$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa File: 34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa (raw, json) Hash identifier: ojhtf/K7XgxBeMAm+pWUCSr4z+uJGbhSfZGoUFotx8E= Subject key identifier: 6A:A1:03:4A:C1:13:76:4D:3E:B7:2E:E8:F6:9F:88:51:D3:B0:2E:58 Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b Certificate serial: 010D0C9F4328584B0316990163A42436EFC488C0 Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 5065 IP address blocks: 107.180.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:99:01:63:a4:24:36:ef:c4:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=4f8aa584-07be-4c49-a7e3-535edeae6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:09:cd:9d:e6:1e:5c:0e:66:05:39:1d:03: 01:f3:4a:bd:57:c2:52:18:15:91:cb:e3:5d:9b:f1: 42:39:b8:71:bd:89:b0:1e:e2:59:ad:50:76:8f:d4: ea:d9:7c:ba:e5:28:f4:06:70:80:87:a4:7f:ec:5c: ad:36:c9:de:c8:b5:61:51:67:12:cf:5f:80:45:8c: 05:42:6a:94:d0:0c:74:d6:3d:f7:9d:d9:f2:6a:88: 94:19:da:eb:5c:40:ae:40:8a:85:3a:bb:e5:14:cd: 66:9f:c0:c2:22:e4:6c:98:52:b4:1f:ad:89:b6:7c: 3e:48:49:d5:a8:07:3e:47:0e:e8:ce:32:dd:89:eb: 57:28:d8:55:44:e2:d4:4b:de:c5:ba:e2:04:94:b5: 68:87:75:da:82:41:cc:ca:86:ec:42:09:13:35:8d: c9:a1:d9:93:a3:cf:2b:e1:0f:00:83:79:ca:f3:d8: be:08:4d:cb:69:b9:47:7c:fc:88:6e:6f:b9:99:ec: 3e:c7:0c:bc:78:e2:ac:f3:6e:dc:d0:3d:67:3b:4a: 33:de:60:a7:8c:05:cf:06:2a:7f:97:a3:ff:5b:fc: c7:fa:0a:9f:46:9f:92:7e:af:1e:f1:b7:3d:e4:db: 14:c5:d4:0b:11:5a:77:6d:71:d4:18:51:4f:eb:68: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A1:03:4A:C1:13:76:4D:3E:B7:2E:E8:F6:9F:88:51:D3:B0:2E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/34be9b48-0aa4-3314-b2a9-62d22a4a5bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl X509v3 Authority Key Identifier: keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer sbgp-ipAddrBlock: critical IPv4: 107.180.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:76:32:72:47:d2:38:a6:c1:23:7d:83:bc:16:7e:6b:41:d2: 08:85:5e:84:7a:88:50:bb:49:4d:fb:5c:3f:56:03:3b:08:5e: bf:8c:d0:dd:b3:a0:56:d4:4e:5e:48:f0:bc:b7:55:7c:bd:8b: 62:41:0f:c9:92:10:92:68:2b:db:13:eb:5c:72:a6:7c:16:58: f4:81:5d:f8:52:e1:1d:35:91:b5:0b:64:0b:e3:3c:c3:6f:04: d8:ac:af:70:55:02:98:d9:f7:bf:70:2b:15:43:5f:68:77:e0: cc:01:e2:52:c4:3a:cd:21:f3:db:b5:77:1e:e9:1a:1d:71:8d: 28:48:c2:f4:b9:68:6b:b4:a2:d4:da:a5:c8:b8:18:f6:38:19: 15:e7:00:90:c1:77:77:2c:ab:ac:20:9c:fd:9f:8b:ee:70:1a: e0:d5:69:17:9a:a1:c1:8a:2c:dd:9a:a5:a6:bb:fc:83:d3:26: 23:b7:4f:14:0e:7a:07:33:28:94:eb:5e:77:4d:55:58:6d:7e: 18:ae:e3:f0:4c:2e:1e:a1:b7:3d:3c:05:0a:e5:1a:fd:ef:35: 9f:c7:3b:8a:14:d0:11:bf:ab:4c:3e:5a:9e:02:5d:02:22:f0: 05:ae:57:cf:11:0e:19:ae:79:94:39:0c:3d:9e:9b:19:23:5a: bb:1b:1a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpkBY6QkNu/EiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm NjhiMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NGY4YWE1ODQtMDdiZS00YzQ5LWE3ZTMtNTM1ZWRlYWU2YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cYJzZ3mHlwOZgU5HQMB80q9V8JSGBWRy+Nd m/FCObhxvYmwHuJZrVB2j9Tq2Xy65Sj0BnCAh6R/7FytNsneyLVhUWcSz1+ARYwF QmqU0Ax01j33ndnyaoiUGdrrXECuQIqFOrvlFM1mn8DCIuRsmFK0H62Jtnw+SEnV qAc+Rw7ozjLdietXKNhVROLUS97FuuIElLVoh3XagkHMyobsQgkTNY3JodmTo88r 4Q8Ag3nK89i+CE3LablHfPyIbm+5mew+xwy8eOKs827c0D1nO0oz3mCnjAXPBip/ l6P/W/zH+gqfRp+Sfq8e8bc95NsUxdQLEVp3bXHUGFFP62ghEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqhA0rBE3ZNPrcu6PafiFHTsC5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0 Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMzRiZTliNDgtMGFhNC0z MzE0LWIyYTktNjJkMjJhNGE1YmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1 OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0 ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa7SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV2MnJH0jimwSN9g7wWfmtB0giFXoR6iFC7SU37XD9WAzsIXr+M0N2z oFbUTl5I8Ly3VXy9i2JBD8mSEJJoK9sT61xypnwWWPSBXfhS4R01kbULZAvjPMNv BNisr3BVApjZ979wKxVDX2h34MwB4lLEOs0h89u1dx7pGh1xjShIwvS5aGu0otTa pci4GPY4GRXnAJDBd3csq6wgnP2fi+5wGuDVaReaocGKLN2apaa7/IPTJiO3TxQO egczKJTrXndNVVhtfhiu4/BMLh6htz08BQrlGv3vNZ/HO4oU0BG/q0w+Wp4CXQIi 8AWuV88RDhmueZQ5DD2emxkjWrsbGjk= -----END CERTIFICATE-----Generated at Sun Sep 7 12:35:23 2025 by rpki-client