$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa File: 6578b62d-2c2a-3685-bdcd-bf624417a492.roa (raw, json) Hash identifier: zJfDcuTUVHtPYdUGrdh4eNJHC98D7cmRRHA3toZEn2k= Subject key identifier: 37:30:EF:17:C3:C3:AB:E4:DE:4D:F0:09:A5:87:CC:E5:C4:04:72:B3 Certificate issuer: /CN=d84b0325-0327-4cbf-bc76-4e79de05793d Certificate serial: 010D0C9F4328584A814643D56B4A4FD54DE4FD00 Authority key identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 395044 IP address blocks: 23.145.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:43:d5:6b:4a:4f:d5:4d:e4:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84b0325-0327-4cbf-bc76-4e79de05793d Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=33aeb587-49c0-4310-915e-d9418a80390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:5a:c5:f8:00:de:19:49:01:d7:19:d3:02: 49:84:03:b7:75:ec:f4:3d:c4:63:af:cc:3f:0c:5e: 23:11:c1:de:10:98:c7:3c:fb:88:3e:4c:bb:44:01: a7:7c:6a:a9:22:e5:68:23:90:35:f3:75:12:d8:f1: 66:cb:f9:32:bc:65:3f:26:d2:72:b0:ed:26:c4:fd: ee:30:ce:7a:4e:f0:87:32:25:4f:d4:9b:32:85:85: af:0c:7b:eb:e3:a2:50:60:c7:1b:b7:37:fb:cd:cf: a4:b0:34:a5:a7:86:69:e9:7c:45:c5:91:1b:b0:fa: da:21:b1:12:a8:dc:47:55:4e:b1:9a:51:32:78:9f: 1e:e1:44:ab:59:a7:b9:f6:38:e1:c4:93:7b:85:26: c3:cd:ef:01:0a:3d:47:b3:fc:8c:7f:f9:2a:4a:52: c3:56:50:6f:ae:86:89:98:57:3d:60:bf:46:56:16: fd:fa:de:16:f9:5a:0b:1f:85:ed:da:d6:66:1b:de: 34:d4:ce:99:ed:93:e1:12:c2:42:61:b1:41:8e:35: 76:dc:fa:28:5b:35:55:39:d8:aa:20:71:76:9c:50: 7d:76:e7:7a:8d:c9:f5:72:8f:9d:36:ab:a9:17:0e: 89:0d:09:6c:cb:1e:e8:20:02:ec:f1:f0:a6:43:cc: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:EF:17:C3:C3:AB:E4:DE:4D:F0:09:A5:87:CC:E5:C4:04:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl X509v3 Authority Key Identifier: keyid:AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer sbgp-ipAddrBlock: critical IPv4: 23.145.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c0:e9:22:54:f9:e0:8d:53:ff:b1:ea:83:60:61:ca:d3:b3: 1c:3a:fa:97:f0:a9:0f:16:9a:3f:c7:a1:17:69:16:04:d6:e6: ff:8f:e9:2d:f9:ba:d6:e2:39:82:ab:72:5f:48:20:71:61:7f: 93:b2:21:dc:9e:7e:88:93:6f:66:a9:d9:47:d7:00:c3:7d:a1: 03:79:ee:bf:2a:ce:4c:cf:d3:17:bf:ac:45:74:66:06:02:9f: 3f:f2:fc:f3:3c:1f:8b:81:de:92:73:99:de:c6:43:bd:29:75: 27:2c:94:50:b6:ac:e3:4f:cf:24:38:7c:24:8d:34:a2:1c:df: 2e:ba:eb:11:f1:8b:21:8d:7b:1e:cd:f6:fc:53:80:21:f9:6f: 69:fa:ff:b6:27:94:69:d2:d6:4f:93:ea:01:a9:ef:8b:ef:30: 7e:d8:4b:3b:d0:41:f3:2c:24:1f:1b:6b:4c:d7:90:07:ae:49: 0c:da:95:fc:5a:fd:8b:bb:d6:18:2a:42:49:c7:b3:ab:64:ab: e4:5e:80:cd:45:4f:bf:f5:6b:0b:7e:41:38:af:b8:f2:f3:96: df:ea:8a:a5:e9:41:96:72:fa:1c:71:eb:52:ae:e8:f3:57:72: 19:5f:b1:08:3a:5d:53:b2:cc:49:43:b8:a6:89:a6:f9:dc:29: e2:63:c9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkPVa0pP1U3k/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0YjAzMjUtMDMyNy00Y2JmLWJjNzYtNGU3OWRlMDU3 OTNkMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzNhZWI1ODctNDljMC00MzEwLTkxNWUtZDk0MThhODAzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeFaxfgA3hlJAdcZ0wJJhAO3dez0PcRjr8w/ DF4jEcHeEJjHPPuIPky7RAGnfGqpIuVoI5A183US2PFmy/kyvGU/JtJysO0mxP3u MM56TvCHMiVP1JsyhYWvDHvr46JQYMcbtzf7zc+ksDSlp4Zp6XxFxZEbsPraIbES qNxHVU6xmlEyeJ8e4USrWae59jjhxJN7hSbDze8BCj1Hs/yMf/kqSlLDVlBvroaJ mFc9YL9GVhb9+t4W+VoLH4Xt2tZmG9401M6Z7ZPhEsJCYbFBjjV23PooWzVVOdiq IHF2nFB9dud6jcn1co+dNqupFw6JDQlsyx7oIALs8fCmQ8x+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcw7xfDw6vk3k3wCaWHzOXEBHKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kODRi MDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5ZGUwNTc5M2QvNjU3OGI2MmQtMmMyYS0z Njg1LWJkY2QtYmY2MjQ0MTdhNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDg0YjAzMjUtMDMyNy00Y2JmLWJj NzYtNGU3OWRlMDU3OTNkL2Q4NGIwMzI1LTAzMjctNGNiZi1iYzc2LTRlNzlkZTA1 NzkzZC5jcmwwHwYDVR0jBBgwFoAUrr2CP90nqZFk42nFNB0ly2CQo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kODRiMDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5 ZGUwNTc5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5FYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbA6SJU+eCNU/+x6oNgYcrTsxw6+pfwqQ8Wmj/HoRdpFgTW5v+P6S35 utbiOYKrcl9IIHFhf5OyIdyefoiTb2ap2UfXAMN9oQN57r8qzkzP0xe/rEV0ZgYC nz/y/PM8H4uB3pJzmd7GQ70pdScslFC2rONPzyQ4fCSNNKIc3y666xHxiyGNex7N 9vxTgCH5b2n6/7YnlGnS1k+T6gGp74vvMH7YSzvQQfMsJB8ba0zXkAeuSQzalfxa /Yu71hgqQknHs6tkq+RegM1FT7/1awt+QTivuPLzlt/qiqXpQZZy+hxx61Ku6PNX chlfsQg6XVOyzElDuKaJpvncKeJjydA= -----END CERTIFICATE-----Generated at Tue Aug 12 22:52:42 2025 by rpki-client