$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa File: aed05680-7f44-3f44-8086-236e2e2c39d6.roa (raw, json) Hash identifier: sw7T79LUNfllVeW9e0JV5ptEYU3fukD5lOuA9gw9XtA= Subject key identifier: F2:6F:64:87:1E:18:4A:F7:55:01:CC:85:47:96:7D:24:D0:84:4C:BB Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584ACB08767973B4FB1973465700 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa Signing time: Fri 08 Aug 2025 23:06:55 +0000 ROA not before: Fri 08 Aug 2025 23:06:55 +0000 ROA not after: Fri 07 Nov 2025 00:06:55 +0000 asID: 152179 IP address blocks: 23.142.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:08:76:79:73:b4:fb:19:73:46:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Aug 8 23:06:55 2025 GMT Not After : Nov 7 00:06:55 2025 GMT Subject: CN=6d44126a-819b-4788-91e7-0e39345a7efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:ac:b1:81:10:89:31:c1:86:c2:e8:c3:d0: 09:7e:d1:09:e2:23:41:d1:2a:54:d7:18:f6:c4:68: 41:df:c1:03:aa:12:1e:0b:7c:ca:7c:9c:d2:c5:96: 3a:51:e5:de:a0:f9:4c:02:46:6f:ea:3f:c2:cf:9c: 46:ed:3e:25:5c:0b:24:60:de:d1:e4:9b:fc:4c:e9: da:df:e5:82:bf:22:1e:30:90:66:b2:43:b6:44:29: 27:1e:19:9b:31:85:88:c0:d8:20:5d:9b:dd:27:e8: 8b:ce:f5:77:30:e7:1e:dd:ed:0f:8f:51:e7:a8:9b: 63:70:83:8f:0d:9c:98:c8:a2:3c:c6:ad:be:2b:3b: 1c:3c:a5:3a:34:b9:45:f3:54:76:80:1d:98:6e:76: 59:54:aa:13:f0:0a:b7:99:83:4b:8d:78:75:d6:54: 2c:96:cc:37:60:48:6b:c2:b9:22:a0:c2:dd:61:0c: bf:75:1e:19:9a:65:70:e9:26:ec:44:c5:82:38:e5: 7a:e9:e9:bd:d5:8c:7d:4c:54:5f:01:df:9a:76:d4: 22:7e:f2:cc:bd:d2:6e:fa:3a:2c:ff:ea:3a:86:e3: a9:86:b8:a7:2a:9b:a5:48:c6:81:6f:27:b9:a5:8f: c3:40:35:54:2d:9d:ae:9b:bd:c2:0d:ce:51:1b:da: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:64:87:1E:18:4A:F7:55:01:CC:85:47:96:7D:24:D0:84:4C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: 23.142.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:21:39:e4:03:56:bc:8a:9b:19:c1:64:26:4f:09:2a:a2:e7: 21:8b:92:e9:7e:d0:7f:d9:04:21:dc:73:79:85:3f:fb:ac:1c: 85:b5:21:96:2b:1d:ab:35:69:c4:a4:bd:4f:95:ea:b1:ae:d7: f3:00:21:06:91:3f:1a:5b:84:36:4e:6d:b4:91:cc:f8:ad:f9: ac:a4:2c:01:cd:c1:e1:4b:5d:b5:36:1a:c6:5f:47:3f:b4:7a: ca:10:87:04:7b:1d:02:c9:22:ad:4f:bb:0c:21:a8:8d:5d:fb: 63:17:b1:b7:fb:1c:dd:ae:8c:35:cc:c9:79:4f:96:6b:05:0a: 3d:c9:99:43:c8:d7:a3:86:ee:8a:fc:64:54:99:ca:ed:d4:27: ac:ae:87:5f:52:3f:bc:7e:15:33:74:1d:12:06:59:ec:51:6a: bf:1b:4d:65:8e:d5:fd:42:00:d7:89:b6:2a:cc:a2:ea:59:ba: a5:77:05:11:a7:cb:14:17:30:77:95:51:12:b5:6c:e4:41:51: df:4a:5b:08:89:5f:b0:c0:1a:25:c5:e3:65:1f:b8:57:ea:d5: a6:9d:71:40:b6:1d:e1:34:f9:ea:8f:e3:44:03:3c:8d:4d:f7: 8f:11:0e:89:57:2b:10:39:f1:d9:a6:ea:07:83:5d:f6:49:fa: a6:f1:fd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLCHZ5c7T7GXNGVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI1MDgwODIzMDY1NVoXDTI1MTEwNzAwMDY1NVowLzEtMCsGA1UEAxMk NmQ0NDEyNmEtODE5Yi00Nzg4LTkxZTctMGUzOTM0NWE3ZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGSssYEQiTHBhsLow9AJftEJ4iNB0SpU1xj2 xGhB38EDqhIeC3zKfJzSxZY6UeXeoPlMAkZv6j/Cz5xG7T4lXAskYN7R5Jv8TOna 3+WCvyIeMJBmskO2RCknHhmbMYWIwNggXZvdJ+iLzvV3MOce3e0Pj1HnqJtjcIOP DZyYyKI8xq2+KzscPKU6NLlF81R2gB2YbnZZVKoT8Aq3mYNLjXh11lQslsw3YEhr wrkioMLdYQy/dR4ZmmVw6SbsRMWCOOV66em91Yx9TFRfAd+adtQifvLMvdJu+jos /+o6huOphrinKpulSMaBbye5pY/DQDVULZ2um73CDc5RG9rRkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJvZIceGEr3VQHMhUeWfSTQhEy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvYWVkMDU2ODAtN2Y0NC0z ZjQ0LTgwODYtMjM2ZTJlMmMzOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYhOeQDVryKmxnBZCZPCSqi5yGLkul+0H/ZBCHcc3mFP/usHIW1IZYr Has1acSkvU+V6rGu1/MAIQaRPxpbhDZObbSRzPit+aykLAHNweFLXbU2GsZfRz+0 esoQhwR7HQLJIq1PuwwhqI1d+2MXsbf7HN2ujDXMyXlPlmsFCj3JmUPI16OG7or8 ZFSZyu3UJ6yuh19SP7x+FTN0HRIGWexRar8bTWWO1f1CANeJtirMoupZuqV3BRGn yxQXMHeVURK1bORBUd9KWwiJX7DAGiXF42UfuFfq1aadcUC2HeE0+eqP40QDPI1N 948RDolXKxA58dmm6geDXfZJ+qbx/Qs= -----END CERTIFICATE-----Generated at Wed Aug 20 08:05:18 2025 by rpki-client