$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa File: 8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json) Hash identifier: aw1xfVDhIUB6c+/+CEldA5/Z9XQP065HjcpbVbg4Pc8= Subject key identifier: 64:97:2E:35:76:98:8E:17:2F:B5:80:EA:6D:A7:18:40:DF:48:84:35 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ABD4B931D31DBCDF309AA1830 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 393795 IP address blocks: 8.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:93:1d:31:db:cd:f3:09:aa:18:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=01e684e5-783b-4590-99af-2b3990ae5f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:b0:0a:8b:cf:ee:5e:e1:ce:08:3e:f3:ac: ec:73:30:26:6e:45:02:8e:1c:b1:81:34:b6:1e:bb: 7c:64:76:3b:a0:ff:e4:d6:d4:89:94:51:fa:3d:40: a4:29:99:d8:8b:54:c8:0d:c5:2f:98:b2:92:fd:df: 48:8a:61:dc:1c:e8:9f:36:42:e2:d2:e4:f8:9e:1f: 70:6c:7e:3d:c4:e0:4c:d8:b0:5f:ac:23:ce:e5:08: 15:d4:b6:cd:87:28:e6:9a:98:aa:5d:ff:be:88:ff: f4:07:db:f6:33:6b:8f:67:fb:79:c6:1c:42:44:29: 97:32:8e:57:84:56:71:13:f1:89:96:ba:6e:39:38: e3:ab:17:4c:f6:9d:3e:be:49:68:c9:85:98:f5:d0: da:8e:42:91:a6:dd:a7:68:7b:42:0e:53:c9:38:47: a1:ae:ba:c5:23:67:ef:93:c0:b4:be:db:db:06:63: 60:03:d0:f6:0d:4e:f4:b8:5e:c8:6b:8e:cc:84:e1: 9b:e0:bd:22:10:17:dd:57:ba:e7:84:3e:a0:36:39: 0f:f0:da:1f:bd:5d:d6:fc:02:83:ab:cd:e5:da:9d: 52:69:16:06:98:50:07:e7:c3:1d:10:e2:d2:8f:21: 38:83:de:71:1c:1c:43:59:5e:5e:c8:e5:96:25:a5: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:97:2E:35:76:98:8E:17:2F:B5:80:EA:6D:A7:18:40:DF:48:84:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:19:dc:46:56:dc:31:74:ae:5d:2f:54:76:b0:8f:42:b2:b5: 70:8a:cf:ae:22:66:c0:a5:98:9a:5c:ee:00:c5:55:7d:c1:59: 2d:34:2b:df:7a:74:c5:a9:2a:80:0e:42:9b:b7:01:e8:a1:11: 8d:e6:ba:dc:6d:41:63:4b:b0:fc:1b:23:ba:63:16:e2:2f:a2: 82:8c:52:a3:35:92:b5:98:a7:ee:b5:31:dd:5b:2e:ca:a5:1f: 19:23:3f:00:bf:d6:69:ce:04:4f:7b:c9:62:e1:1a:c4:bd:ed: 82:1b:0d:95:02:8d:a4:cc:c6:8d:c8:64:c7:9f:7c:6a:50:9a: 6a:00:1c:e6:3f:51:ba:66:e3:62:d6:86:1e:c6:3c:66:88:ec: 2b:98:6f:e7:99:82:50:c7:8c:9c:1d:c6:1f:89:ad:33:92:9b: 2f:4b:f0:67:9e:50:62:58:34:6f:ed:3d:b1:55:f7:b1:0e:81: 6b:70:80:af:da:08:e9:6c:aa:f5:c5:21:62:f6:8c:b7:0d:3e: 38:71:f3:78:27:b0:10:f6:8b:65:a2:5e:c2:6c:33:95:9b:07: 6d:6e:8d:9e:31:5f:5e:05:f2:e5:f7:22:df:c1:87:ea:0e:cc: 04:d7:f9:21:4c:fa:7d:30:9d:a8:b3:dc:fc:0c:ac:19:6f:bd: 46:bf:fb:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5MdMdvN8wmqGDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDFlNjg0ZTUtNzgzYi00NTkwLTk5YWYtMmIzOTkwYWU1ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5KwCovP7l7hzgg+86zsczAmbkUCjhyxgTS2 Hrt8ZHY7oP/k1tSJlFH6PUCkKZnYi1TIDcUvmLKS/d9IimHcHOifNkLi0uT4nh9w bH49xOBM2LBfrCPO5QgV1LbNhyjmmpiqXf++iP/0B9v2M2uPZ/t5xhxCRCmXMo5X hFZxE/GJlrpuOTjjqxdM9p0+vkloyYWY9dDajkKRpt2naHtCDlPJOEehrrrFI2fv k8C0vtvbBmNgA9D2DU70uF7Ia47MhOGb4L0iEBfdV7rnhD6gNjkP8NofvV3W/AKD q83l2p1SaRYGmFAH58MdEOLSjyE4g95xHBxDWV5eyOWWJaV4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSXLjV2mI4XL7WA6m2nGEDfSIQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGMzNTA3ZTktMWQ3MS0z ZjEzLTg3NGYtOGYzMzFkZTRhOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgZ3EZW3DF0rl0vVHawj0KytXCKz64iZsClmJpc7gDFVX3BWS00K996 dMWpKoAOQpu3AeihEY3mutxtQWNLsPwbI7pjFuIvooKMUqM1krWYp+61Md1bLsql HxkjPwC/1mnOBE97yWLhGsS97YIbDZUCjaTMxo3IZMeffGpQmmoAHOY/Ubpm42LW hh7GPGaI7CuYb+eZglDHjJwdxh+JrTOSmy9L8GeeUGJYNG/tPbFV97EOgWtwgK/a COlsqvXFIWL2jLcNPjhx83gnsBD2i2WiXsJsM5WbB21ujZ4xX14F8uX3It/Bh+oO zATX+SFM+n0wnaiz3PwMrBlvvUa/+44= -----END CERTIFICATE-----Generated at Thu Aug 7 04:27:17 2025 by rpki-client