$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa File: cf282bcc-6ac2-3810-91aa-421d66fa8561.roa (raw, json) Hash identifier: 3HYIWmGdkYEH+WZrjHkSQXr6jc14msfMmW7gZO6vhSs= Subject key identifier: 3A:4B:90:E1:75:22:5D:7E:31:00:73:F6:45:3B:F0:7D:7A:37:51:2F Certificate issuer: /CN=4559e616-17ae-4214-9407-2e51c3be0fa4 Certificate serial: 010D0C9F4328584A9FFBAB9CD339D032B35C9880 Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 1030 IP address blocks: 23.165.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ab:9c:d3:39:d0:32:b3:5c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=02dc0891-7e10-4548-96cf-03e283d7777e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:4e:fd:6a:e6:6e:6c:98:cb:37:f0:ce:82: 79:1e:1b:b3:3d:23:fc:9b:44:e6:09:81:a6:8a:bf: 0c:33:fc:da:50:45:20:6d:a0:cc:04:e3:70:1d:7f: d3:e7:04:89:1b:72:55:ce:90:4c:02:7e:d3:d5:48: 14:6c:78:e2:63:e7:2d:20:a6:d0:e1:1a:6c:5d:8d: 90:46:21:7b:99:f5:e6:10:6e:b5:f6:fe:68:26:9f: 5f:80:01:fa:b3:c3:cd:78:ac:d8:90:c7:61:7f:49: 09:fe:4c:00:09:15:c2:62:38:2a:b5:72:93:5c:05: d9:ee:0d:82:d7:16:b1:41:7e:a3:23:48:ca:a9:17: 6b:f9:3c:96:2d:b8:c8:a1:6f:43:99:89:01:3a:c0: 85:bf:88:d4:8b:47:22:46:fc:fd:36:08:40:32:0b: 6d:2f:d9:d3:00:6f:9b:36:95:fb:55:3c:ee:be:2e: 95:72:1a:28:87:11:e0:b3:1d:b2:a2:fb:fb:a8:c9: ab:9a:9f:b0:dc:07:18:3a:a0:16:cb:19:c8:d3:af: 43:02:72:67:d4:02:7c:d0:90:c2:74:e6:ea:80:28: 65:bc:50:19:a7:de:1a:71:59:95:e7:db:87:f6:41: 96:4d:9d:5c:32:0b:0f:18:7c:79:9e:c3:d0:cd:98: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4B:90:E1:75:22:5D:7E:31:00:73:F6:45:3B:F0:7D:7A:37:51:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl X509v3 Authority Key Identifier: keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer sbgp-ipAddrBlock: critical IPv4: 23.165.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:01:40:d4:87:da:66:d4:1a:79:1e:af:41:77:0c:1e:4a:51: 33:3d:3f:ff:64:8d:ed:c3:c8:3d:9c:a8:62:6c:e9:e2:73:5f: 03:c1:5f:3b:51:52:ea:9d:ef:11:c2:1e:0a:bc:86:d1:61:49: 66:96:5e:56:52:d4:98:9f:97:3b:0a:74:af:5d:ff:f6:7e:1a: 93:ff:3f:6d:a6:36:49:97:dd:92:3f:ca:c5:13:84:e0:5d:f6: dc:f2:ab:64:59:35:0b:31:fb:bb:aa:fb:49:74:a7:6f:21:c7: 38:b9:46:75:1e:a6:97:2d:8b:3d:42:50:9f:96:2a:21:75:d4: 1f:ca:ec:1a:25:74:c2:8d:c0:76:57:e9:f9:ff:37:1e:da:18: 58:07:4e:ab:39:e7:f1:69:46:e8:13:89:c2:89:96:dc:48:86: c4:5d:cd:be:82:ec:f7:b8:00:c7:8f:1f:a9:24:e9:e0:ae:89: f4:5f:2b:24:b2:0a:cc:9e:e6:ec:62:4e:08:c5:3a:c6:70:b1: a4:08:36:17:0a:64:32:ab:1d:4c:c7:1a:66:db:a2:ea:5a:36: 9f:50:0c:e3:84:0f:bf:c7:2a:86:ea:06:a7:11:1b:ca:4f:a9: a2:38:d4:f8:bf:88:8d:9c:8f:9e:bf:14:fa:3e:f1:43:d4:e8: 05:43:da:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6uc0znQMrNcmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1OWU2MTYtMTdhZS00MjE0LTk0MDctMmU1MWMzYmUw ZmE0MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MDJkYzA4OTEtN2UxMC00NTQ4LTk2Y2YtMDNlMjgzZDc3NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV5O/WrmbmyYyzfwzoJ5HhuzPSP8m0TmCYGm ir8MM/zaUEUgbaDMBONwHX/T5wSJG3JVzpBMAn7T1UgUbHjiY+ctIKbQ4RpsXY2Q RiF7mfXmEG619v5oJp9fgAH6s8PNeKzYkMdhf0kJ/kwACRXCYjgqtXKTXAXZ7g2C 1xaxQX6jI0jKqRdr+TyWLbjIoW9DmYkBOsCFv4jUi0ciRvz9NghAMgttL9nTAG+b NpX7VTzuvi6VchoohxHgsx2yovv7qMmrmp+w3AcYOqAWyxnI069DAnJn1AJ80JDC dObqgChlvFAZp94acVmV59uH9kGWTZ1cMgsPGHx5nsPQzZirAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpLkOF1Il1+MQBz9kU78H16N1EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTU5 ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNiZTBmYTQvY2YyODJiY2MtNmFjMi0z ODEwLTkxYWEtNDIxZDY2ZmE4NTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU1OWU2MTYtMTdhZS00MjE0LTk0 MDctMmU1MWMzYmUwZmE0LzQ1NTllNjE2LTE3YWUtNDIxNC05NDA3LTJlNTFjM2Jl MGZhNC5jcmwwHwYDVR0jBBgwFoAUx/Eo6KeaZbVHmT3K72Sx13tfiQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUx YzNiZTBmYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6XoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQBQNSH2mbUGnker0F3DB5KUTM9P/9kje3DyD2cqGJs6eJzXwPBXztR Uuqd7xHCHgq8htFhSWaWXlZS1JiflzsKdK9d//Z+GpP/P22mNkmX3ZI/ysUThOBd 9tzyq2RZNQsx+7uq+0l0p28hxzi5RnUeppctiz1CUJ+WKiF11B/K7BoldMKNwHZX 6fn/Nx7aGFgHTqs55/FpRugTicKJltxIhsRdzb6C7Pe4AMePH6kk6eCuifRfKySy Csye5uxiTgjFOsZwsaQINhcKZDKrHUzHGmbboupaNp9QDOOED7/HKobqBqcRG8pP qaI41Pi/iI2cj56/FPo+8UPU6AVD2qg= -----END CERTIFICATE-----Generated at Wed Aug 6 16:09:50 2025 by rpki-client