$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/5ab5b997-24a3-3a5e-af31-1535a98731da.roa File: 5ab5b997-24a3-3a5e-af31-1535a98731da.roa (raw, json) Hash identifier: sJCQ3JXu8qsI9xRzsKZGrKLrublUIh9dqbYCfiUo7WQ= Subject key identifier: DC:47:21:7C:D6:AD:ED:0D:0E:39:05:05:23:7F:D4:D3:66:6A:A7:B8 Certificate issuer: /CN=3cc63d59-ee3c-4449-a0af-cbde753e4560 Certificate serial: 010D0C9F4328584ACEEFBD6060D0A497528FD8A0 Authority key identifier: 33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/5ab5b997-24a3-3a5e-af31-1535a98731da.roa Signing time: Sun 10 Aug 2025 08:40:20 +0000 ROA not before: Sun 10 Aug 2025 08:40:20 +0000 ROA not after: Sat 08 Nov 2025 09:40:20 +0000 asID: 2914 IP address blocks: 23.142.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:ef:bd:60:60:d0:a4:97:52:8f:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc63d59-ee3c-4449-a0af-cbde753e4560 Validity Not Before: Aug 10 08:40:20 2025 GMT Not After : Nov 8 09:40:20 2025 GMT Subject: CN=99a41368-bce3-4828-b552-0e5c7c3cc644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:4d:30:8b:5f:9d:48:4b:ee:06:18:8c:2d: ec:f2:a7:d1:09:bd:82:ee:6f:d6:cd:6a:10:a7:ba: 36:68:a7:49:66:7e:cc:93:83:94:03:61:4b:7f:b3: aa:67:c3:53:be:f1:10:58:64:44:2e:3b:3c:f5:d8: bc:10:bf:c5:03:1c:9b:e3:b9:fe:34:83:65:de:95: bb:34:46:65:aa:d6:14:32:78:10:84:a2:40:a6:68: b0:d3:6b:a6:4b:b3:87:f1:a5:51:42:fd:1a:e6:e2: 03:d6:f1:e9:50:e2:98:8d:bd:2a:c5:6a:12:0f:ef: c1:98:d3:60:d2:a5:f1:21:78:a1:5f:32:47:50:53: 3d:f3:db:ab:cd:14:d0:b8:ca:7a:18:3e:03:19:a1: da:5e:08:d8:0b:97:0e:de:5b:a7:4f:1e:e4:55:23: bf:9e:51:d2:8f:08:9d:35:19:90:d2:1c:0e:71:f9: 8d:26:9c:f3:4b:7d:8c:ac:1a:7c:01:0e:a4:b9:47: 19:4e:fd:05:f8:42:e1:d6:08:91:52:83:9a:71:a5: d3:f3:15:0a:46:11:db:99:25:c8:5e:8d:4d:1d:2e: 03:5c:70:b7:24:4a:68:dc:06:ff:83:2a:1c:87:e6: 4e:e8:5f:6d:90:61:a6:9f:9e:20:c7:0b:21:48:df: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:47:21:7C:D6:AD:ED:0D:0E:39:05:05:23:7F:D4:D3:66:6A:A7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/5ab5b997-24a3-3a5e-af31-1535a98731da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.crl X509v3 Authority Key Identifier: keyid:33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer sbgp-ipAddrBlock: critical IPv4: 23.142.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:02:29:9f:32:f2:c3:7f:18:64:a3:8c:78:5b:8f:14:d5:41: 91:88:92:c1:7c:c3:97:f1:b0:6c:ec:1b:e5:00:b5:94:5f:c6: d1:86:06:15:6e:18:f6:20:bc:86:51:e0:d3:ff:2e:ff:5a:70: 23:cf:06:ff:0d:60:05:21:69:6a:d8:8a:0e:40:a7:7f:9b:df: 37:4e:87:c4:7a:50:49:74:d9:ab:bc:fd:b8:ef:e7:ed:1f:10: 8e:6a:a3:28:49:cf:3d:63:57:91:b0:49:b5:80:26:ab:3d:3c: d9:ad:31:94:f1:1f:8e:b1:2d:f0:fa:0c:a0:d3:be:64:7f:ef: 63:55:03:f3:55:b0:65:07:25:48:0d:df:7d:51:4c:b9:fc:34: c5:57:fa:c6:44:d4:52:34:67:3c:be:33:5a:cf:eb:b2:c8:20: 03:75:21:b6:be:eb:5c:0c:e7:48:bf:fb:18:96:35:1c:0d:54: 1f:d7:cd:a8:ee:78:c2:39:b6:ab:22:01:12:9a:c8:4b:33:8f: 5f:47:64:83:23:57:73:84:3b:60:9d:b9:3a:67:ea:c7:2a:bb: 16:fa:6d:ae:c5:e8:ac:1f:29:35:ee:44:05:91:e5:8f:80:a4: 8e:e9:09:f0:68:b9:74:4d:b3:9d:19:ca:1d:a4:c1:66:44:d2: 63:c5:be:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErO771gYNCkl1KP2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjNjNkNTktZWUzYy00NDQ5LWEwYWYtY2JkZTc1M2U0 NTYwMB4XDTI1MDgxMDA4NDAyMFoXDTI1MTEwODA5NDAyMFowLzEtMCsGA1UEAxMk OTlhNDEzNjgtYmNlMy00ODI4LWI1NTItMGU1YzdjM2NjNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyhNMItfnUhL7gYYjC3s8qfRCb2C7m/WzWoQ p7o2aKdJZn7Mk4OUA2FLf7OqZ8NTvvEQWGRELjs89di8EL/FAxyb47n+NINl3pW7 NEZlqtYUMngQhKJApmiw02umS7OH8aVRQv0a5uID1vHpUOKYjb0qxWoSD+/BmNNg 0qXxIXihXzJHUFM989urzRTQuMp6GD4DGaHaXgjYC5cO3lunTx7kVSO/nlHSjwid NRmQ0hwOcfmNJpzzS32MrBp8AQ6kuUcZTv0F+ELh1giRUoOacaXT8xUKRhHbmSXI Xo1NHS4DXHC3JEpo3Ab/gyoch+ZO6F9tkGGmn54gxwshSN8OpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxHIXzWre0NDjkFBSN/1NNmaqe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zY2M2 M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRlNzUzZTQ1NjAvNWFiNWI5OTctMjRhMy0z YTVlLWFmMzEtMTUzNWE5ODczMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2NjNjNkNTktZWUzYy00NDQ5LWEw YWYtY2JkZTc1M2U0NTYwLzNjYzYzZDU5LWVlM2MtNDQ0OS1hMGFmLWNiZGU3NTNl NDU2MC5jcmwwHwYDVR0jBBgwFoAUM60qUrs7C0AE3IAe3c9u67qtiRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zY2M2M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRl NzUzZTQ1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF460MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcCKZ8y8sN/GGSjjHhbjxTVQZGIksF8w5fxsGzsG+UAtZRfxtGGBhVu GPYgvIZR4NP/Lv9acCPPBv8NYAUhaWrYig5Ap3+b3zdOh8R6UEl02au8/bjv5+0f EI5qoyhJzz1jV5GwSbWAJqs9PNmtMZTxH46xLfD6DKDTvmR/72NVA/NVsGUHJUgN 331RTLn8NMVX+sZE1FI0Zzy+M1rP67LIIAN1Iba+61wM50i/+xiWNRwNVB/Xzaju eMI5tqsiARKayEszj19HZIMjV3OEO2CduTpn6scquxb6ba7F6KwfKTXuRAWR5Y+A pI7pCfBouXRNs50Zyh2kwWZE0mPFvsI= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:34 2025 by rpki-client