$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: F5HZ8931GC/PdYK0Bn90mDztywUHZzHpl+1g7xVQHyo= Subject key identifier: 81:44:16:D4:CC:FA:03:53:53:FF:1C:16:7F:F5:F6:1B:58:AF:C4:94 Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584AFC1C0881B5565797279338C0 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:08:81:b5:56:57:97:27:93:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=4ce9ce08-fbde-45f8-b015-3deaf8bd499b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:26:15:ee:e2:aa:19:61:4c:4e:1d:80:74: fd:82:41:02:4d:0d:64:c2:ee:43:65:c7:81:dc:62: 12:a9:8d:b4:8b:2d:de:35:a3:b7:33:30:fe:38:2f: b6:d8:ef:a7:66:50:d6:21:ae:d9:16:86:ab:95:b1: e7:cf:0d:9e:39:8b:38:13:83:c5:81:e7:d9:b3:38: b9:be:54:00:6f:d6:9c:22:b7:62:35:41:8f:37:d6: 5e:91:8d:89:44:4a:2a:cf:a4:8f:11:9d:93:27:86: 49:7d:7d:52:66:d6:5c:6f:e0:b1:fb:93:83:5d:81: af:6a:af:71:6e:f7:f9:41:e0:53:1e:e3:6b:a4:5b: a7:e5:ee:a3:0c:b2:ed:41:3c:ad:68:22:2e:ab:f8: 37:e7:f4:e8:ac:c4:11:d2:9d:cd:18:ab:0d:1e:54: 5c:01:a1:c5:8b:b1:c5:d9:b6:e1:01:a3:cc:ef:41: c0:08:61:d5:45:34:85:1b:c8:b6:27:71:9a:52:dc: 37:47:8b:fa:2f:2a:23:94:98:53:e2:06:1a:a0:51: 12:7f:5f:9a:93:28:95:4e:0e:f7:fd:9b:b3:23:17: 32:78:8c:99:cd:4e:c6:87:ff:ec:d8:16:7f:bc:78: 6c:ec:4c:ce:7e:28:6b:cf:a6:da:b8:91:62:30:2a: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:16:D4:CC:FA:03:53:53:FF:1C:16:7F:F5:F6:1B:58:AF:C4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:86:07:71:6b:ed:e2:7b:ae:c2:ba:65:99:d0:c5:35:06:da: 29:d6:86:47:46:5c:91:16:b3:84:de:a4:d3:b7:36:c6:7d:fe: a9:03:41:7f:57:2e:5d:dd:00:68:6e:46:9c:09:f7:ea:a7:7a: 8f:a7:58:9a:96:68:06:50:3d:70:32:eb:1f:44:52:6b:41:3b: 90:24:ab:90:18:46:46:5d:e7:74:2a:8a:0c:19:30:68:63:09: fc:fe:86:d2:33:a9:75:b8:46:82:85:c7:eb:fc:af:fa:fd:fd: 0c:d5:76:a6:33:b3:97:94:a0:e0:72:b9:a8:33:20:04:1b:e0: 87:ba:84:6a:0f:a1:89:27:38:a3:56:be:ff:f2:5f:2b:65:e8: ae:66:a2:e1:ac:9f:fe:e9:2c:e4:a6:bb:93:2c:ed:23:c8:45: ea:0b:3a:af:dd:fe:3b:26:24:ab:4e:af:63:06:ea:79:df:40: 1b:03:ef:08:43:bc:f4:55:e8:bf:b8:5d:bc:e7:ba:dc:4e:8f: 7f:24:d7:32:60:f4:b7:f1:54:67:ec:a8:f8:eb:75:02:65:b6: e7:da:61:bd:14:0c:3b:01:27:22:e2:af:a0:a7:42:f6:9f:1c: e7:0b:11:72:19:5e:66:c8:d0:55:aa:9d:2d:94:a9:60:65:03: f7:83:70:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAiBtVZXlyeTOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NGNlOWNlMDgtZmJkZS00NWY4LWIwMTUtM2RlYWY4YmQ0OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs10mFe7iqhlhTE4dgHT9gkECTQ1kwu5DZceB 3GISqY20iy3eNaO3MzD+OC+22O+nZlDWIa7ZFoarlbHnzw2eOYs4E4PFgefZszi5 vlQAb9acIrdiNUGPN9ZekY2JREoqz6SPEZ2TJ4ZJfX1SZtZcb+Cx+5ODXYGvaq9x bvf5QeBTHuNrpFun5e6jDLLtQTytaCIuq/g35/TorMQR0p3NGKsNHlRcAaHFi7HF 2bbhAaPM70HACGHVRTSFG8i2J3GaUtw3R4v6LyojlJhT4gYaoFESf1+akyiVTg73 /ZuzIxcyeIyZzU7Gh//s2BZ/vHhs7EzOfihrz6bauJFiMCr1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFEFtTM+gNTU/8cFn/19htYr8SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2GB3Fr7eJ7rsK6ZZnQxTUG2inWhkdGXJEWs4TepNO3NsZ9/qkDQX9X Ll3dAGhuRpwJ9+qneo+nWJqWaAZQPXAy6x9EUmtBO5Akq5AYRkZd53QqigwZMGhj Cfz+htIzqXW4RoKFx+v8r/r9/QzVdqYzs5eUoOByuagzIAQb4Ie6hGoPoYknOKNW vv/yXytl6K5mouGsn/7pLOSmu5Ms7SPIReoLOq/d/jsmJKtOr2MG6nnfQBsD7whD vPRV6L+4XbznutxOj38k1zJg9LfxVGfsqPjrdQJltufaYb0UDDsBJyLir6CnQvaf HOcLEXIZXmbI0FWqnS2UqWBlA/eDcNw= -----END CERTIFICATE-----Generated at Sat Sep 6 08:03:30 2025 by rpki-client