$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa File: 3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa (raw, json) Hash identifier: 17DdlHkKYEOdmKMcHdAIrWKZGwD6y3K6UWRCtP+9rjg= Subject key identifier: B5:78:5A:23:84:C6:36:9D:D1:F2:E3:F5:3D:30:6D:D4:07:95:32:45 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584A9A6633742CFCE33D64951780 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 398712 IP address blocks: 23.226.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:33:74:2c:fc:e3:3d:64:95:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=2dd31c95-8e46-4f69-ac5c-ae790ecea972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:8b:c7:ad:25:49:5a:95:2c:72:cc:82:33: ec:46:98:d8:f1:b5:68:c9:63:85:55:af:ff:93:63: de:de:a6:db:37:1c:21:d9:b5:c1:46:b0:69:ce:54: 96:ad:d4:fc:d4:21:bf:83:32:58:f7:05:13:ea:55: d4:b6:86:d3:e0:9e:51:4b:3f:7f:8f:82:63:55:3f: a7:98:6c:90:2b:9e:5d:27:20:82:fc:ee:ea:f6:43: 73:50:5a:b6:0c:04:6b:50:e7:a5:6f:10:69:1a:29: 95:fd:0e:ae:c6:d6:dc:d6:da:12:87:48:00:ff:8d: de:9b:b4:6d:fb:3e:df:f5:65:8d:51:5f:52:16:a1: bf:52:da:42:ca:96:80:64:7e:d2:f4:65:4d:eb:24: 7b:a4:7e:91:20:ad:03:dc:1c:5c:aa:01:6e:a3:62: 84:f0:b4:2e:92:93:71:5d:f4:d7:39:8e:19:17:77: 0c:70:7f:e2:4e:30:e3:f2:5f:11:52:df:11:c1:4f: 9a:e9:52:1f:be:d5:4b:64:af:1b:fd:12:78:3a:b5: 25:71:89:8d:8f:20:4c:04:7d:76:32:43:2c:70:7d: d0:0d:63:6b:be:d7:ef:bb:77:1d:c2:1d:f3:0e:9f: 9b:2c:ea:cb:7d:fe:00:dd:a7:44:0e:b8:ae:3a:1a: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:5A:23:84:C6:36:9D:D1:F2:E3:F5:3D:30:6D:D4:07:95:32:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f6:5c:d9:2d:e3:0a:3b:2f:cc:63:ea:69:68:4f:99:6a:64: 28:62:69:29:ba:81:7c:d8:e5:60:0f:8d:e9:df:d3:69:e7:bc: ab:df:de:6f:d6:51:24:7b:33:69:0e:d4:fd:be:fc:fa:dc:1e: 30:d4:51:d8:23:ca:23:f3:7a:ab:88:bf:bf:29:ec:46:0e:fb: db:6d:c9:c3:57:8e:94:1c:c0:be:c6:bf:92:37:da:bf:db:c1: 7b:a7:b4:6c:13:cc:75:ad:4b:26:9d:28:cc:51:3c:0f:4e:8f: 3f:71:88:7c:fe:8f:a3:9b:7c:28:4d:1d:8e:3b:a9:19:de:69: ee:73:49:ac:fc:93:16:f5:cc:35:2e:b0:01:ff:69:4c:4b:ee: f1:a9:b0:e0:bb:f5:4d:70:3c:44:56:17:6b:92:b6:60:8b:46: b4:ae:99:1d:e0:75:c4:a6:35:4b:f8:18:74:b8:57:eb:e6:a5: 15:2b:2a:57:73:2f:7f:3c:10:7b:aa:cc:a2:5e:ab:1b:f3:eb: 2c:5c:c8:50:bd:44:f5:74:c5:46:6e:44:f5:38:19:40:d2:f8: a1:32:c5:47:91:c0:8e:e7:c9:2d:b0:ca:9a:03:66:08:8c:1e: 6f:6b:2e:f9:35:fa:e9:d8:f0:e8:82:bd:51:1d:4d:b8:9d:2f: 86:41:fe:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjN0LPzjPWSVF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MmRkMzFjOTUtOGU0Ni00ZjY5LWFjNWMtYWU3OTBlY2VhOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfiLx60lSVqVLHLMgjPsRpjY8bVoyWOFVa// k2Pe3qbbNxwh2bXBRrBpzlSWrdT81CG/gzJY9wUT6lXUtobT4J5RSz9/j4JjVT+n mGyQK55dJyCC/O7q9kNzUFq2DARrUOelbxBpGimV/Q6uxtbc1toSh0gA/43em7Rt +z7f9WWNUV9SFqG/UtpCypaAZH7S9GVN6yR7pH6RIK0D3BxcqgFuo2KE8LQukpNx XfTXOY4ZF3cMcH/iTjDj8l8RUt8RwU+a6VIfvtVLZK8b/RJ4OrUlcYmNjyBMBH12 MkMscH3QDWNrvtfvu3cdwh3zDp+bLOrLff4A3adEDriuOhrmwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV4WiOExjad0fLj9T0wbdQHlTJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvM2NlMDcxYTAtYjhkOC0z NzgwLWEzNDAtYjdkYTVlMmVlZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb2XNkt4wo7L8xj6mloT5lqZChiaSm6gXzY5WAPjenf02nnvKvf3m/W USR7M2kO1P2+/PrcHjDUUdgjyiPzequIv78p7EYO+9ttycNXjpQcwL7Gv5I32r/b wXuntGwTzHWtSyadKMxRPA9Ojz9xiHz+j6ObfChNHY47qRneae5zSaz8kxb1zDUu sAH/aUxL7vGpsOC79U1wPERWF2uStmCLRrSumR3gdcSmNUv4GHS4V+vmpRUrKldz L388EHuqzKJeqxvz6yxcyFC9RPV0xUZuRPU4GUDS+KEyxUeRwI7nyS2wypoDZgiM Hm9rLvk1+unY8OiCvVEdTbidL4ZB/s4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:14 2025 by rpki-client