$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: +9wHNw8x8lTKrcrbiK+BX31I4ryiRCgz60lIvS9qTuo= Subject key identifier: 39:E8:BA:6D:F8:85:FB:9A:66:B7:A5:0A:C1:39:29:31:F2:4D:07:6D Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584AC8765A8FF8FB0B727136EA80 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5a:8f:f8:fb:0b:72:71:36:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=706fc57e-ac00-4000-95a0-d69f47460a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:3b:a8:a4:c4:8c:a0:15:11:23:08:9f:ca: c9:00:3f:98:20:1b:53:4d:03:c0:e1:7c:cf:22:d8: c8:d9:2e:42:5c:6b:7b:c1:1c:c3:8e:78:ee:33:b9: 7c:57:97:33:01:38:26:ac:29:2a:b8:ab:98:e8:69: 1d:ff:eb:62:e9:ff:cd:bc:81:33:fb:41:02:bb:80: 2b:b2:fe:b1:02:1a:9b:e7:4d:ff:a4:e3:c4:d9:31: 2e:4c:36:67:04:4c:eb:51:8a:bd:ca:53:6c:02:17: 78:5d:f8:39:8f:d0:b1:d2:34:eb:c3:db:8f:95:1f: 44:50:39:cb:75:a0:01:22:0b:00:99:f0:72:ad:e4: 50:7d:9c:c4:63:1a:c8:95:83:2d:5e:ea:5f:2a:11: c8:fc:3f:13:d7:7c:c9:0c:01:2d:3d:b1:3b:74:49: 54:e9:60:1e:d7:37:15:02:0c:ef:e7:63:98:b4:56: 5d:a4:15:e1:b1:ee:7c:0e:af:29:ba:51:65:52:f6: 07:87:6f:a9:05:87:57:c3:76:32:eb:7f:6a:28:46: b6:a3:f6:7d:ac:4c:d4:96:1d:81:fd:c0:ac:11:77: 72:26:ea:99:69:23:23:e6:fc:d6:49:ad:0a:eb:70: ba:23:02:8c:04:6a:05:26:a3:cc:d0:73:32:9d:4a: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E8:BA:6D:F8:85:FB:9A:66:B7:A5:0A:C1:39:29:31:F2:4D:07:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e5:1d:9d:21:cb:ab:6d:d5:25:9f:1d:88:5f:85:5f:73:bb: 03:3f:fb:dd:f6:eb:79:33:d6:ce:5e:8c:7d:d3:08:69:38:cc: a9:d7:73:07:99:da:52:3e:22:f5:c3:b5:b1:57:29:09:1f:24: 19:3e:24:6f:7e:87:fe:5b:d4:0c:d9:fb:f3:24:81:b0:a3:d6: 2f:0a:f9:7e:60:83:19:4c:a3:6b:62:72:0d:da:0b:5e:53:e5: 3d:fc:f6:f0:50:62:98:eb:18:5d:66:16:99:b6:e2:61:a7:8e: 36:62:a0:4d:1a:c5:b7:29:3d:0b:be:36:eb:27:b8:6e:0d:f7: 20:80:f6:f9:bb:25:b5:cf:16:60:ae:1a:7d:98:73:1b:5a:99: 47:42:1c:8b:db:b5:3a:53:61:68:cc:ef:60:59:b1:b7:0a:76: 30:92:f9:61:f7:58:cb:5a:a3:e6:b0:f8:f6:5a:08:05:30:1e: 45:8b:5b:57:f9:b7:70:4d:2d:15:c0:3a:cd:48:76:81:22:64: fc:28:8e:8f:ae:41:d1:af:27:79:d6:e3:8b:4e:9d:42:0b:99: e1:4e:74:20:ce:05:41:8a:6d:da:05:8c:9a:22:02:95:fa:93: 69:ef:a2:c4:fa:80:8c:51:67:7a:ae:7a:e0:f7:02:a1:44:57: b7:46:36:ce -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErIdlqP+PsLcnE26oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzA2ZmM1N2UtYWMwMC00MDAwLTk1YTAtZDY5ZjQ3NDYwYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS47qKTEjKAVESMIn8rJAD+YIBtTTQPA4XzP ItjI2S5CXGt7wRzDjnjuM7l8V5czATgmrCkquKuY6Gkd/+ti6f/NvIEz+0ECu4Ar sv6xAhqb503/pOPE2TEuTDZnBEzrUYq9ylNsAhd4Xfg5j9Cx0jTrw9uPlR9EUDnL daABIgsAmfByreRQfZzEYxrIlYMtXupfKhHI/D8T13zJDAEtPbE7dElU6WAe1zcV Agzv52OYtFZdpBXhse58Dq8pulFlUvYHh2+pBYdXw3Yy639qKEa2o/Z9rEzUlh2B /cCsEXdyJuqZaSMj5vzWSa0K63C6IwKMBGoFJqPM0HMynUqghQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDnoum34hfuaZrelCsE5KTHyTQdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR5R2dIcurbdUlnx2IX4Vfc7sDP/vd9ut5 M9bOXox90whpOMyp13MHmdpSPiL1w7WxVykJHyQZPiRvfof+W9QM2fvzJIGwo9Yv Cvl+YIMZTKNrYnIN2gteU+U9/PbwUGKY6xhdZhaZtuJhp442YqBNGsW3KT0Lvjbr J7huDfcggPb5uyW1zxZgrhp9mHMbWplHQhyL27U6U2FozO9gWbG3CnYwkvlh91jL WqPmsPj2WggFMB5Fi1tX+bdwTS0VwDrNSHaBImT8KI6PrkHRryd51uOLTp1CC5nh TnQgzgVBim3aBYyaIgKV+pNp76LE+oCMUWd6rnrg9wKhRFe3RjbO -----END CERTIFICATE-----Generated at Sat Aug 9 20:36:24 2025 by rpki-client