$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa File: 4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa (raw, json) Hash identifier: AM0/a1L4VcJnWcOSurbaJ/0cby5JNsT/H32LOtlWns4= Subject key identifier: 1B:CC:F1:FB:F4:80:3A:EB:D1:E1:A2:7E:49:A0:A0:86:70:6C:D2:6D Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584A89ECAC4E3B15593FA8D59660 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa Signing time: Wed 16 Jul 2025 15:23:22 +0000 ROA not before: Wed 16 Jul 2025 15:23:22 +0000 ROA not after: Tue 14 Oct 2025 15:23:22 +0000 asID: 13356 IP address blocks: 23.161.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:ec:ac:4e:3b:15:59:3f:a8:d5:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Jul 16 15:23:22 2025 GMT Not After : Oct 14 15:23:22 2025 GMT Subject: CN=f1414a5d-c8c4-45ed-943d-617458d42ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:e0:2e:90:32:be:78:15:54:45:f0:91:9f: 39:a5:a0:e4:4a:2b:4c:e4:68:c1:f4:0f:f7:5a:4f: 97:e2:37:6b:fd:38:7d:9b:c3:6f:49:8b:04:6d:e1: c4:11:a0:e6:da:dc:8c:29:69:2d:a4:f0:87:cc:fe: d1:87:f4:29:3e:05:44:27:ed:dc:91:5d:87:f1:12: bb:7c:0d:e3:0f:3a:76:b0:60:c2:d9:89:2e:d7:20: 6d:32:65:82:35:23:91:96:d7:0a:08:ba:06:10:f6: a1:7b:85:d3:08:d4:a4:14:59:dc:08:a2:a9:be:6d: 28:b9:bd:f5:f0:ad:5d:8e:30:1e:c0:94:af:94:4c: fd:1d:38:3a:cd:0f:34:e9:5c:2b:6d:88:ef:06:c3: 60:53:94:d6:52:66:25:79:42:a1:05:c9:bb:7d:1d: d9:51:7d:00:91:d9:d5:79:7b:83:3c:33:75:5d:32: bf:53:5b:9b:ba:1d:a2:7e:51:02:fd:57:56:13:a5: 6f:1b:92:b3:be:6d:5d:5c:ff:d1:d8:ab:1f:b7:84: 6b:b6:c8:e8:69:ae:49:86:96:a3:da:a8:e5:55:3c: c9:85:cb:d2:a5:90:2f:5a:0f:0d:50:c9:95:7c:5b: ef:de:62:ce:fd:b4:29:4c:f8:ed:94:b0:5a:8e:f9: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:F1:FB:F4:80:3A:EB:D1:E1:A2:7E:49:A0:A0:86:70:6C:D2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv4: 23.161.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f0:30:43:8e:84:48:15:43:b6:40:21:2a:1d:ba:17:6d:50: e5:46:87:ce:57:79:d8:2e:16:b9:71:56:23:37:cd:fe:54:31: 04:ed:37:a8:1f:18:18:a8:ac:23:4f:b8:eb:f4:a9:05:77:10: 81:5c:5d:50:b6:36:c8:62:0d:94:c6:b8:69:27:fe:c5:19:b6: 88:ef:29:0a:35:80:58:99:33:0c:bb:be:47:b4:9f:1c:b5:7c: 25:da:36:cf:35:c0:2b:b3:90:3c:6a:91:86:b3:14:26:0f:10: 6e:23:f8:cf:b4:4e:8a:6b:ff:6b:72:62:34:d7:82:36:68:3c: 09:98:7e:1a:bc:6e:4e:99:c6:3b:07:fb:d4:de:62:5b:cf:16: b9:97:13:e4:c6:c7:36:e0:2f:44:16:61:ce:06:65:81:25:af: be:ff:8f:96:cf:d0:48:1f:86:d6:eb:52:43:07:59:af:b1:fe: 9d:b7:a3:cb:e7:0a:ee:bd:1f:db:6b:17:80:f6:77:af:3e:2d: 14:09:48:14:10:84:41:11:65:a9:4c:86:f7:69:d8:96:20:f3: 19:9e:46:dc:ee:4d:20:b8:1f:bb:8b:e2:78:99:9e:93:5a:29: da:59:60:75:a8:bb:03:19:7d:92:64:8e:d2:45:a2:53:21:0c: fb:95:f0:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJ7KxOOxVZP6jVlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI1MDcxNjE1MjMyMloXDTI1MTAxNDE1MjMyMlowLzEtMCsGA1UEAxMk ZjE0MTRhNWQtYzhjNC00NWVkLTk0M2QtNjE3NDU4ZDQyZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8jgLpAyvngVVEXwkZ85paDkSitM5GjB9A/3 Wk+X4jdr/Th9m8NvSYsEbeHEEaDm2tyMKWktpPCHzP7Rh/QpPgVEJ+3ckV2H8RK7 fA3jDzp2sGDC2Yku1yBtMmWCNSORltcKCLoGEPahe4XTCNSkFFncCKKpvm0oub31 8K1djjAewJSvlEz9HTg6zQ806VwrbYjvBsNgU5TWUmYleUKhBcm7fR3ZUX0AkdnV eXuDPDN1XTK/U1ubuh2iflEC/VdWE6VvG5Kzvm1dXP/R2Ksft4Rrtsjoaa5Jhpaj 2qjlVTzJhcvSpZAvWg8NUMmVfFvv3mLO/bQpTPjtlLBajvk8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvM8fv0gDrr0eGifkmgoIZwbNJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvNGU3ZTQ5ZjctMzVkNC0z MDFiLThlZDgtNzI4MGRkYWI1NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPwMEOOhEgVQ7ZAISoduhdtUOVGh85XedguFrlxViM3zf5UMQTtN6gf GBiorCNPuOv0qQV3EIFcXVC2NshiDZTGuGkn/sUZtojvKQo1gFiZMwy7vke0nxy1 fCXaNs81wCuzkDxqkYazFCYPEG4j+M+0Topr/2tyYjTXgjZoPAmYfhq8bk6ZxjsH +9TeYlvPFrmXE+TGxzbgL0QWYc4GZYElr77/j5bP0EgfhtbrUkMHWa+x/p23o8vn Cu69H9trF4D2d68+LRQJSBQQhEERZalMhvdp2JYg8xmeRtzuTSC4H7uL4niZnpNa KdpZYHWouwMZfZJkjtJFolMhDPuV8C0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:49:25 2025 by rpki-client