$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa File: 14bd33ec-ec91-396b-b0e6-927ef8be3191.roa (raw, json) Hash identifier: Q6Y68QS/vAecXk/uDI9W6yvwbD2NQWuY9kWYyUVlnlE= Subject key identifier: 05:F1:4C:A0:D4:17:E3:65:D9:CF:EB:B7:AE:8C:0E:F9:0C:91:6F:85 Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F4328584A90A0AF3F6B8058104CB40940 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 203729 IP address blocks: 23.142.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:af:3f:6b:80:58:10:4c:b4:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ed9aa50c-f739-4026-9aa1-1a98c06661c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:64:27:97:be:9c:75:aa:13:fc:3f:02:63: 08:fd:a6:6b:04:19:26:cb:e1:13:a3:3c:81:37:08: eb:0f:43:49:c2:9e:da:39:ad:a6:ec:20:3b:98:d5: cb:55:5b:3a:c1:bd:8e:16:84:40:a0:56:c8:db:ac: fb:ff:1d:f9:b8:b4:2b:88:69:b1:77:12:cf:e2:94: 87:89:74:e2:d3:b8:f8:db:2a:61:dd:4b:73:b2:67: 70:d3:07:eb:14:bb:3e:47:da:7f:00:c5:64:f1:e4: 87:1c:4c:55:41:ed:26:5b:2e:1a:7e:4d:b5:73:85: e2:68:65:d1:bd:a4:69:60:98:b0:a0:11:6c:3c:7d: 49:36:9b:76:72:a9:ad:96:ff:18:34:ec:9e:97:1d: ed:cc:af:54:2d:72:a2:c5:69:8f:a0:fc:ef:b7:7a: 49:fc:de:be:62:92:f3:09:56:9d:b5:ba:47:f8:78: d6:98:e9:39:eb:8b:a5:ec:a2:03:ee:ed:56:1a:e6: 9b:76:a5:05:b0:aa:98:3d:4c:11:12:7c:ab:af:75: 80:87:06:f1:10:c6:94:f6:03:8c:17:00:44:57:19: 60:a3:87:cf:c4:4b:ef:ca:ed:d8:d2:4d:62:55:ef: 79:d5:9c:0d:90:37:d6:aa:66:98:e7:38:90:ab:f7: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F1:4C:A0:D4:17:E3:65:D9:CF:EB:B7:AE:8C:0E:F9:0C:91:6F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f5:39:d4:7d:87:86:97:1b:64:6b:d0:3f:59:7e:2b:d5:73: fd:b1:7d:11:8c:11:33:c6:c7:48:70:58:6d:ac:cb:71:a5:13: 1e:7a:90:3d:ce:57:40:fa:ed:50:2a:86:77:5c:39:f8:d2:02: 01:71:83:c5:d3:8c:a2:92:35:d6:62:61:03:cc:b4:d9:b6:2f: 3a:3a:21:75:65:13:4e:f0:18:89:e6:0c:ec:70:76:13:e3:aa: 61:b9:a0:07:c9:44:2a:00:59:22:f4:ce:c3:49:00:49:d4:fd: ea:ad:f1:74:47:0a:8f:02:d0:c1:41:cd:40:dc:92:39:43:74: b6:d3:3b:b6:73:a5:59:95:8b:32:20:c2:1e:2a:d2:94:08:75: 74:bb:bf:c4:d6:96:b6:f1:41:f2:5b:cb:9b:38:ec:67:c3:ed: f9:5e:a2:89:fa:a9:7b:6f:20:13:6b:51:e7:bc:85:37:4a:12: de:47:07:b6:70:0a:08:d4:5f:2e:86:0f:73:33:41:ae:3d:8b: 4e:c1:7c:49:21:0b:52:80:6d:1e:96:6f:58:3d:72:38:44:51: f7:89:96:76:51:97:2b:fe:af:0e:7a:a4:23:72:e3:e9:29:3c: 51:66:e2:19:51:db:83:3b:eb:82:d4:7e:7a:ec:33:a7:a5:8a: db:36:85:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK8/a4BYEEy0CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWQ5YWE1MGMtZjczOS00MDI2LTlhYTEtMWE5OGMwNjY2MWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT1kJ5e+nHWqE/w/AmMI/aZrBBkmy+ETozyB NwjrD0NJwp7aOa2m7CA7mNXLVVs6wb2OFoRAoFbI26z7/x35uLQriGmxdxLP4pSH iXTi07j42yph3Utzsmdw0wfrFLs+R9p/AMVk8eSHHExVQe0mWy4afk21c4XiaGXR vaRpYJiwoBFsPH1JNpt2cqmtlv8YNOyelx3tzK9ULXKixWmPoPzvt3pJ/N6+YpLz CVadtbpH+HjWmOk564ul7KID7u1WGuabdqUFsKqYPUwREnyrr3WAhwbxEMaU9gOM FwBEVxlgo4fPxEvvyu3Y0k1iVe951ZwNkDfWqmaY5ziQq/em9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXxTKDUF+Nl2c/rt66MDvkMkW+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvMTRiZDMzZWMtZWM5MS0z OTZiLWIwZTYtOTI3ZWY4YmUzMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL31OdR9h4aXG2Rr0D9ZfivVc/2xfRGMETPGx0hwWG2sy3GlEx56kD3O V0D67VAqhndcOfjSAgFxg8XTjKKSNdZiYQPMtNm2Lzo6IXVlE07wGInmDOxwdhPj qmG5oAfJRCoAWSL0zsNJAEnU/eqt8XRHCo8C0MFBzUDckjlDdLbTO7ZzpVmVizIg wh4q0pQIdXS7v8TWlrbxQfJby5s47GfD7fleoon6qXtvIBNrUee8hTdKEt5HB7Zw CgjUXy6GD3MzQa49i07BfEkhC1KAbR6Wb1g9cjhEUfeJlnZRlyv+rw56pCNy4+kp PFFm4hlR24M764LUfnrsM6elits2hc0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:47 2025 by rpki-client