$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json) Hash identifier: DRNMLQc/Ed7VMlMPS4gjm8g/rVyWL3GpBGHFsGmBxl0= Subject key identifier: 86:F7:46:A9:62:98:03:FA:DF:F5:BB:53:9A:C5:09:15:D6:5D:C6:E4 Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Certificate serial: 010D0C9F4328584A7BB0B8F51B81F79121A9AE40 Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 401489 IP address blocks: 23.191.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b8:f5:1b:81:f7:91:21:a9:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=97ad000d-711a-43b1-ad80-dbc62951ea95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:04:1e:b6:a2:41:02:5c:2c:dc:9f:14:c2: 53:a1:79:db:57:fb:ed:5c:b2:d5:68:f8:41:57:70: 60:b1:dc:02:54:f2:1f:1e:9e:7b:a4:21:9e:a1:9c: 32:59:b6:cd:41:4c:f7:60:89:ef:6f:ce:3c:b6:15: c4:cb:1f:dc:f2:5f:7d:1a:22:56:df:43:8f:7c:0a: 1b:07:24:ed:fe:a0:2c:88:04:ea:16:39:9a:23:47: 28:f1:72:78:13:d2:9a:02:96:0f:68:84:f5:50:df: 61:52:31:68:82:d5:ff:e5:10:05:60:35:97:02:7e: b6:bc:01:84:da:aa:0d:43:20:30:35:fd:15:56:52: 01:2b:4d:20:55:6c:94:01:5c:c9:44:5e:af:9c:be: 31:a8:cc:5c:2a:6f:d1:04:9e:07:84:3c:c2:42:80: eb:e4:1f:25:7b:dc:ac:1d:b6:40:63:f0:e4:6c:67: 7d:d7:e6:16:7e:01:83:16:52:54:cd:2a:54:fa:ad: 16:ce:f4:64:ea:b3:2d:20:6a:40:67:40:16:82:66: a4:73:37:61:ba:aa:ec:fc:9f:78:b2:c3:f4:49:d0: 3f:78:45:ae:2c:80:76:0b:e5:34:b0:f9:09:44:80: f2:d4:40:f2:bd:17:64:f2:8a:87:67:04:8b:58:d0: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F7:46:A9:62:98:03:FA:DF:F5:BB:53:9A:C5:09:15:D6:5D:C6:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl X509v3 Authority Key Identifier: keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer sbgp-ipAddrBlock: critical IPv4: 23.191.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:aa:76:13:52:39:de:82:0c:36:d2:f9:10:ab:37:f1:e7:d6: 46:19:8d:cf:89:ea:2e:57:b2:e7:fc:b5:7b:49:bd:e4:69:b4: 07:4b:d3:de:c3:ed:9c:77:20:ad:30:d6:1f:ed:76:44:1b:0e: f1:3a:b7:69:70:31:ed:26:42:bb:bb:cd:f0:61:7e:ec:a1:59: c5:a5:a5:97:db:e7:04:87:8b:b8:52:fc:5f:8c:a6:5e:3d:f9: 13:0e:09:59:1b:dc:42:8b:b7:98:d2:a9:f9:19:b5:78:33:53: 64:b3:a4:98:58:d8:a2:28:45:e6:7c:ae:d9:bd:05:52:99:70: f3:c0:91:82:70:d7:80:df:b2:df:ca:c7:e9:9f:ec:f8:18:0b: e5:5c:72:e3:92:58:0e:db:b2:73:94:d9:95:c0:7d:e6:b7:83: 01:97:3a:60:bc:e0:6e:f4:ca:da:d9:17:eb:0f:38:0b:95:74: 51:88:a7:46:d9:6f:a0:e8:5e:fe:99:c6:ee:9a:43:28:a7:f3: 8e:b9:e8:fa:da:01:c7:f7:b8:b1:8d:17:d0:e4:97:03:f2:68: 7c:52:bf:88:eb:83:66:cd:5d:22:8f:e2:fe:0c:9d:c3:c2:05: 67:fa:8f:1d:b2:2d:9a:fa:7a:49:d4:a8:49:44:31:63:0e:7e: 32:79:51:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLj1G4H3kSGprkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODEx YjE4MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTdhZDAwMGQtNzExYS00M2IxLWFkODAtZGJjNjI5NTFlYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm4EHraiQQJcLNyfFMJToXnbV/vtXLLVaPhB V3BgsdwCVPIfHp57pCGeoZwyWbbNQUz3YInvb848thXEyx/c8l99GiJW30OPfAob ByTt/qAsiATqFjmaI0co8XJ4E9KaApYPaIT1UN9hUjFogtX/5RAFYDWXAn62vAGE 2qoNQyAwNf0VVlIBK00gVWyUAVzJRF6vnL4xqMxcKm/RBJ4HhDzCQoDr5B8le9ys HbZAY/DkbGd91+YWfgGDFlJUzSpU+q0WzvRk6rMtIGpAZ0AWgmakczdhuqrs/J94 ssP0SdA/eEWuLIB2C+U0sPkJRIDy1EDyvRdk8oqHZwSLWNASPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb3RqlimAP63/W7U5rFCRXWXcbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0 MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvNTI1Y2I4Y2MtYTE5ZS0z NjJjLTgzNGItNjY0ZjFiYTliNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5 ODYtOGNkOWQwODExYjE4L2RhOTQyYTJlLWEyOGUtNGRkNy04OTg2LThjZDlkMDgx MWIxOC5jcmwwHwYDVR0jBBgwFoAUjx/K5tPSLHj+6uRZ9KttEgf4C/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5 ZDA4MTFiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiqdhNSOd6CDDbS+RCrN/Hn1kYZjc+J6i5Xsuf8tXtJveRptAdL097D 7Zx3IK0w1h/tdkQbDvE6t2lwMe0mQru7zfBhfuyhWcWlpZfb5wSHi7hS/F+Mpl49 +RMOCVkb3EKLt5jSqfkZtXgzU2SzpJhY2KIoReZ8rtm9BVKZcPPAkYJw14Dfst/K x+mf7PgYC+VccuOSWA7bsnOU2ZXAfea3gwGXOmC84G70ytrZF+sPOAuVdFGIp0bZ b6DoXv6Zxu6aQyin84656PraAcf3uLGNF9DklwPyaHxSv4jrg2bNXSKP4v4MncPC BWf6jx2yLZr6eknUqElEMWMOfjJ5Ub8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:24 2025 by rpki-client