA0E AgACMAcDBQAmAvvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAN825P6IkWG0RpQKnJO6XQ34pZhKK2n6uLzz tRX1/n85RngWe9xQVnRrg1b24TwwIqTI0iko2vnmTEqY2xmG7OtyFfHlM0msSCti Fszk9BBq7xxugfBaUGfwacs3B1XQQpq3oA+Unmx3VnpiuhndBkR5h0dIsF6T2jng 7uR8TqIVQUos2tfzotZTbSTBzkleMO9Kpt2iY3db+h7F4Cg/WScuO2cJJ5aizmd8 3Hz4yIfjB/LhE6/VPk8T/rpZ8ab+Clp/NmjPqhDlljNcSQlO8ZvCp2h6bwmJoHsR 1/r0vJJI07kYAIvPL5fKY3DVOiga4JeSQOlRlDYQ50SakfxM0zw= -----END CERTIFICATE-----Generated at Thu Aug 21 12:48:38 2025 by rpki-client