$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa File: 6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa (raw, json) Hash identifier: qALYuDLbmLuouazlwsdGAdCRhWDmM+CWcePdvQqllTs= Subject key identifier: E0:92:2D:79:47:C5:83:AD:6D:0C:30:1E:36:D7:00:C7:1A:40:BC:13 Certificate issuer: /CN=a84de681-fe45-480a-a775-c78ed66cd40b Certificate serial: 010D0C9F4328584AC2E0D6791D9E42EDD256A400 Authority key identifier: 20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 396302 IP address blocks: 23.156.160.0/24 maxlen: 24 2604:4140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d6:79:1d:9e:42:ed:d2:56:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84de681-fe45-480a-a775-c78ed66cd40b Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=ddfb5805-e822-4b44-b9e0-083a2691a203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:24:85:ba:ea:19:ce:cd:f4:e1:3f:9c:84: 3d:42:34:83:fa:80:37:a6:80:aa:14:60:f3:e5:60: 46:2d:eb:59:4b:5f:69:e6:75:78:81:cb:89:42:09: d1:dc:bf:f4:0a:36:d9:6e:a8:ff:32:18:97:66:d6: 53:0f:15:72:b0:47:5f:a6:e8:5e:e9:89:c7:85:27: ef:3f:e6:02:58:4c:35:a3:76:f3:a6:15:d8:45:f8: 33:e4:48:3b:c4:27:10:10:9d:0a:cb:22:d9:2a:a3: ea:b1:0c:da:6c:cd:c0:69:c5:5b:72:e1:8f:d0:c0: 0a:7b:b2:af:54:33:d5:a3:56:64:46:02:6a:b6:dd: 74:f3:42:8c:bd:e8:76:cf:08:36:69:89:bd:75:f7: 5f:f0:50:dd:fb:35:41:9d:6f:d4:03:39:4d:f3:1e: 25:19:93:38:2e:70:dc:e7:09:77:fc:c4:ed:e1:27: e6:89:7d:1d:8b:dc:0f:23:79:d0:42:93:05:4e:4e: e3:1a:19:28:81:b6:30:83:05:3f:3e:58:95:d7:da: 05:35:3c:ea:91:a9:32:4e:27:2c:37:1c:39:fd:5c: 5a:96:63:76:2a:b5:e8:fd:64:7c:a7:5c:3c:18:2b: f4:0b:e9:4c:20:57:75:d6:a2:ab:ea:9d:29:e4:01: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:92:2D:79:47:C5:83:AD:6D:0C:30:1E:36:D7:00:C7:1A:40:BC:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/6092b3b2-f00a-359d-a60e-7d3e4b733a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b/a84de681-fe45-480a-a775-c78ed66cd40b.crl X509v3 Authority Key Identifier: keyid:20:2A:0D:8A:35:58:D9:37:5C:B5:1D:24:FB:4C:95:F8:BD:BF:0D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a84de681-fe45-480a-a775-c78ed66cd40b.cer sbgp-ipAddrBlock: critical IPv4: 23.156.160.0/24 IPv6: 2604:4140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fe:9e:83:6f:93:af:40:4f:cf:23:31:a5:0b:96:19:47:91: 2a:b1:70:83:22:7a:71:c1:99:07:e7:e4:50:37:3b:db:2b:5f: d6:60:39:2d:78:33:0a:be:9a:57:78:de:c2:a4:a1:bd:14:21: ad:88:84:9b:c1:6b:c1:22:22:17:f5:1b:31:45:71:28:48:b2: 63:41:bb:17:96:8b:89:99:99:0d:ab:aa:71:72:28:54:08:84: 94:7d:1b:3c:f6:b0:da:f7:c8:f0:e3:f7:d0:c7:6a:8d:fa:6e: 08:b9:c9:9f:ed:ab:1f:64:65:4b:25:70:21:bb:11:8a:59:83: c2:b1:f0:a4:75:41:e9:e4:34:da:9b:2d:0e:c0:5d:f2:30:06: f7:cd:40:1e:82:87:fe:17:43:ac:43:56:8e:8d:cc:0f:0b:44: d4:af:c3:b0:70:ff:26:12:3b:86:1d:1c:4e:54:20:38:01:14: 22:3e:2d:b3:89:56:99:72:a6:e7:dd:59:c8:fa:24:ee:d5:ea: 90:0a:a4:97:b5:f1:e4:31:62:8c:eb:44:55:d8:4a:40:a0:0e: 3b:a7:3f:fb:0d:7b:d3:d0:ee:59:ee:3b:bd:1a:6a:c3:44:6a: c0:0c:f0:cb:90:10:5a:40:f3:56:72:d8:fb:5f:3c:be:61:d1: 96:68:26:10 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErC4NZ5HZ5C7dJWpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg0ZGU2ODEtZmU0NS00ODBhLWE3NzUtYzc4ZWQ2NmNk NDBiMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGRmYjU4MDUtZTgyMi00YjQ0LWI5ZTAtMDgzYTI2OTFhMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksEkhbrqGc7N9OE/nIQ9QjSD+oA3poCqFGDz 5WBGLetZS19p5nV4gcuJQgnR3L/0CjbZbqj/MhiXZtZTDxVysEdfpuhe6YnHhSfv P+YCWEw1o3bzphXYRfgz5Eg7xCcQEJ0KyyLZKqPqsQzabM3AacVbcuGP0MAKe7Kv VDPVo1ZkRgJqtt1080KMveh2zwg2aYm9dfdf8FDd+zVBnW/UAzlN8x4lGZM4LnDc 5wl3/MTt4SfmiX0di9wPI3nQQpMFTk7jGhkogbYwgwU/PliV19oFNTzqkakyTics Nxw5/VxalmN2KrXo/WR8p1w8GCv0C+lMIFd11qKr6p0p5AENWQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOCSLXlHxYOtbQwwHjbXAMcaQLwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hODRk ZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhlZDY2Y2Q0MGIvNjA5MmIzYjItZjAwYS0z NTlkLWE2MGUtN2QzZTRiNzMzYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTg0ZGU2ODEtZmU0NS00ODBhLWE3 NzUtYzc4ZWQ2NmNkNDBiL2E4NGRlNjgxLWZlNDUtNDgwYS1hNzc1LWM3OGVkNjZj ZDQwYi5jcmwwHwYDVR0jBBgwFoAUICoNijVY2TdctR0k+0yV+L2/DTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hODRkZTY4MS1mZTQ1LTQ4MGEtYTc3NS1jNzhl ZDY2Y2Q0MGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5ygMA0E AgACMAcDBQAmBEFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAE/+noNvk69AT88jMaULlhlHkSqxcIMienHB mQfn5FA3O9srX9ZgOS14Mwq+mld43sKkob0UIa2IhJvBa8EiIhf1GzFFcShIsmNB uxeWi4mZmQ2rqnFyKFQIhJR9Gzz2sNr3yPDj99DHao36bgi5yZ/tqx9kZUslcCG7 EYpZg8Kx8KR1QenkNNqbLQ7AXfIwBvfNQB6Ch/4XQ6xDVo6NzA8LRNSvw7Bw/yYS O4YdHE5UIDgBFCI+LbOJVplypufdWcj6JO7V6pAKpJe18eQxYozrRFXYSkCgDjun P/sNe9PQ7lnuO70aasNEasAM8MuQEFpA81Zy2PtfPL5h0ZZoJhA= -----END CERTIFICATE-----Generated at Thu Aug 7 14:36:52 2025 by rpki-client