$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa File: 9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa (raw, json) Hash identifier: mrciFr9scBsejOrIAEtbVHPeQwUzDl7Kzv7kjHOg0zM= Subject key identifier: 27:6E:2E:18:9B:14:D4:0E:1F:87:A5:85:B5:40:69:9E:C7:D0:8D:B7 Certificate issuer: /CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc Certificate serial: 010D0C9F4328584AE72BB8685CBAE2D89A085B80 Authority key identifier: 0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 22855 IP address blocks: 143.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b8:68:5c:ba:e2:d8:9a:08:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223692b9-6752-4ca2-9cf2-90b3bea5d6dc Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=de188a5a-dc80-4d18-922b-d00e714ae0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:db:ac:d1:ed:d6:96:2f:ea:ba:b4:f2:80: 38:4a:5a:45:1e:7a:15:85:86:00:7c:49:21:52:fb: d9:cc:fa:fb:38:c7:b9:1c:b3:21:41:1c:c0:de:86: 22:22:e9:f8:bf:af:bb:a3:cc:7d:12:fc:98:bf:4e: d1:58:69:8b:38:f1:a2:4e:50:26:32:ec:47:1f:06: 07:07:16:7e:d6:92:f6:46:d3:05:14:01:32:d5:01: 73:92:5e:22:15:79:1c:99:03:93:86:89:c9:6f:78: f6:bb:68:14:31:af:79:28:b5:0b:6f:d1:bc:ff:1e: f7:33:af:3c:a7:a9:84:98:a1:b7:d7:4e:a1:a9:e2: 30:be:a5:12:79:c0:74:0b:97:58:a6:74:ed:de:77: 62:fa:d3:ed:bd:63:cd:f2:c8:d3:62:fd:db:f3:ec: e1:32:fd:0a:d6:d6:0a:83:4a:80:d1:12:74:3e:0a: d6:4c:60:2e:bd:97:4a:7f:47:2b:95:9e:6e:60:12: 63:03:37:6e:a8:ec:b0:cf:23:77:7a:fd:bc:61:fa: 6b:b9:0e:92:39:c5:0f:1a:90:d4:90:21:07:71:0f: 00:da:bb:78:4d:d6:45:0b:d2:91:d8:75:15:0a:2a: be:22:ed:7a:31:87:65:f3:0f:1d:a2:1b:95:fd:24: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:2E:18:9B:14:D4:0E:1F:87:A5:85:B5:40:69:9E:C7:D0:8D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/9a68d88c-b9ac-364a-ac7d-a3594d3c7bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.crl X509v3 Authority Key Identifier: keyid:0B:BF:41:F6:6D:D9:5E:7C:E8:1B:E6:AE:B8:DC:41:53:86:07:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/223692b9-6752-4ca2-9cf2-90b3bea5d6dc.cer sbgp-ipAddrBlock: critical IPv4: 143.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a6:56:ef:98:c4:a5:5c:3b:1d:72:1c:ff:5f:a8:6f:85:08: aa:c2:cc:b7:42:bf:af:2f:77:47:0d:7b:74:28:05:55:8f:83: fb:0e:84:d6:87:b6:63:4f:52:83:63:5e:d1:30:0a:d7:a4:4c: f8:58:e7:83:0e:ee:6c:ec:13:cf:04:d0:78:be:b9:bd:3d:68: 73:c1:59:11:72:3f:da:a3:c9:0f:7d:9d:19:8a:2b:b0:bf:1a: 4c:a8:8d:73:04:01:c5:a7:94:f7:f0:18:53:8a:36:bd:78:ca: 8b:a7:ae:76:06:6d:8a:34:fd:5e:d8:65:d3:cb:93:22:63:93: 9e:ab:5d:70:81:0d:48:ec:4b:26:05:c5:38:7e:34:45:2e:91: ec:08:79:64:0c:86:dd:5b:b5:5f:d3:9d:e0:ac:51:94:e9:ec: a8:d6:71:30:4d:15:93:5a:ac:1e:58:be:f4:55:21:6c:cd:f0: ac:66:23:1a:04:53:04:ae:9a:7a:92:e9:ef:dd:6c:81:ab:5b: 7f:45:ac:d2:e9:62:a6:c2:de:04:0a:f4:ce:f4:66:02:0a:ff: 23:71:01:0b:96:7a:e2:27:fd:72:5f:c1:61:86:80:98:fe:c9: 66:8a:46:2e:45:84:5a:cd:81:84:ff:ea:97:77:24:85:fe:79: ca:c9:f8:cf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErnK7hoXLri2JoIW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIzNjkyYjktNjc1Mi00Y2EyLTljZjItOTBiM2JlYTVk NmRjMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk ZGUxODhhNWEtZGM4MC00ZDE4LTkyMmItZDAwZTcxNGFlMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusvbrNHt1pYv6rq08oA4SlpFHnoVhYYAfEkh UvvZzPr7OMe5HLMhQRzA3oYiIun4v6+7o8x9EvyYv07RWGmLOPGiTlAmMuxHHwYH BxZ+1pL2RtMFFAEy1QFzkl4iFXkcmQOThonJb3j2u2gUMa95KLULb9G8/x73M688 p6mEmKG3106hqeIwvqUSecB0C5dYpnTt3ndi+tPtvWPN8sjTYv3b8+zhMv0K1tYK g0qA0RJ0PgrWTGAuvZdKf0crlZ5uYBJjAzduqOywzyN3ev28YfpruQ6SOcUPGpDU kCEHcQ8A2rt4TdZFC9KR2HUVCiq+Iu16MYdl8w8dohuV/SSiRwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCduLhibFNQOH4elhbVAaZ7H0I23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMjM2 OTJiOS02NzUyLTRjYTItOWNmMi05MGIzYmVhNWQ2ZGMvOWE2OGQ4OGMtYjlhYy0z NjRhLWFjN2QtYTM1OTRkM2M3YmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjIzNjkyYjktNjc1Mi00Y2EyLTlj ZjItOTBiM2JlYTVkNmRjLzIyMzY5MmI5LTY3NTItNGNhMi05Y2YyLTkwYjNiZWE1 ZDZkYy5jcmwwHwYDVR0jBBgwFoAUC79B9m3ZXnzoG+auuNxBU4YHba8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMjM2OTJiOS02NzUyLTRjYTItOWNmMi05MGIz YmVhNWQ2ZGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj2IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGaZW75jEpVw7HXIc/1+ob4UIqsLMt0K/ry93Rw17dCgFVY+D+w6E1oe2 Y09Sg2Ne0TAK16RM+Fjngw7ubOwTzwTQeL65vT1oc8FZEXI/2qPJD32dGYorsL8a TKiNcwQBxaeU9/AYU4o2vXjKi6eudgZtijT9Xthl08uTImOTnqtdcIENSOxLJgXF OH40RS6R7Ah5ZAyG3Vu1X9Od4KxRlOnsqNZxME0Vk1qsHli+9FUhbM3wrGYjGgRT BK6aepLp791sgatbf0Ws0ulipsLeBAr0zvRmAgr/I3EBC5Z64if9cl/BYYaAmP7J ZopGLkWEWs2BhP/ql3ckhf55ysn4zw== -----END CERTIFICATE-----Generated at Fri Aug 22 05:12:54 2025 by rpki-client