$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa File: c67fa2c4-805f-3152-936f-aeb5f876559b.roa (raw, json) Hash identifier: CCDAtX+BWNcZB4FR8dhYoA1XH3w7jVpmd1kkTYbHDtQ= Subject key identifier: A5:A3:EA:10:B7:92:71:64:84:A8:38:29:26:DA:80:6A:DF:E5:78:8B Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584AF95143166F3542A9EECDDAE0 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 6079 IP address blocks: 23.153.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:43:16:6f:35:42:a9:ee:cd:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=dcba6f7a-1149-4927-8d0f-c58bc29e68cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:64:e7:ab:0b:12:6d:c6:72:da:c8:33:f1: 20:f4:b3:ff:ca:43:31:3e:da:fe:d2:55:dc:01:6e: de:32:ac:d0:a9:95:f1:ba:9c:a6:f2:19:d0:2c:61: 90:a4:2c:70:90:0a:34:51:31:5c:6f:9d:d0:26:24: ac:85:90:a9:0c:fc:f1:35:ca:e0:96:0a:ed:b9:ca: 3d:dd:86:83:4f:5a:c4:7a:a5:d8:6c:ac:db:95:c5: ae:33:02:d3:83:e3:a6:c3:11:ab:02:04:60:4d:77: 0f:4d:41:42:85:ef:ee:0e:f4:6b:17:ca:f5:01:2e: c8:98:3d:4c:0f:d9:db:89:f7:85:89:b6:e6:a4:56: af:88:56:7a:41:1b:fb:59:d0:38:c9:75:d2:15:7d: a9:22:2c:53:1d:99:0b:52:ed:5e:90:66:dd:a4:4d: dd:21:2b:cb:ab:e9:75:ac:8d:42:07:1f:3b:6c:9e: 01:f9:12:ba:a9:eb:90:a4:e4:f9:c6:31:c2:70:3e: a8:a6:21:71:5d:7e:b6:9c:bf:df:ca:02:09:c4:05: e5:58:af:2e:66:c0:25:8a:23:d9:89:50:cd:cf:23: d0:17:63:fb:48:65:89:c2:3f:e8:1c:a8:0e:1c:69: 5f:e6:92:c3:42:93:41:d1:a5:f3:0d:66:43:57:b3: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A3:EA:10:B7:92:71:64:84:A8:38:29:26:DA:80:6A:DF:E5:78:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 23.153.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:29:0a:dd:df:12:8d:88:61:01:14:3d:00:82:5e:dd:6e:36: 8b:25:3f:42:a8:d5:6b:b5:c1:91:99:2c:56:82:57:e8:6e:60: 50:5d:fa:0b:82:4d:92:11:c9:58:bf:a4:a1:be:0a:c0:15:fa: 57:c9:99:3d:86:6a:4b:72:ec:ca:e9:90:47:81:64:c8:36:f0: df:1a:46:66:af:e8:be:d5:a2:c9:1c:5d:de:c2:24:85:bc:2f: c6:b4:74:b6:72:71:29:8e:00:5e:5d:6b:5a:2c:7b:39:6e:16: 12:f5:e0:09:72:20:a0:e6:54:a5:c0:5e:ac:d0:4a:5f:5b:de: 29:92:03:3c:3f:43:62:43:02:99:a0:2a:31:e8:90:7d:55:92: ee:75:f9:ac:97:1e:1a:2c:48:ef:58:b6:27:d5:56:d3:cb:93: 26:d0:c7:98:36:ff:55:2d:02:94:86:a9:26:95:97:27:9d:b9: de:12:2a:90:43:c1:1f:8a:9c:c8:ef:3e:16:cf:e1:e8:75:22: 0d:1d:c5:0e:d1:ab:c2:0f:00:6b:4b:93:58:21:50:64:60:0c: 1b:bb:01:cc:be:69:99:68:e9:35:99:9b:53:a2:f0:1a:11:e0: 22:3a:88:2c:52:fd:ba:b7:28:04:fb:22:92:d7:cb:45:86:aa: 8c:7b:68:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUMWbzVCqe7N2uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGNiYTZmN2EtMTE0OS00OTI3LThkMGYtYzU4YmMyOWU2OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYhk56sLEm3GctrIM/Eg9LP/ykMxPtr+0lXc AW7eMqzQqZXxupym8hnQLGGQpCxwkAo0UTFcb53QJiSshZCpDPzxNcrglgrtuco9 3YaDT1rEeqXYbKzblcWuMwLTg+OmwxGrAgRgTXcPTUFChe/uDvRrF8r1AS7ImD1M D9nbifeFibbmpFaviFZ6QRv7WdA4yXXSFX2pIixTHZkLUu1ekGbdpE3dISvLq+l1 rI1CBx87bJ4B+RK6qeuQpOT5xjHCcD6opiFxXX62nL/fygIJxAXlWK8uZsAliiPZ iVDNzyPQF2P7SGWJwj/oHKgOHGlf5pLDQpNB0aXzDWZDV7PdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWj6hC3knFkhKg4KSbagGrf5XiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvYzY3ZmEyYzQtODA1Zi0z MTUyLTkzNmYtYWViNWY4NzY1NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACopCt3fEo2IYQEUPQCCXt1uNoslP0Ko1Wu1wZGZLFaCV+huYFBd+guC TZIRyVi/pKG+CsAV+lfJmT2Gakty7MrpkEeBZMg28N8aRmav6L7VoskcXd7CJIW8 L8a0dLZycSmOAF5da1osezluFhL14AlyIKDmVKXAXqzQSl9b3imSAzw/Q2JDApmg KjHokH1Vku51+ayXHhosSO9YtifVVtPLkybQx5g2/1UtApSGqSaVlyedud4SKpBD wR+KnMjvPhbP4eh1Ig0dxQ7Rq8IPAGtLk1ghUGRgDBu7Acy+aZlo6TWZm1Oi8BoR 4CI6iCxS/bq3KAT7IpLXy0WGqox7aNc= -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:02 2025 by rpki-client