$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json) Hash identifier: ELw+hFo4Ou9+cYUNO/ETO9NbSVd08/Tiy7lBUNFFlhE= Subject key identifier: 23:E6:00:8C:22:72:0E:E2:46:64:8E:A4:B2:BA:D0:34:5D:01:CA:34 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584ABBE62C33887D14A5A135CD80 Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 20067 IP address blocks: 23.148.8.0/24 maxlen: 24 2602:811:c000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:2c:33:88:7d:14:a5:a1:35:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=36f684da-cb41-4a02-a499-eb085404d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:19:9b:fc:4a:05:0c:aa:e8:2d:35:22:e4: 37:0a:c6:40:74:ea:ec:fc:cc:c5:bd:12:de:f9:4f: fe:97:78:3e:7b:b5:8c:ab:1a:07:8a:73:22:a7:2d: 82:13:69:30:1e:c2:80:db:78:3f:da:93:0c:3a:41: be:2c:91:c5:b8:f9:1c:bd:c7:32:bb:90:9e:96:2e: 0c:0f:2d:9e:79:e0:fb:a3:b9:b1:cb:0e:d1:43:5d: c2:a3:df:cd:71:42:cf:98:35:db:86:32:0c:25:7e: 2f:15:3d:bf:f5:ae:0d:ad:c6:08:dd:0a:32:2d:fc: 7c:88:7f:01:b5:f0:70:e6:a6:24:26:7a:61:54:da: 55:ee:91:92:97:a3:44:47:5c:c7:f9:77:81:4a:d1: 8e:cf:74:17:54:6d:0f:5a:ab:8c:14:bd:b2:e9:4f: e5:a8:40:3f:26:27:f8:e9:c4:9f:7e:b2:12:c3:ca: 2a:04:67:8a:d1:68:de:b5:6d:67:13:19:ee:4d:57: c6:de:9b:c4:36:ae:1b:80:78:75:8b:b4:ec:ae:16: 53:11:f4:eb:ec:86:f6:43:00:f9:5b:1b:04:61:37: dd:2a:6e:73:ed:81:77:a6:cb:29:6d:9e:0c:3a:96: e7:6d:80:ee:d2:c7:c0:07:a5:67:76:11:05:87:fc: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:00:8C:22:72:0E:E2:46:64:8E:A4:B2:BA:D0:34:5D:01:CA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: 23.148.8.0/24 IPv6: 2602:811:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:55:77:5b:69:88:ff:eb:2c:4b:09:e1:d1:ee:3d:06:19:ba: 36:d3:e2:eb:7b:c0:66:73:5a:76:b5:53:c0:a9:c9:8c:40:32: 6b:28:4f:e2:90:54:2e:4c:11:c6:bb:fa:a2:5a:f5:62:01:d8: 26:bf:6d:ef:b4:1f:41:5a:cf:65:98:ff:cf:5c:9a:c6:1e:cb: cf:90:d3:17:7e:6a:5b:76:1c:70:b0:8d:51:9a:c0:da:00:b5: b3:9f:09:83:48:b9:5b:81:8d:29:90:08:ec:41:5e:e1:a4:d9: 9b:5b:a0:1f:8a:8e:31:35:c2:8e:be:d8:47:18:86:b0:19:10: 15:bf:00:91:c3:e8:5a:bc:04:a4:26:4d:e4:9c:d3:2c:e9:7b: ce:f8:29:1d:88:a4:3b:37:08:f7:0e:b3:d8:74:4f:52:82:46: 57:ad:4a:51:ac:75:0c:23:42:02:fe:59:b6:d9:ae:56:76:c2: c4:8d:75:ae:65:17:36:48:21:f2:f0:c0:a6:f4:75:f9:80:15: 1f:4b:d9:6d:c3:72:af:56:e5:06:bc:43:f4:06:0a:7f:9f:6d: 03:5e:dd:63:22:d4:c5:3f:00:f3:67:6b:66:45:05:b5:9c:ef: 29:21:ed:13:6f:dd:a3:3f:3d:30:45:65:61:9f:da:1c:ef:12: 96:af:20:65 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq75iwziH0UpaE1zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzZmNjg0ZGEtY2I0MS00YTAyLWE0OTktZWIwODU0MDRkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV4Zm/xKBQyq6C01IuQ3CsZAdOrs/MzFvRLe +U/+l3g+e7WMqxoHinMipy2CE2kwHsKA23g/2pMMOkG+LJHFuPkcvccyu5Celi4M Dy2eeeD7o7mxyw7RQ13Co9/NcULPmDXbhjIMJX4vFT2/9a4NrcYI3QoyLfx8iH8B tfBw5qYkJnphVNpV7pGSl6NER1zH+XeBStGOz3QXVG0PWquMFL2y6U/lqEA/Jif4 6cSffrISw8oqBGeK0WjetW1nExnuTVfG3pvENq4bgHh1i7TsrhZTEfTr7Ib2QwD5 WxsEYTfdKm5z7YF3psspbZ4MOpbnbYDu0sfAB6VndhEFh/xtiwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCPmAIwicg7iRmSOpLK60DRdAco0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvNWNjNjU3ODktZTAwNi0z YWE0LWFiNWItMzE2MDNiYTQ4ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5QIMA8E AgACMAkDBwQmAggRwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAFV3W2mI/+ssSwnh0e49Bhm6NtPi63vA ZnNadrVTwKnJjEAyayhP4pBULkwRxrv6olr1YgHYJr9t77QfQVrPZZj/z1yaxh7L z5DTF35qW3YccLCNUZrA2gC1s58Jg0i5W4GNKZAI7EFe4aTZm1ugH4qOMTXCjr7Y RxiGsBkQFb8AkcPoWrwEpCZN5JzTLOl7zvgpHYikOzcI9w6z2HRPUoJGV61KUax1 DCNCAv5ZttmuVnbCxI11rmUXNkgh8vDApvR1+YAVH0vZbcNyr1blBrxD9AYKf59t A17dYyLUxT8A82drZkUFtZzvKSHtE2/doz89MEVlYZ/aHO8Slq8gZQ== -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:51 2025 by rpki-client