$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa File: 55d51c77-3557-3d87-8992-8f280225cb6d.roa (raw, json) Hash identifier: n4NGH8dsx+BBYtGCiQ8RCm/SAcpIF1lXAp+JlGb+p6w= Subject key identifier: 4C:52:9A:50:80:7F:A1:E5:D5:6A:9C:FF:48:AA:00:97:93:59:FF:71 Certificate issuer: /CN=a1de494f-30de-436a-a9c5-418424044ca7 Certificate serial: 010D0C9F4328584AE5FAC606DBAFB3E40A364E5C Authority key identifier: C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa Signing time: Mon 18 Aug 2025 14:46:09 +0000 ROA not before: Mon 18 Aug 2025 14:46:09 +0000 ROA not after: Sun 16 Nov 2025 15:46:09 +0000 asID: 7029 IP address blocks: 23.143.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:fa:c6:06:db:af:b3:e4:0a:36:4e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1de494f-30de-436a-a9c5-418424044ca7 Validity Not Before: Aug 18 14:46:09 2025 GMT Not After : Nov 16 15:46:09 2025 GMT Subject: CN=34d18633-3b9b-47f2-9d33-fa9025dcf3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:78:c1:b8:fb:8e:c2:af:f5:91:36:00:d4: dd:de:53:e2:98:73:23:65:c9:d2:1a:78:fb:43:f2: 38:24:09:10:2c:8e:45:ce:7d:bd:3f:12:8f:5a:eb: 11:08:0d:21:fc:78:ef:23:9e:07:88:dc:e3:11:a6: 58:51:df:16:f1:4c:2d:3c:0b:6b:13:8e:d5:8f:f0: e7:4b:50:13:f6:3b:cb:64:f0:80:5b:94:07:3e:9c: f5:a1:7f:cb:77:9f:22:f0:3f:0d:85:03:71:d9:a0: 10:ea:eb:c2:04:e0:2f:c3:1a:fa:24:6c:e0:5b:33: b0:05:88:48:a4:15:9c:9b:e1:d7:45:43:49:76:49: 97:6b:1e:1d:df:89:00:fb:9c:2c:fb:ad:d0:42:1f: 36:95:0b:d4:a6:ed:2d:64:b0:7b:8a:ce:4a:be:73: 43:de:a5:a1:5d:98:5c:7e:20:73:24:92:52:e4:e0: ba:73:5b:00:04:1f:d8:d2:59:ef:66:01:9d:35:ed: 31:c7:10:ea:a5:12:67:2b:d8:83:93:99:74:a6:f6: 2d:49:6b:f3:4e:ad:7e:5f:d0:46:36:01:a8:db:55: dd:a7:5e:59:4e:1c:ab:19:b9:67:30:9f:7c:c3:22: bd:b6:2a:0d:20:cd:96:bf:10:b3:6d:b8:20:7d:15: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:9A:50:80:7F:A1:E5:D5:6A:9C:FF:48:AA:00:97:93:59:FF:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/55d51c77-3557-3d87-8992-8f280225cb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7/a1de494f-30de-436a-a9c5-418424044ca7.crl X509v3 Authority Key Identifier: keyid:C0:EA:21:8A:30:0E:DC:42:EB:E2:E0:75:F9:50:68:AD:02:2D:C2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a1de494f-30de-436a-a9c5-418424044ca7.cer sbgp-ipAddrBlock: critical IPv4: 23.143.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:33:c8:39:45:1d:05:5b:b8:13:e5:2d:ea:70:ad:23:ef:b9: fd:84:80:f0:f9:e1:42:23:80:0b:8f:e5:51:82:e8:16:91:eb: 8c:60:a1:14:94:cd:c9:70:67:7f:52:82:e1:ff:42:28:dd:50: 82:5f:99:77:10:4b:9d:e7:9f:07:57:58:6e:8a:b1:ff:53:5d: 24:0f:2e:38:4d:02:25:7b:7e:66:18:b4:78:2f:42:02:3f:48: 94:02:04:b2:d7:99:28:1b:7c:c6:34:90:e7:f6:b7:9f:e0:5c: 83:df:85:55:17:be:ff:9b:0a:65:a1:ac:5d:27:f7:f9:4a:2c: cb:11:cd:83:52:53:5f:10:50:e2:e8:cc:ba:ef:39:07:04:dc: 78:01:e0:06:d0:c6:f6:ce:7e:65:6c:a2:bf:54:7e:a8:be:02: 09:64:92:1e:a1:72:06:d8:7d:db:6c:ca:a4:cf:51:b1:18:e8: b3:7c:0d:8a:69:81:c8:42:fc:44:ce:a4:fb:a3:86:60:65:f3: ff:98:22:38:14:69:e3:48:ca:0f:c7:0c:97:94:6b:dc:7e:c4: 77:71:0a:2a:1c:1f:2e:69:e6:96:55:44:0d:e9:c9:08:c3:86: 99:dc:9a:09:23:b0:00:f2:d5:72:aa:dc:2c:64:ad:38:49:97: 73:50:ea:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErl+sYG26+z5Ao2TlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkZTQ5NGYtMzBkZS00MzZhLWE5YzUtNDE4NDI0MDQ0 Y2E3MB4XDTI1MDgxODE0NDYwOVoXDTI1MTExNjE1NDYwOVowLzEtMCsGA1UEAxMk MzRkMTg2MzMtM2I5Yi00N2YyLTlkMzMtZmE5MDI1ZGNmM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMp4wbj7jsKv9ZE2ANTd3lPimHMjZcnSGnj7 Q/I4JAkQLI5Fzn29PxKPWusRCA0h/HjvI54HiNzjEaZYUd8W8UwtPAtrE47Vj/Dn S1AT9jvLZPCAW5QHPpz1oX/Ld58i8D8NhQNx2aAQ6uvCBOAvwxr6JGzgWzOwBYhI pBWcm+HXRUNJdkmXax4d34kA+5ws+63QQh82lQvUpu0tZLB7is5KvnND3qWhXZhc fiBzJJJS5OC6c1sABB/Y0lnvZgGdNe0xxxDqpRJnK9iDk5l0pvYtSWvzTq1+X9BG NgGo21Xdp15ZThyrGblnMJ98wyK9tioNIM2WvxCzbbggfRXZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExSmlCAf6Hl1Wqc/0iqAJeTWf9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMWRl NDk0Zi0zMGRlLTQzNmEtYTljNS00MTg0MjQwNDRjYTcvNTVkNTFjNzctMzU1Ny0z ZDg3LTg5OTItOGYyODAyMjVjYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTFkZTQ5NGYtMzBkZS00MzZhLWE5 YzUtNDE4NDI0MDQ0Y2E3L2ExZGU0OTRmLTMwZGUtNDM2YS1hOWM1LTQxODQyNDA0 NGNhNy5jcmwwHwYDVR0jBBgwFoAUwOohijAO3ELr4uB1+VBorQItwjIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMWRlNDk0Zi0zMGRlLTQzNmEtYTljNS00MTg0 MjQwNDRjYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4zyDlFHQVbuBPlLepwrSPvuf2EgPD54UIjgAuP5VGC6BaR64xgoRSU zclwZ39SguH/QijdUIJfmXcQS53nnwdXWG6Ksf9TXSQPLjhNAiV7fmYYtHgvQgI/ SJQCBLLXmSgbfMY0kOf2t5/gXIPfhVUXvv+bCmWhrF0n9/lKLMsRzYNSU18QUOLo zLrvOQcE3HgB4AbQxvbOfmVsor9Ufqi+Aglkkh6hcgbYfdtsyqTPUbEY6LN8DYpp gchC/ETOpPujhmBl8/+YIjgUaeNIyg/HDJeUa9x+xHdxCiocHy5p5pZVRA3pyQjD hpncmgkjsADy1XKq3CxkrThJl3NQ6k0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:40:13 2025 by rpki-client