$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa File: b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa (raw, json) Hash identifier: 4bDNSgB6UD4gw8Rf5ejLMdQ/8iNgFTz1ZozS8qeHe9Q= Subject key identifier: AF:0B:7F:89:86:D4:57:CC:D1:FB:02:B3:A2:31:37:6A:52:A6:89:B3 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584AA160CF99EDAADE82B087D460 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 23.166.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cf:99:ed:aa:de:82:b0:87:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=94fa3558-b8a0-4a92-917a-eedcabf5cc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:3b:30:69:f0:e8:46:93:b7:73:eb:b9:8e: c7:c8:5f:3d:74:26:d1:b5:53:41:16:37:30:b7:b3: bd:e1:56:7c:4d:c4:2f:9e:d5:f1:23:b0:ea:07:a6: 4a:42:08:81:ac:1d:a6:b8:87:d4:46:64:ba:8d:8d: d3:c4:37:e4:d0:d6:7e:bb:27:6a:9a:65:63:00:f9: 3a:0a:b9:76:53:04:1b:35:1e:29:2c:a2:34:eb:eb: 28:8a:1f:b4:a1:18:5b:19:e9:65:29:23:56:3c:f5: 2e:79:35:ae:a6:89:0d:1a:e4:d7:36:e3:33:80:e7: 74:12:41:87:c6:4e:d1:95:4f:f0:28:0e:5a:af:f2: 0b:3d:41:10:2a:ff:ed:cc:d8:11:f4:f6:b8:40:65: 77:28:91:04:9c:bb:b9:b1:80:de:fe:78:5d:46:3e: e1:fb:16:32:83:ad:c7:cc:77:f4:5d:2f:d2:69:08: 56:70:51:b5:ec:59:e3:c7:ae:c6:b7:d0:64:43:e6: 95:14:68:2f:cf:62:d1:8d:23:3b:51:4a:f3:2c:d3: 79:b9:a5:80:08:1d:20:2e:ef:4f:c4:ef:72:78:6f: 81:d7:83:ca:6f:42:cf:37:ba:92:e8:64:73:7f:a5: 00:9d:88:fe:cf:56:42:9d:d4:ca:aa:89:9e:81:0a: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0B:7F:89:86:D4:57:CC:D1:FB:02:B3:A2:31:37:6A:52:A6:89:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 23.166.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b5:ca:05:4d:f6:13:53:d3:e5:f2:12:21:b5:1e:7a:42:f0: 3e:7d:8a:41:27:eb:a2:ed:b1:e9:93:df:d2:b9:80:aa:5c:26: 17:4a:4e:8e:fc:98:6e:31:5d:a4:11:60:4d:8b:c1:3a:ab:50: 02:3d:2c:1e:fb:0d:f8:c5:09:22:3b:88:60:66:83:3b:27:cc: f2:e0:27:8c:48:2e:28:a8:bc:0f:5b:db:84:d4:e2:10:4e:56: d7:86:7b:21:0a:4d:78:1d:b6:23:56:6d:2a:84:a7:11:1f:e9: 02:3a:96:02:38:e6:fc:12:32:fe:77:35:fd:7f:fd:2c:da:27: 18:53:81:30:d5:75:75:48:54:65:99:fc:ef:80:d6:01:a5:65: c1:8c:a5:a6:de:da:bb:e7:22:50:2c:9d:f3:4c:1f:a3:60:2f: c0:86:cb:9a:b2:08:95:06:25:8f:90:2b:70:06:bb:2a:f1:d3: 05:38:4c:52:33:88:1f:60:4a:12:23:08:2e:2f:67:dd:ac:c0: 43:fc:e2:68:1f:10:ef:7a:b7:0a:ce:f6:87:be:14:66:d4:60: 1f:ce:af:4f:00:88:12:82:af:2e:6a:10:d7:6c:4f:13:70:f6: 62:bc:14:72:ef:c1:31:37:2e:f2:eb:bb:08:e1:2d:45:35:50: 40:bd:44:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM+Z7aregrCH1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OTRmYTM1NTgtYjhhMC00YTkyLTkxN2EtZWVkY2FiZjVjYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI07MGnw6EaTt3PruY7HyF89dCbRtVNBFjcw t7O94VZ8TcQvntXxI7DqB6ZKQgiBrB2muIfURmS6jY3TxDfk0NZ+uydqmmVjAPk6 Crl2UwQbNR4pLKI06+soih+0oRhbGellKSNWPPUueTWupokNGuTXNuMzgOd0EkGH xk7RlU/wKA5ar/ILPUEQKv/tzNgR9Pa4QGV3KJEEnLu5sYDe/nhdRj7h+xYyg63H zHf0XS/SaQhWcFG17Fnjx67Gt9BkQ+aVFGgvz2LRjSM7UUrzLNN5uaWACB0gLu9P xO9yeG+B14PKb0LPN7qS6GRzf6UAnYj+z1ZCndTKqomegQo5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8Lf4mG1FfM0fsCs6IxN2pSpomzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvYjE3OTFlNGEtN2FlMi0z NTU5LTgzYjctMzlhYTFiOWNkZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS1ygVN9hNT0+XyEiG1HnpC8D59ikEn66LtsemT39K5gKpcJhdKTo78 mG4xXaQRYE2LwTqrUAI9LB77DfjFCSI7iGBmgzsnzPLgJ4xILiiovA9b24TU4hBO VteGeyEKTXgdtiNWbSqEpxEf6QI6lgI45vwSMv53Nf1//SzaJxhTgTDVdXVIVGWZ /O+A1gGlZcGMpabe2rvnIlAsnfNMH6NgL8CGy5qyCJUGJY+QK3AGuyrx0wU4TFIz iB9gShIjCC4vZ92swEP84mgfEO96twrO9oe+FGbUYB/Or08AiBKCry5qENdsTxNw 9mK8FHLvwTE3LvLruwjhLUU1UEC9RGA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:31 2025 by rpki-client