$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa File: 4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json) Hash identifier: TVQBz80M9zS+2e6NwekN+Izxcq+zfCzAFBEJntJRgFo= Subject key identifier: D9:F7:69:80:2A:99:41:C8:8E:E7:53:9C:31:32:66:65:00:A6:FC:C4 Certificate issuer: /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Certificate serial: 010D0C9F4328584B004BF2756BEDD0B8512488C0 Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 395332 IP address blocks: 23.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f2:75:6b:ed:d0:b8:51:24:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=9a022859-eef9-4789-a1f7-e99c00c798e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:34:97:c8:1c:eb:57:30:82:d3:ea:c1:2a: 8e:3e:7a:2c:14:99:c2:33:88:ea:02:f6:ce:8a:c4: 6c:87:1b:44:69:4b:8a:45:bd:d7:2b:14:3e:e8:0a: 18:9f:1a:be:f2:4c:53:11:fb:5f:b2:e6:13:05:61: 2a:23:a8:4c:a5:b8:61:db:ad:a8:6a:5f:c7:c5:51: b9:9b:af:07:53:95:02:aa:b1:3f:67:6d:a6:e8:38: d9:4e:15:00:52:66:0d:6c:b5:c5:70:47:ad:92:a6: f9:ee:16:7f:1e:5f:00:7b:06:98:bd:00:e6:82:e9: b4:f1:e5:90:c0:a5:d0:98:54:81:90:df:1a:25:bd: 5a:b6:3a:5a:d3:e1:f6:86:0b:b1:67:b0:46:d0:a9: bf:f8:47:15:36:35:7c:ef:2f:75:b1:4f:27:65:7d: 93:e7:7d:d3:42:12:17:67:5a:15:c0:10:84:ef:a5: 6b:75:5b:a5:01:f0:1f:7d:1b:c1:56:b4:96:3b:c5: b3:eb:44:b4:f9:10:c6:14:46:a4:c3:50:4f:53:57: 74:c7:ba:1b:2c:7f:a5:c1:4f:ef:b7:17:79:c2:e6: 96:0f:0f:06:df:9d:63:5b:00:ca:e4:4a:26:06:fa: bc:4b:e8:a5:5c:a1:a8:33:2d:67:2d:7d:9e:80:a6: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F7:69:80:2A:99:41:C8:8E:E7:53:9C:31:32:66:65:00:A6:FC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl X509v3 Authority Key Identifier: keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer sbgp-ipAddrBlock: critical IPv4: 23.146.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:19:8d:10:07:8a:33:6f:3c:56:52:db:30:bb:98:86:11:3e: a7:03:43:26:eb:f8:79:58:b9:31:36:7c:f9:50:fc:11:74:fd: e9:f2:d3:dd:cc:72:e3:7d:73:c6:13:b1:a5:22:54:b9:84:3e: 8f:84:22:90:cc:fa:9b:20:49:85:bc:16:99:a6:01:11:72:22: 52:8d:29:8d:89:30:cc:20:07:a7:42:da:dc:bf:0c:19:7d:99: 0a:d2:b6:34:67:b3:07:f2:fb:b8:b3:d1:41:3b:64:e9:99:8b: b0:a2:64:a5:f7:cc:3e:e2:55:a9:c7:29:7c:b8:d3:f4:1e:69: 4b:b5:d8:16:d2:06:bc:50:38:6b:e4:3d:bf:9a:b8:f4:82:ea: 31:39:fa:71:7e:a6:1b:86:70:d1:e7:fd:4a:51:7d:93:6f:a6: 71:5b:05:fd:20:7a:fd:96:7e:3b:79:2e:07:c4:a1:01:00:3b: f4:5d:f9:fe:f3:62:c6:04:27:ab:b8:3a:01:60:90:e9:b2:85: 29:fb:46:1b:29:fe:1d:65:6f:1f:12:b5:97:c8:b5:ce:6d:1b: b7:12:a0:12:26:02:aa:2c:e3:fc:18:f8:07:b5:4d:e5:8f:64: 22:55:c5:65:63:3b:5b:00:5a:e2:4d:63:e7:43:91:eb:e2:dd: 8f:5c:e2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/J1a+3QuFEkiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBj NDkxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OWEwMjI4NTktZWVmOS00Nzg5LWExZjctZTk5YzAwYzc5OGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVk0l8gc61cwgtPqwSqOPnosFJnCM4jqAvbO isRshxtEaUuKRb3XKxQ+6AoYnxq+8kxTEftfsuYTBWEqI6hMpbhh262oal/HxVG5 m68HU5UCqrE/Z22m6DjZThUAUmYNbLXFcEetkqb57hZ/Hl8AewaYvQDmgum08eWQ wKXQmFSBkN8aJb1atjpa0+H2hguxZ7BG0Km/+EcVNjV87y91sU8nZX2T533TQhIX Z1oVwBCE76VrdVulAfAffRvBVrSWO8Wz60S0+RDGFEakw1BPU1d0x7obLH+lwU/v txd5wuaWDw8G351jWwDK5EomBvq8S+ilXKGoMy1nLX2egKYDVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn3aYAqmUHIjudTnDEyZmUApvzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJi MDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvNGE3ZmZiZjgtZmMxNy0z Y2FmLWEzMjAtNmUwOTliN2I2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MyYjA4ZjktYjNkYy00Y2Y2LTg3 MGMtYTczMGI4NjBjNDkxL2NjMmIwOGY5LWIzZGMtNGNmNi04NzBjLWE3MzBiODYw YzQ5MS5jcmwwHwYDVR0jBBgwFoAU4R+/KOrwSwaL4CtRyr1gO43HGJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMw Yjg2MGM0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEZjRAHijNvPFZS2zC7mIYRPqcDQybr+HlYuTE2fPlQ/BF0/eny093M cuN9c8YTsaUiVLmEPo+EIpDM+psgSYW8FpmmARFyIlKNKY2JMMwgB6dC2ty/DBl9 mQrStjRnswfy+7iz0UE7ZOmZi7CiZKX3zD7iVanHKXy40/QeaUu12BbSBrxQOGvk Pb+auPSC6jE5+nF+phuGcNHn/UpRfZNvpnFbBf0gev2Wfjt5LgfEoQEAO/Rd+f7z YsYEJ6u4OgFgkOmyhSn7Rhsp/h1lbx8StZfItc5tG7cSoBImAqos4/wY+Ae1TeWP ZCJVxWVjO1sAWuJNY+dDkevi3Y9c4lI= -----END CERTIFICATE-----Generated at Tue Sep 16 03:00:20 2025 by rpki-client