$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa File: 47c9278e-dc66-39c2-884a-deec4ee4f615.roa (raw, json) Hash identifier: qijlBg68ZCSO2IEztnFuOI0MG28CX0QYlrLYIYYcMhQ= Subject key identifier: 52:49:9C:54:AF:83:32:0A:2C:65:D6:04:22:1D:EC:D8:36:80:7A:AB Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Certificate serial: 010D0C9F4328584A7A4B401CF13875D9F6A19580 Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20473 IP address blocks: 23.158.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:40:1c:f1:38:75:d9:f6:a1:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=47cb8e86-e74b-48b9-88e2-8a9b6f055bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:09:5c:75:4b:65:a0:25:4f:96:34:66:f7: f8:1b:4d:98:01:16:e4:10:fa:87:d6:f4:59:c0:d7: d0:28:34:c0:e0:b8:f7:d2:aa:70:d6:13:a5:67:e8: ae:bc:36:6c:4f:2c:ac:20:c3:54:d7:d8:e8:44:53: 55:15:3c:64:e6:c3:f0:31:80:0b:e1:86:c7:a3:ea: c6:8e:b5:4e:18:8e:82:05:ce:2f:4e:44:f2:da:1f: 72:fc:f9:7e:69:22:b8:12:80:70:88:bb:da:c8:64: 74:a9:ff:1a:11:32:db:85:29:ae:4d:a3:6a:70:9a: 03:09:02:be:ec:e1:ff:cd:9e:42:89:4a:25:ba:5a: cd:64:7a:03:cf:74:d4:dc:82:44:2d:68:70:3b:e8: 52:d8:a8:bc:07:76:bb:4c:07:9c:21:dc:57:8a:e0: 88:0f:56:a3:b4:89:25:73:cb:68:62:10:a4:bf:26: 02:8e:1d:1d:35:54:55:43:ee:00:8f:39:af:9f:63: 11:51:9e:cd:8b:11:bd:a0:2b:8f:a1:e6:b3:b8:87: 0a:77:f9:9e:b8:52:09:bf:4f:55:79:dc:bd:63:0d: 7b:83:1f:2c:47:c4:70:22:5f:0c:31:56:08:88:1f: bd:cb:f9:fe:c4:ed:cd:94:2f:4c:40:43:3c:8d:ad: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:9C:54:AF:83:32:0A:2C:65:D6:04:22:1D:EC:D8:36:80:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl X509v3 Authority Key Identifier: keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer sbgp-ipAddrBlock: critical IPv4: 23.158.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:61:e4:2a:39:64:ff:ce:cc:54:02:22:53:bf:3c:6d:e1: dc:38:b0:b2:f9:be:b1:59:99:f2:ea:5e:87:05:aa:37:06:39: 43:61:6d:2f:1d:67:fc:34:e8:1c:dc:fe:8f:da:b3:f4:e3:35: 2a:fb:2d:bd:9d:13:64:3d:2b:69:43:bd:12:24:c9:72:30:14: 27:bf:29:46:1b:34:f3:45:b1:a7:29:8a:81:fc:05:4a:81:8b: 78:a5:3c:81:da:35:2a:50:40:e6:0b:94:9b:db:a1:f2:67:65: 83:70:19:82:04:6b:24:d9:e3:59:2b:6f:53:f7:ed:42:e5:99: 1d:26:85:33:74:80:96:6f:d6:74:e6:40:1c:2d:72:7b:8c:03: e8:69:96:7a:64:8a:be:79:e8:54:be:98:b0:b8:74:6d:8d:da: ca:09:45:13:52:0c:4f:85:92:8a:bd:aa:9c:c6:dd:79:77:d3: e1:17:cb:51:f4:09:88:e0:b2:6a:d8:95:f5:2c:75:96:0c:be: 36:d3:8d:c3:2e:67:0d:fa:e5:5c:5b:46:fd:0a:c7:c0:61:88: 80:1f:38:2b:48:2f:e7:6c:91:09:51:a6:5f:5e:b9:81:02:56: 20:f9:df:ae:0d:de:ab:56:4d:0a:87:e5:f4:d8:69:38:95:61: a9:1b:03:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0Ac8Th12fahlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4Zjdl MjA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NDdjYjhlODYtZTc0Yi00OGI5LTg4ZTItOGE5YjZmMDU1YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5AJXHVLZaAlT5Y0Zvf4G02YARbkEPqH1vRZ wNfQKDTA4Lj30qpw1hOlZ+iuvDZsTyysIMNU19joRFNVFTxk5sPwMYAL4YbHo+rG jrVOGI6CBc4vTkTy2h9y/Pl+aSK4EoBwiLvayGR0qf8aETLbhSmuTaNqcJoDCQK+ 7OH/zZ5CiUolulrNZHoDz3TU3IJELWhwO+hS2Ki8B3a7TAecIdxXiuCID1ajtIkl c8toYhCkvyYCjh0dNVRVQ+4Ajzmvn2MRUZ7NixG9oCuPoeazuIcKd/meuFIJv09V edy9Yw17gx8sR8RwIl8MMVYIiB+9y/n+xO3NlC9MQEM8ja2JJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJJnFSvgzIKLGXWBCId7Ng2gHqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVh NGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvNDdjOTI3OGUtZGM2Ni0z OWMyLTg4NGEtZGVlYzRlZTRmNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmZlYTRmNmEtYmI0ZS00NmJlLWIz MjctMzMwYmY4ZjdlMjA5LzJmZWE0ZjZhLWJiNGUtNDZiZS1iMzI3LTMzMGJmOGY3 ZTIwOS5jcmwwHwYDVR0jBBgwFoAURri9dl6NDsmaHWINCw4t6L5O1xEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBi ZjhmN2UyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF55YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACllYeQqOWT/zsxUAiJTvzxt4dw4sLL5vrFZmfLqXocFqjcGOUNhbS8d Z/w06Bzc/o/as/TjNSr7Lb2dE2Q9K2lDvRIkyXIwFCe/KUYbNPNFsacpioH8BUqB i3ilPIHaNSpQQOYLlJvbofJnZYNwGYIEayTZ41krb1P37ULlmR0mhTN0gJZv1nTm QBwtcnuMA+hplnpkir556FS+mLC4dG2N2soJRRNSDE+Fkoq9qpzG3Xl30+EXy1H0 CYjgsmrYlfUsdZYMvjbTjcMuZw365VxbRv0Kx8BhiIAfOCtIL+dskQlRpl9euYEC ViD5364N3qtWTQqH5fTYaTiVYakbA+A= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:49 2025 by rpki-client