$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa File: daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa (raw, json) Hash identifier: ZkBRMq+eYZ6DHjgwHAQLz9wbez9oYCML9Sn/hfU7i8s= Subject key identifier: A8:41:40:D8:77:79:C0:0D:2E:C2:F9:3E:D1:19:7B:20:33:2F:51:12 Certificate issuer: /CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Certificate serial: 010D0C9F4328584AA6F62F05C8EED4ACBE437380 Authority key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 23.187.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2f:05:c8:ee:d4:ac:be:43:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=80bf79ca-c7c7-421c-934a-d45df2961b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:95:7d:c5:06:69:a9:bb:ee:f6:c3:d0:9d: 65:3d:20:94:ed:3f:5e:a0:f5:2c:a9:aa:f4:69:26: f7:42:d9:9d:ca:65:9d:bc:b2:84:10:6c:a2:36:f1: 07:62:cd:36:b1:d8:98:45:49:bc:a8:54:28:9f:87: 70:b8:09:67:55:68:c8:5e:0a:8c:1e:6b:98:00:7b: 3a:c3:5c:29:06:1e:f3:7a:92:9c:6b:e9:0d:8b:bd: c6:21:d5:7b:49:2b:22:d6:b9:3c:69:2c:25:be:34: 75:f0:e5:47:ef:db:c8:12:b9:0f:b8:c9:3d:c3:30: c3:70:52:92:2c:a3:d6:54:6e:fd:50:0d:3f:26:cd: 35:ae:8a:f2:c1:46:0b:21:9a:1f:05:dd:4e:b3:1a: 46:29:72:44:ba:a3:85:95:c3:f2:4c:94:88:50:c9: 1a:e7:02:d1:e2:96:a1:dc:11:26:84:19:c9:33:b0: b5:6a:5f:99:db:e9:e1:9d:64:8f:3f:4b:ab:2f:2f: 8c:a7:e4:fe:b4:a0:fc:0e:93:a8:84:76:d7:d2:ea: 96:0a:83:86:07:a8:1e:f1:13:f0:18:80:05:3e:4e: 58:b7:02:02:42:c1:de:ac:5d:ad:be:d8:01:e6:55: 0e:a0:05:dc:3f:81:67:1d:f1:b2:97:b4:aa:08:56: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:41:40:D8:77:79:C0:0D:2E:C2:F9:3E:D1:19:7B:20:33:2F:51:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl X509v3 Authority Key Identifier: keyid:41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer sbgp-ipAddrBlock: critical IPv4: 23.187.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:89:78:31:4b:5e:38:2b:7d:39:7e:5c:65:19:75:0d:c0:1a: 40:fe:42:62:d6:63:52:64:a0:20:7b:c2:86:69:ea:53:a1:90: a0:74:17:0e:ee:28:69:dd:ed:b8:e7:be:ad:be:cb:3a:e1:85: 3f:28:5b:c3:ca:59:c3:5c:4b:c6:35:5f:47:6d:a3:bc:92:5f: 03:db:0e:a4:f8:76:c0:3f:c7:20:0b:ae:02:4a:34:60:d2:f9: 54:ae:e5:71:29:24:b2:78:9b:ae:47:17:1b:f0:30:0b:2a:27: 85:85:81:1e:d3:1a:a2:9d:9b:50:85:92:da:2c:e3:e5:ef:22: f2:8d:f6:6e:3d:9e:53:aa:95:6b:1c:cf:33:0d:3c:3a:87:7c: 2c:3d:d5:cc:9a:42:31:ca:3d:e8:e4:ff:18:10:1e:c8:73:9c: 74:ee:e9:ba:b8:f7:56:77:ee:98:6d:28:1c:12:9e:92:6e:06: 60:23:4a:34:65:9f:c5:33:9d:22:d7:b2:59:81:27:97:e9:ba: 91:bd:c0:51:6e:c5:25:63:a5:66:ac:19:22:f9:cf:46:85:26: c6:1a:40:53:ee:7e:4d:05:ab:0e:e5:fd:70:06:73:9b:30:42: dc:aa:3a:3a:7b:7e:3b:5e:65:b3:c8:94:25:d1:d8:b7:34:a0: ff:15:15:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i8FyO7UrL5Dc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUx YzQ2MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ODBiZjc5Y2EtYzdjNy00MjFjLTkzNGEtZDQ1ZGYyOTYxYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneGVfcUGaam77vbD0J1lPSCU7T9eoPUsqar0 aSb3QtmdymWdvLKEEGyiNvEHYs02sdiYRUm8qFQon4dwuAlnVWjIXgqMHmuYAHs6 w1wpBh7zepKca+kNi73GIdV7SSsi1rk8aSwlvjR18OVH79vIErkPuMk9wzDDcFKS LKPWVG79UA0/Js01rorywUYLIZofBd1OsxpGKXJEuqOFlcPyTJSIUMka5wLR4pah 3BEmhBnJM7C1al+Z2+nhnWSPP0urLy+Mp+T+tKD8DpOohHbX0uqWCoOGB6ge8RPw GIAFPk5YtwICQsHerF2tvtgB5lUOoAXcP4FnHfGyl7SqCFb72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhBQNh3ecANLsL5PtEZeyAzL1ESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMThh MjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvZGFmNmUxNGEtNDNhZS0z NzQ4LWJkZjQtYWQ4YmZiNTI4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4YTIyMDYtYmIyZC00OGNkLTli ZDgtNzgwNjc4MmUxYzQ2L2QxOGEyMjA2LWJiMmQtNDhjZC05YmQ4LTc4MDY3ODJl MWM0Ni5jcmwwHwYDVR0jBBgwFoAUQe//Kya/mIqusF1EWvyeh6utT1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2 NzgyZTFjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuJeDFLXjgrfTl+XGUZdQ3AGkD+QmLWY1JkoCB7woZp6lOhkKB0Fw7u KGnd7bjnvq2+yzrhhT8oW8PKWcNcS8Y1X0dto7ySXwPbDqT4dsA/xyALrgJKNGDS +VSu5XEpJLJ4m65HFxvwMAsqJ4WFgR7TGqKdm1CFktos4+XvIvKN9m49nlOqlWsc zzMNPDqHfCw91cyaQjHKPejk/xgQHshznHTu6bq491Z37phtKBwSnpJuBmAjSjRl n8UznSLXslmBJ5fpupG9wFFuxSVjpWasGSL5z0aFJsYaQFPufk0Fqw7l/XAGc5sw QtyqOjp7fjteZbPIlCXR2Lc0oP8VFXM= -----END CERTIFICATE-----Generated at Fri Aug 8 19:29:38 2025 by rpki-client