$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa File: 0841a164-eb24-3e16-b26c-b6097229b9c6.roa (raw, json) Hash identifier: C+73PPAeSW+JOF7yldyx1nTeP5u28p4KQvqxMBK3ILY= Subject key identifier: 94:26:94:81:7A:60:09:85:D7:28:24:18:34:23:81:53:16:9C:F8:46 Certificate issuer: /CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d Certificate serial: 010D0C9F4328584A7E7B5CBC943744EAE7767B80 Authority key identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 192.207.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5c:bc:94:37:44:ea:e7:76:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d4082c0a-bd93-4fbd-8fb7-2127b066d27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:29:eb:62:58:6c:c0:42:7b:0e:d0:0a:eb: 16:81:99:36:97:14:f5:a5:92:38:a4:2e:b1:71:a0: 2e:22:58:a6:03:99:5e:da:b8:4c:98:bb:1a:70:ae: 07:86:d0:54:6b:65:0d:ec:a0:ce:a1:b6:0e:c2:cf: 72:27:02:3a:1e:73:2e:9d:9d:84:63:44:7c:65:ca: f9:5b:45:b1:8d:41:46:a1:5f:07:ac:83:2e:1e:3f: 14:ff:4c:52:3e:da:e9:c2:3a:57:02:7f:6b:78:cd: 90:a1:a8:92:6e:76:56:9a:0d:95:ac:1a:b5:28:a0: 2d:56:8f:b3:a1:7f:56:ab:76:6c:e3:9f:51:8d:d1: 07:72:ad:09:c2:74:c2:ac:45:45:1b:10:d3:e4:c3: 70:79:59:b0:06:42:6c:61:fe:cf:e6:2d:6c:55:14: 77:bd:3e:33:a8:89:92:c4:c9:8e:55:6f:98:4f:dd: f9:65:3b:52:01:3a:cd:ca:5e:00:33:b8:2b:d3:a3: dc:62:f7:66:8e:4d:d1:54:b0:e6:57:73:6f:73:b8: 64:5d:4d:01:e0:41:aa:06:04:92:ef:a2:61:f3:f3: 19:11:f5:1b:6a:3c:f7:3a:2b:87:4d:39:1c:91:bc: 16:93:88:ea:53:f6:8f:36:bd:d0:31:ac:be:e5:51: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:26:94:81:7A:60:09:85:D7:28:24:18:34:23:81:53:16:9C:F8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.crl X509v3 Authority Key Identifier: keyid:53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer sbgp-ipAddrBlock: critical IPv4: 192.207.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ba:9f:07:ba:93:ff:75:57:1f:97:b3:f7:d6:51:bf:a3:50: 84:c0:8e:a9:3a:bd:49:05:a5:fc:61:aa:a7:45:90:bd:29:19: ad:73:b9:51:7c:9d:28:19:ff:30:08:3a:81:fa:f8:1c:96:8f: 6b:b8:63:50:ed:ee:11:f8:eb:96:5f:7f:2c:74:a7:31:a5:60: a3:c5:f7:ae:9f:d6:dd:55:03:7a:ba:ad:ac:c0:3f:40:a5:e7: cc:63:49:a4:ec:7a:17:3a:d4:fa:3b:d9:20:5d:4f:42:b0:06: ab:ae:4f:83:6c:bd:1a:ea:b8:2f:9d:61:cf:56:8e:e9:71:fd: af:56:aa:65:19:ba:d1:48:73:32:6a:bb:ea:d9:57:29:81:8a: 58:f1:5b:ea:66:43:d5:3d:98:74:5a:27:11:4a:24:59:32:94: 20:86:f8:c1:13:89:c2:60:47:d9:10:3f:60:e4:ab:97:e5:69: ca:08:d8:69:74:5e:04:59:8c:f3:00:4c:6e:0e:20:30:e5:16: fd:1b:8e:1e:1c:3b:22:48:9c:4e:59:cd:b0:bd:eb:6c:78:60: 59:0c:14:0b:ca:49:1c:9e:a1:0d:1e:66:e3:12:ea:90:98:9d: 4c:2c:cd:dd:0c:25:0e:9a:08:8e:67:67:ad:e7:6f:58:68:8b: a5:2f:10:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1y8lDdE6ud2e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOWNhZjYtN2UyYS00YTAyLWEyMWYtYjYyNTllY2Y2 YjlkMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDQwODJjMGEtYmQ5My00ZmJkLThmYjctMjEyN2IwNjZkMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptAp62JYbMBCew7QCusWgZk2lxT1pZI4pC6x caAuIlimA5le2rhMmLsacK4HhtBUa2UN7KDOobYOws9yJwI6HnMunZ2EY0R8Zcr5 W0WxjUFGoV8HrIMuHj8U/0xSPtrpwjpXAn9reM2QoaiSbnZWmg2VrBq1KKAtVo+z oX9Wq3Zs459RjdEHcq0JwnTCrEVFGxDT5MNweVmwBkJsYf7P5i1sVRR3vT4zqImS xMmOVW+YT935ZTtSATrNyl4AM7gr06PcYvdmjk3RVLDmV3Nvc7hkXU0B4EGqBgSS 76Jh8/MZEfUbajz3OiuHTTkckbwWk4jqU/aPNr3QMay+5VEGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQmlIF6YAmF1ygkGDQjgVMWnPhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MzI5 Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVjZjZiOWQvMDg0MWExNjQtZWIyNC0z ZTE2LWIyNmMtYjYwOTcyMjliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDMyOWNhZjYtN2UyYS00YTAyLWEy MWYtYjYyNTllY2Y2YjlkLzQzMjljYWY2LTdlMmEtNGEwMi1hMjFmLWI2MjU5ZWNm NmI5ZC5jcmwwHwYDVR0jBBgwFoAUUz3I1QWeBD74Zgi1rDu6lW/m20IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1 OWVjZjZiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC6nwe6k/91Vx+Xs/fWUb+jUITAjqk6vUkFpfxhqqdFkL0pGa1zuVF8 nSgZ/zAIOoH6+ByWj2u4Y1Dt7hH465Zffyx0pzGlYKPF966f1t1VA3q6razAP0Cl 58xjSaTsehc61Po72SBdT0KwBquuT4NsvRrquC+dYc9Wjulx/a9WqmUZutFIczJq u+rZVymBiljxW+pmQ9U9mHRaJxFKJFkylCCG+METicJgR9kQP2Dkq5flacoI2Gl0 XgRZjPMATG4OIDDlFv0bjh4cOyJInE5ZzbC962x4YFkMFAvKSRyeoQ0eZuMS6pCY nUwszd0MJQ6aCI5nZ63nb1hoi6UvEMY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:39 2025 by rpki-client