$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa File: 2997a217-d468-3059-978d-6d7d89969d6d.roa (raw, json) Hash identifier: 4HSSOcMqatkM8jL6yGmu2kMFio5+BrUa0+mlqDndnqw= Subject key identifier: 89:70:3E:72:5F:33:96:1F:6E:06:7E:59:09:C9:A2:B7:C3:A1:D3:31 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584A9BCB711966F791E6A802BC80 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 54905 IP address blocks: 23.234.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:71:19:66:f7:91:e6:a8:02:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=0239191d-a7ee-4ae7-8d54-2e2582c896ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:43:5a:34:29:2b:4c:87:8c:f6:c9:63:a4:bd: df:2d:14:ad:d8:45:ef:cd:5f:88:c1:ac:33:9f:b1: de:ce:89:cb:9f:89:0e:91:54:eb:4f:1e:54:0b:78: 63:98:a8:d7:0c:b1:bc:34:cc:42:6c:d3:67:7a:d1: 7f:e7:ea:b1:17:5d:aa:d0:cf:8a:f8:62:11:d5:49: d3:f5:b4:c5:ae:ba:be:ab:ae:88:88:2c:c8:8a:95: d8:01:c0:42:4f:3d:43:73:fd:9c:da:b6:1f:8f:7c: 32:4f:d7:a3:d6:8f:e6:81:55:a1:aa:7b:ba:37:49: 32:c7:6a:76:92:ac:04:83:81:71:b0:88:09:2c:25: ad:9d:36:10:e2:a8:0e:10:dc:07:79:a0:5f:c9:bf: cf:f4:6b:8c:d9:65:c1:9a:cc:08:f3:2a:f5:37:56: c1:d7:9e:f9:cf:a8:20:ea:87:a3:a3:34:3c:ac:d4: 77:8a:ca:6a:d5:9f:b4:a1:a0:3f:89:ed:ab:18:08: b9:e8:30:24:61:3e:57:5e:c2:c6:55:a7:b0:ef:51: dc:f8:8d:e8:f9:87:da:70:be:31:44:ab:34:b4:c7: 51:e6:f9:38:ac:e6:0a:6c:a1:9e:55:a1:8f:2e:f3: 3c:4d:74:71:c0:14:e9:d9:96:6a:6b:fd:f2:c3:68: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:70:3E:72:5F:33:96:1F:6E:06:7E:59:09:C9:A2:B7:C3:A1:D3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3f:b2:9b:7f:b9:99:af:df:02:24:65:94:29:4c:16:49:f7: 6c:55:bc:6f:c3:49:10:a3:b0:75:cf:69:8c:df:8d:94:70:67: 3e:ab:e8:f0:37:d0:6d:66:95:ef:b5:ae:c0:75:62:9e:72:82: a3:41:b3:59:53:00:09:1b:c7:f0:9d:90:62:54:df:8c:41:a5: 8a:45:53:4a:ca:41:0b:ed:34:5a:88:d5:e0:db:91:39:31:73: 15:02:b8:04:87:a2:45:92:61:bf:54:14:bf:81:93:52:f7:df: 1a:1c:af:9e:91:f8:0f:41:21:e0:d0:29:07:d5:35:82:d7:95: 9e:37:f7:ba:6e:f8:33:51:f8:f0:2a:6e:5e:91:d4:37:da:1d: 62:48:d1:3a:48:80:56:af:a7:3d:e3:0a:57:3a:86:b7:3c:57: 60:07:36:a5:8e:cf:03:c8:3f:40:fa:c4:ad:b2:d1:42:b2:b9: d2:56:ca:b0:64:79:fa:41:cf:97:c4:34:78:99:ee:42:06:76: 48:ac:be:33:e5:43:ed:c7:bf:ff:5e:5b:91:9b:ae:10:e8:97: 94:53:7a:93:62:07:6b:c9:88:77:60:1a:9b:ca:ed:bb:b1:5b: c6:46:67:5c:09:f1:f4:8e:46:a4:67:3d:8c:ec:24:5a:d1:13: 41:0c:6d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3EZZveR5qgCvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk MDIzOTE5MWQtYTdlZS00YWU3LThkNTQtMmUyNTgyYzg5NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNaNCkrTIeM9sljpL3fLRSt2EXvzV+Iwawz n7HezonLn4kOkVTrTx5UC3hjmKjXDLG8NMxCbNNnetF/5+qxF12q0M+K+GIR1UnT 9bTFrrq+q66IiCzIipXYAcBCTz1Dc/2c2rYfj3wyT9ej1o/mgVWhqnu6N0kyx2p2 kqwEg4FxsIgJLCWtnTYQ4qgOENwHeaBfyb/P9GuM2WXBmswI8yr1N1bB1575z6gg 6oejozQ8rNR3ispq1Z+0oaA/ie2rGAi56DAkYT5XXsLGVaew71Hc+I3o+YfacL4x RKs0tMdR5vk4rOYKbKGeVaGPLvM8TXRxwBTp2ZZqa/3yw2i1ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlwPnJfM5YfbgZ+WQnJorfDodMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjk5N2EyMTctZDQ2OC0z MDU5LTk3OGQtNmQ3ZDg5OTY5ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo/spt/uZmv3wIkZZQpTBZJ92xVvG/DSRCjsHXPaYzfjZRwZz6r6PA3 0G1mle+1rsB1Yp5ygqNBs1lTAAkbx/CdkGJU34xBpYpFU0rKQQvtNFqI1eDbkTkx cxUCuASHokWSYb9UFL+Bk1L33xocr56R+A9BIeDQKQfVNYLXlZ4397pu+DNR+PAq bl6R1DfaHWJI0TpIgFavpz3jClc6hrc8V2AHNqWOzwPIP0D6xK2y0UKyudJWyrBk efpBz5fENHiZ7kIGdkisvjPlQ+3Hv/9eW5GbrhDol5RTepNiB2vJiHdgGpvK7bux W8ZGZ1wJ8fSORqRnPYzsJFrRE0EMbfg= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:47 2025 by rpki-client