$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/4ac4affe-3a52-3f52-9003-36e90c930842.roa File: 4ac4affe-3a52-3f52-9003-36e90c930842.roa (raw, json) Hash identifier: ZGMlk/Bg4HQkdmERoSSmnFqSF5VAW/d/ZAF1bfdEw7g= Subject key identifier: 65:D6:71:93:DC:3A:26:D7:03:5E:01:16:EF:3B:12:92:26:3D:9B:A2 Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Certificate serial: 010D0C9F4328584ACB411E17A850113510875400 Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/4ac4affe-3a52-3f52-9003-36e90c930842.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 401727 IP address blocks: 23.186.112.0/24 maxlen: 24 23.186.113.0/24 maxlen: 24 2602:fc41::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1e:17:a8:50:11:35:10:87:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=d0cb84c6-67b2-4d07-b2d5-55811b724300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:9a:fb:0c:3e:43:e7:52:02:8e:c6:5a:df: 83:8b:fb:70:3f:56:30:29:d7:50:ad:a7:38:70:0d: 99:eb:3b:6b:95:8f:57:4b:81:67:12:a1:f2:70:29: 2a:3b:9a:14:85:0e:8b:2a:43:08:49:21:87:d8:2c: 41:8b:6c:92:23:6c:fc:4c:57:08:15:d9:8d:9b:34: d4:83:b0:bf:2e:42:e8:1d:83:f3:5a:2d:9b:7e:c2: 80:55:cf:e2:6a:4a:5b:ce:00:f9:15:57:ad:0f:ce: 65:48:1e:0c:6c:e7:93:fb:f5:c7:a7:54:d1:0c:b6: b6:dc:41:96:6f:11:50:e9:7b:54:d2:e3:f2:fa:c4: a3:a9:74:c8:df:66:9c:1b:65:8c:22:3d:83:95:ae: 01:58:84:9c:ba:c6:db:5e:17:c7:b5:67:a1:1a:68: d4:d5:52:cc:f0:28:49:7a:b4:cf:03:bf:50:df:9c: a4:41:db:38:b6:1d:d7:54:b6:73:b0:78:b0:e0:d7: cb:f4:52:fd:ed:a6:57:03:9f:63:49:21:21:b8:00: 71:6b:c7:cb:05:4b:a4:39:47:0b:86:07:f2:b2:e9: f9:2a:9f:d3:da:8e:24:df:37:4e:6a:b9:20:ca:cf: 73:d9:b0:ad:a5:c3:4c:93:d6:4d:8f:a6:e8:fc:20: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D6:71:93:DC:3A:26:D7:03:5E:01:16:EF:3B:12:92:26:3D:9B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/4ac4affe-3a52-3f52-9003-36e90c930842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl X509v3 Authority Key Identifier: keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer sbgp-ipAddrBlock: critical IPv4: 23.186.112.0/23 IPv6: 2602:fc41::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ce:54:74:1e:d3:b7:aa:e0:89:72:32:75:f3:52:08:68:2b: 4c:d5:0a:68:12:a9:d7:9d:66:2d:de:cb:89:1e:0e:40:96:0e: 5b:41:d4:59:22:78:e8:1f:d4:85:03:37:d1:8e:cc:3f:bb:3d: cc:42:5c:b9:0d:12:ca:d5:62:d3:7f:e4:f4:e6:b7:0e:b1:56: 0b:23:89:9c:9a:3b:aa:46:7b:c2:dc:11:bc:84:27:6e:65:88: 02:a7:a1:c3:57:11:22:29:17:ad:c6:c7:dc:c3:53:2d:a2:f6: fb:fd:26:6a:bd:1f:49:f0:b7:ec:6a:be:27:64:b9:a0:96:b0: 02:f0:04:67:37:a2:92:5f:fb:f5:0f:92:54:50:2d:af:aa:12: 92:99:30:1b:7d:02:f6:cb:83:8e:fb:ca:9c:5d:ee:a8:06:6f: 0c:9a:c1:dd:78:c5:56:e1:7c:fe:c3:08:2a:22:53:0a:ac:e2: 9b:a3:a5:02:34:5d:89:74:e1:39:33:7b:64:1a:bb:2d:fb:da: 02:2b:0f:d1:64:16:9d:f8:dc:d9:88:37:99:47:12:cd:b9:e5: 74:7b:ec:18:b7:83:45:73:60:48:17:95:d5:f4:d7:69:12:04: 3f:86:0e:b4:db:c6:b1:55:f4:b7:9c:da:e3:d8:7d:81:b7:9d: 44:cf:6e:03 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErLQR4XqFARNRCHVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzMjZlYWEtNWFkMi00NmMxLTg0MjMtYmNmMThiNmQ0 MjgzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDBjYjg0YzYtNjdiMi00ZDA3LWIyZDUtNTU4MTFiNzI0MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGa+ww+Q+dSAo7GWt+Di/twP1YwKddQrac4 cA2Z6ztrlY9XS4FnEqHycCkqO5oUhQ6LKkMISSGH2CxBi2ySI2z8TFcIFdmNmzTU g7C/LkLoHYPzWi2bfsKAVc/iakpbzgD5FVetD85lSB4MbOeT+/XHp1TRDLa23EGW bxFQ6XtU0uPy+sSjqXTI32acG2WMIj2Dla4BWIScusbbXhfHtWehGmjU1VLM8ChJ erTPA79Q35ykQds4th3XVLZzsHiw4NfL9FL97aZXA59jSSEhuABxa8fLBUukOUcL hgfysun5Kp/T2o4k3zdOarkgys9z2bCtpcNMk9ZNj6bo/CAhAwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGXWcZPcOibXA14BFu87EpImPZuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ODMy NmVhYS01YWQyLTQ2YzEtODQyMy1iY2YxOGI2ZDQyODMvNGFjNGFmZmUtM2E1Mi0z ZjUyLTkwMDMtMzZlOTBjOTMwODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDgzMjZlYWEtNWFkMi00NmMxLTg0 MjMtYmNmMThiNmQ0MjgzLzQ4MzI2ZWFhLTVhZDItNDZjMS04NDIzLWJjZjE4YjZk NDI4My5jcmwwHwYDVR0jBBgwFoAULuF8x2a3birw8/zUbjH4M+xRvF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ODMyNmVhYS01YWQyLTQ2YzEtODQyMy1iY2Yx OGI2ZDQyODMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF7pwMA4E AgACMAgDBgQmAvxBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQzlR0HtO3quCJcjJ181IIaCtM1QpoEqnX nWYt3suJHg5Alg5bQdRZInjoH9SFAzfRjsw/uz3MQly5DRLK1WLTf+T05rcOsVYL I4mcmjuqRnvC3BG8hCduZYgCp6HDVxEiKRetxsfcw1Mtovb7/SZqvR9J8Lfsar4n ZLmglrAC8ARnN6KSX/v1D5JUUC2vqhKSmTAbfQL2y4OO+8qcXe6oBm8MmsHdeMVW 4Xz+wwgqIlMKrOKbo6UCNF2JdOE5M3tkGrst+9oCKw/RZBad+NzZiDeZRxLNueV0 e+wYt4NFc2BIF5XV9NdpEgQ/hg6028axVfS3nNrj2H2Bt51Ez24D -----END CERTIFICATE-----Generated at Sun Aug 10 13:46:31 2025 by rpki-client