$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: 2MPZ+uswH/7wCyr4ExKb6mEY9xtqEY/mbCJ6+0r5N+E= Subject key identifier: B3:63:D0:47:B5:33:A7:B1:9D:B7:E8:64:CF:0B:C2:F6:E0:93:1F:85 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584B047BFE829718D6156BD52D00 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 923 IP address blocks: 23.144.156.0/24 maxlen: 24 207.167.121.0/24 maxlen: 24 2602:fbf5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fe:82:97:18:d6:15:6b:d5:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=f4dc0528-b9c5-47f7-82b7-c4e46779a308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:23:75:dd:4b:56:5e:01:56:04:0c:67:e7: 66:43:60:db:c6:09:f8:2e:c1:cb:ab:0c:96:79:95: f1:a7:dc:f4:99:f4:1d:95:5e:b4:4c:0f:13:49:ff: a0:32:06:48:65:1b:cd:b9:8e:03:35:13:cd:d7:92: c4:df:84:08:99:fd:ad:3e:cf:90:e5:2e:72:bb:5c: 8f:ba:3d:2c:c7:e8:6b:ea:cc:a0:30:ca:13:1e:c7: 64:6a:90:ab:f0:27:85:59:cf:d0:43:80:ac:af:d9: 4d:39:a5:ab:46:2b:57:b0:7a:94:4a:47:05:4c:3c: 93:34:0e:e3:53:04:c7:3b:7e:30:de:8a:96:57:d4: f5:7f:2e:a6:c7:bc:50:0a:69:59:86:39:54:fc:25: 7c:9d:11:da:82:93:71:c3:17:12:52:c7:d6:9e:82: b3:ad:60:53:29:3f:0e:a5:3b:94:83:0a:a8:25:b1: 81:56:50:87:b5:20:a1:e7:27:38:2b:fd:aa:6f:13: 46:84:cf:79:14:f8:17:f9:47:30:57:0a:99:2b:83: e1:0b:f4:f6:53:ea:94:f4:02:d6:47:e5:ea:09:c5: 58:12:9e:09:52:62:94:fa:89:21:fb:b7:3f:91:3d: 1b:a5:5f:14:48:13:79:28:c1:ab:7f:5e:09:57:f2: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:D0:47:B5:33:A7:B1:9D:B7:E8:64:CF:0B:C2:F6:E0:93:1F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 23.144.156.0/24 207.167.121.0/24 IPv6: 2602:fbf5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ba:29:06:64:3f:47:25:c7:ac:dc:29:b4:ab:ca:6a:04:c4: fb:07:04:4d:27:cf:c1:dc:1c:b9:e0:1b:2f:a2:91:3c:06:ce: 03:fe:73:d6:0c:0e:a7:fa:a1:86:ab:9e:fd:3b:e7:fb:cf:f7: c1:74:3c:c7:fd:6e:32:47:7e:bd:48:95:fc:69:9d:70:e2:38: f6:48:9b:fd:f8:72:f3:05:f3:97:6e:37:43:d3:a0:ac:ec:29: 61:9f:40:76:f9:71:47:7f:ec:5c:23:62:14:0d:f9:ca:cb:29: 93:f9:11:a7:81:e9:77:24:07:c0:c4:2b:04:09:16:39:5a:a4: 46:67:e4:dd:f8:6b:5f:92:2d:73:fd:26:99:05:05:10:fc:a9: ca:90:72:a9:e7:5b:59:df:bf:d1:3b:58:03:a3:40:62:af:00: 03:ab:cc:ed:06:b6:d9:2a:36:a6:62:e8:99:63:8e:d0:de:b1: 66:f0:53:37:4d:5b:8b:fb:ca:29:41:01:3d:36:31:a4:af:f0: 33:79:5f:32:70:f1:d9:75:25:f6:6b:d4:fd:52:16:f3:a3:97: fc:a7:08:7f:db:a5:d9:63:9d:04:87:62:11:71:32:32:58:be: a5:e5:8b:87:b8:5c:c6:aa:2b:2b:a8:4b:a1:f7:60:8c:ca:0a: df:1d:a9:a6 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsEe/6ClxjWFWvVLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjRkYzA1MjgtYjljNS00N2Y3LTgyYjctYzRlNDY3NzlhMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ4jdd1LVl4BVgQMZ+dmQ2Dbxgn4LsHLqwyW eZXxp9z0mfQdlV60TA8TSf+gMgZIZRvNuY4DNRPN15LE34QImf2tPs+Q5S5yu1yP uj0sx+hr6sygMMoTHsdkapCr8CeFWc/QQ4Csr9lNOaWrRitXsHqUSkcFTDyTNA7j UwTHO34w3oqWV9T1fy6mx7xQCmlZhjlU/CV8nRHagpNxwxcSUsfWnoKzrWBTKT8O pTuUgwqoJbGBVlCHtSCh5yc4K/2qbxNGhM95FPgX+UcwVwqZK4PhC/T2U+qU9ALW R+XqCcVYEp4JUmKU+okh+7c/kT0bpV8USBN5KMGrf14JV/IqDQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLNj0Ee1M6exnbfoZM8Lwvbgkx+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5CcAwQA z6d5MA4EAgACMAgDBgQmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBguikGZD9HJces3Cm0q8pqBMT7 BwRNJ8/B3By54BsvopE8Bs4D/nPWDA6n+qGGq579O+f7z/fBdDzH/W4yR369SJX8 aZ1w4jj2SJv9+HLzBfOXbjdD06Cs7Clhn0B2+XFHf+xcI2IUDfnKyymT+RGngel3 JAfAxCsECRY5WqRGZ+Td+Gtfki1z/SaZBQUQ/KnKkHKp51tZ37/RO1gDo0BirwAD q8ztBrbZKjamYuiZY47Q3rFm8FM3TVuL+8opQQE9NjGkr/AzeV8ycPHZdSX2a9T9 Uhbzo5f8pwh/26XZY50Eh2IRcTIyWL6l5YuHuFzGqisrqEuh92CMygrfHamm -----END CERTIFICATE-----Generated at Mon Oct 27 09:59:10 2025 by rpki-client