$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: hSMLJZAzyOCSA1R6bQTYrqE8gSLs+lOJz8ETzhLaQUM= Subject key identifier: 33:34:08:16:D2:E0:D8:A9:2C:C6:1E:1E:A6:B2:CC:71:11:E1:2A:35 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584A9FFBA48DF88DD68EA5E32CA0 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a4:8d:f8:8d:d6:8e:a5:e3:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=947457ef-49e4-458d-8445-bc56616fb0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:dd:19:04:80:18:c1:ee:8d:5f:21:81:f3: 8d:47:af:5c:5d:10:cb:e9:29:a8:52:68:c0:79:22: 03:4b:12:d6:76:3b:03:68:a3:0f:0b:36:f8:6b:99: 59:11:68:43:b8:40:a0:1e:36:d9:f3:43:8e:b1:fb: 2e:08:8f:bc:41:93:60:2d:a8:ca:5b:55:da:d0:c6: 9c:d7:4d:c2:9b:a7:7d:8d:5b:ee:10:6f:73:e7:c9: 1e:7c:33:da:b7:21:93:a5:76:f2:51:66:09:0a:69: cd:0d:27:69:e8:89:70:21:d7:7f:cd:cc:1b:3b:75: 76:ee:bc:ae:8f:ea:a8:6b:83:4b:08:d9:a1:2c:27: a7:a6:f0:9c:9c:a5:8a:88:92:fe:89:cc:35:ed:20: 58:cc:58:83:11:62:03:b8:f1:6d:65:52:5f:60:f5: 38:1a:f8:13:99:5f:ec:3e:83:55:88:ac:31:b7:aa: 5d:c9:e4:bc:d8:9b:64:1c:82:2e:4e:43:41:d3:7f: 50:2a:ce:a6:1d:ae:8e:18:44:21:de:d9:f9:49:2d: bc:41:f7:f7:8b:af:08:48:d3:39:a1:5b:72:34:58: 70:7c:a5:73:c3:41:30:92:94:04:93:27:61:84:de: 2b:23:20:b4:f2:79:8d:a1:f6:c5:f4:2a:1d:06:b6: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:08:16:D2:E0:D8:A9:2C:C6:1E:1E:A6:B2:CC:71:11:E1:2A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d8:c6:db:14:03:f3:58:b3:e3:b0:87:a1:76:05:2a:45:d4: db:44:46:73:08:17:60:89:c4:38:00:8f:c0:3f:b9:15:0f:e2: aa:b4:67:61:db:08:a3:85:76:e8:cd:f7:2d:8d:92:50:86:14: 73:ef:fb:4b:0a:d6:57:0d:6a:4c:96:d5:9c:8e:73:73:e5:24: 42:2b:ad:9e:0b:6c:90:ad:0e:bc:37:c7:78:f0:22:df:d7:44: 53:bf:dc:e3:ba:a4:99:04:25:91:cc:5d:92:cb:3e:33:b3:99: 4c:83:b6:10:04:11:7b:d1:2b:25:de:eb:ba:72:8d:ba:7b:87: 64:c8:7c:dd:bd:0f:3b:10:7f:3c:e5:79:3c:ca:30:12:54:78: 18:ee:22:61:cc:d7:35:d5:08:f8:46:34:e9:f3:28:22:45:4d: be:83:30:b4:e3:7f:35:9f:3f:e5:79:9b:e5:03:86:fa:f8:ca: e1:21:d5:7e:5b:3c:01:a0:94:0f:b0:a7:73:d5:40:8f:f3:1a: 95:b3:57:53:23:be:51:8f:23:99:be:81:06:f0:44:6d:9f:f7: a2:24:f3:c7:8b:bf:3a:99:82:ce:86:58:55:f2:ca:57:75:7d: 6b:3a:b0:79:51:95:0c:2b:58:45:4f:48:35:e9:a5:56:95:35: ee:64:47:e8 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEqf+6SN+I3WjqXjLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk OTQ3NDU3ZWYtNDllNC00NThkLTg0NDUtYmM1NjYxNmZiMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TPdGQSAGMHujV8hgfONR69cXRDL6SmoUmjA eSIDSxLWdjsDaKMPCzb4a5lZEWhDuECgHjbZ80OOsfsuCI+8QZNgLajKW1Xa0Mac 103Cm6d9jVvuEG9z58kefDPatyGTpXbyUWYJCmnNDSdp6IlwIdd/zcwbO3V27ryu j+qoa4NLCNmhLCenpvCcnKWKiJL+icw17SBYzFiDEWIDuPFtZVJfYPU4GvgTmV/s PoNViKwxt6pdyeS82JtkHIIuTkNB039QKs6mHa6OGEQh3tn5SS28Qff3i68ISNM5 oVtyNFhwfKVzw0EwkpQEkydhhN4rIyC08nmNofbF9CodBraejQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFDM0CBbS4NipLMYeHqayzHER4So1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAk2MbbFAPzWLPjsIehdgUqRdTbREZzCBdgicQ4AI/AP7kVD+Kq tGdh2wijhXbozfctjZJQhhRz7/tLCtZXDWpMltWcjnNz5SRCK62eC2yQrQ68N8d4 8CLf10RTv9zjuqSZBCWRzF2Syz4zs5lMg7YQBBF70Ssl3uu6co26e4dkyHzdvQ87 EH885Xk8yjASVHgY7iJhzNc11Qj4RjTp8ygiRU2+gzC04381nz/leZvlA4b6+Mrh IdV+WzwBoJQPsKdz1UCP8xqVs1dTI75RjyOZvoEG8ERtn/eiJPPHi786mYLOhlhV 8spXdX1rOrB5UZUMK1hFT0g16aVWlTXuZEfo -----END CERTIFICATE-----Generated at Mon Aug 11 05:58:42 2025 by rpki-client