$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa File: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json) Hash identifier: s+4be1eQcHq77JU02h/1UACu0BG7486HYYMTfd48A9c= Subject key identifier: BD:84:5B:66:3C:36:66:AB:55:E5:D8:D7:71:D2:5C:E4:73:BB:35:A3 Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Certificate serial: 010D0C9F4328584AD3A0F30B6ADD841F4D5B0FB8 Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 400142 IP address blocks: 23.191.176.0/24 maxlen: 24 2602:fc99::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f3:0b:6a:dd:84:1f:4d:5b:0f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=0ec1fd30-1779-4674-af45-8fe480246322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:4b:6a:3b:9f:68:3a:57:dd:d6:60:f7:24: 60:2f:4b:36:b2:1f:c8:4a:a6:df:dc:4b:a3:93:41: 2c:70:80:99:f0:e4:c9:78:25:a8:ec:09:30:f6:53: 1f:b9:9e:5c:16:3d:e8:e4:7b:e6:2d:4c:50:ae:cb: 76:6d:01:02:fd:9f:2d:18:d8:51:97:8a:fd:8b:b7: 16:1c:f2:b0:0c:f1:d0:c4:0e:16:5c:56:4e:40:ea: 11:84:6b:cf:1c:d8:a0:7a:f3:f5:06:2c:ed:2a:a5: 09:20:d3:bd:71:e8:7d:05:89:33:64:a4:41:0e:c8: f5:bf:fa:f7:a0:93:ea:29:16:e5:26:17:8a:2a:34: f0:a2:95:a6:d6:19:e6:0b:de:23:70:66:ad:1a:4d: ea:8c:4f:c0:47:58:ef:d3:d4:c0:8b:86:09:cd:29: 0b:e2:cf:8c:28:f5:f6:a4:13:09:f3:d9:fe:23:34: 13:68:71:1b:03:f4:ee:7d:f5:29:3a:a7:2b:de:f4: 05:2a:e8:3e:a7:aa:30:8c:3b:af:40:26:ea:07:67: 65:70:7a:8c:6c:29:5c:f2:f2:94:77:32:28:cc:ac: 70:63:9a:b6:b7:57:cc:71:b0:46:e0:59:5b:50:2a: 0c:80:33:77:c0:00:08:72:32:78:b3:b9:87:26:e8: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:84:5B:66:3C:36:66:AB:55:E5:D8:D7:71:D2:5C:E4:73:BB:35:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl X509v3 Authority Key Identifier: keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer sbgp-ipAddrBlock: critical IPv4: 23.191.176.0/24 IPv6: 2602:fc99::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fa:6f:dd:1f:94:b1:67:9e:7b:35:b0:8f:be:42:fb:b4:9b: ab:aa:f7:b4:a7:cc:7a:dd:fb:6d:7f:f0:7e:56:fe:81:21:4f: 90:20:4d:61:62:b9:30:63:b9:ee:f1:dc:49:a0:10:cb:e6:35: 54:5f:28:e1:6f:f9:6d:94:a9:96:11:0a:1b:a5:d5:d8:5a:3b: da:90:3b:5f:34:4f:82:a5:88:e5:e2:c2:7d:16:b0:09:d6:d8: d2:34:d6:d7:2c:de:bc:18:23:2b:7f:2e:be:40:36:c9:d4:9a: 1c:72:f5:fa:4e:df:fd:1b:b8:06:a2:94:8d:8d:40:96:1b:18: ee:1a:52:dc:0f:20:b6:05:ec:31:ed:93:8a:80:5e:75:a5:ae: d1:f8:46:54:89:5a:cf:84:1a:d8:2f:a1:08:fe:17:74:9d:6d: 13:69:01:50:3e:16:5a:fb:62:eb:c9:da:23:d7:e6:de:65:08: 16:f4:0f:2e:bc:e2:a2:0c:8f:71:a9:36:f2:cb:15:3a:5a:b1: 8c:bc:56:61:cb:3c:ae:33:d1:0b:68:b2:80:42:60:3d:8d:66: ef:7f:80:d6:1b:1a:13:d0:05:6d:be:76:8f:02:b2:40:6c:5f: 4d:77:f8:19:35:40:38:4c:3e:18:af:72:20:73:4c:1b:37:2d: e4:ec:c3:f5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErToPMLat2EH01bD7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1 MDU1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MGVjMWZkMzAtMTc3OS00Njc0LWFmNDUtOGZlNDgwMjQ2MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigpLajufaDpX3dZg9yRgL0s2sh/ISqbf3Euj k0EscICZ8OTJeCWo7Akw9lMfuZ5cFj3o5HvmLUxQrst2bQEC/Z8tGNhRl4r9i7cW HPKwDPHQxA4WXFZOQOoRhGvPHNigevP1BiztKqUJINO9ceh9BYkzZKRBDsj1v/r3 oJPqKRblJheKKjTwopWm1hnmC94jcGatGk3qjE/AR1jv09TAi4YJzSkL4s+MKPX2 pBMJ89n+IzQTaHEbA/TuffUpOqcr3vQFKug+p6owjDuvQCbqB2dlcHqMbClc8vKU dzIozKxwY5q2t1fMcbBG4FlbUCoMgDN3wAAIcjJ4s7mHJujwmQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL2EW2Y8NmarVeXY13HSXORzuzWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJh ZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvNGExOWMwNjItZDIyNy0z MWQ3LWIwZGMtMmY1MjU1NjdkM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmMyYWU0OGYtNDc1Yi00MmIzLTlh NTYtY2U4ODUyNTE1MDU1LzJjMmFlNDhmLTQ3NWItNDJiMy05YTU2LWNlODg1MjUx NTA1NS5jcmwwHwYDVR0jBBgwFoAUhBs1SSOEDxgolRUcg9Kc2jDt5EwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4 NTI1MTUwNTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+wMA4E AgACMAgDBgQmAvyZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2+m/dH5SxZ557NbCPvkL7tJurqve0p8x6 3fttf/B+Vv6BIU+QIE1hYrkwY7nu8dxJoBDL5jVUXyjhb/ltlKmWEQobpdXYWjva kDtfNE+CpYjl4sJ9FrAJ1tjSNNbXLN68GCMrfy6+QDbJ1JoccvX6Tt/9G7gGopSN jUCWGxjuGlLcDyC2Bewx7ZOKgF51pa7R+EZUiVrPhBrYL6EI/hd0nW0TaQFQPhZa +2Lrydoj1+beZQgW9A8uvOKiDI9xqTbyyxU6WrGMvFZhyzyuM9ELaLKAQmA9jWbv f4DWGxoT0AVtvnaPArJAbF9Nd/gZNUA4TD4Yr3Igc0wbNy3k7MP1 -----END CERTIFICATE-----Generated at Wed Aug 13 08:47:17 2025 by rpki-client