$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa File: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (raw, json) Hash identifier: Igv6DCNG/r/DbsYefnyFdQI1K+EfD4Slj7fZ+PiR4u4= Subject key identifier: C0:1A:65:D8:C7:DE:7B:4E:9B:1C:A2:79:B0:1F:93:60:19:04:F3:13 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584AAB266AB014F229A3EA5AAE40 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 46733 IP address blocks: 23.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6a:b0:14:f2:29:a3:ea:5a:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=da163fe3-e6b7-41c7-bf92-aa7eac0caf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:af:48:6c:c0:2f:67:90:ea:84:3f:54:fc: 7d:20:91:da:cb:84:70:b2:ef:3b:17:98:8d:e3:d8: 40:d6:3d:42:d5:3f:f2:1a:63:19:f0:0e:32:f2:40: 5e:b2:c7:61:64:46:55:32:4d:b5:d0:23:f9:2e:60: 3c:67:ec:7a:e9:c1:37:75:b4:a6:77:2b:3a:5f:92: 06:22:7f:6b:79:a1:78:c3:56:ac:ac:4a:43:dd:4a: 55:e8:0b:21:6a:46:88:bc:70:05:69:ef:01:b4:73: 21:04:7f:9c:32:cf:d6:70:41:58:62:20:0b:93:07: 8c:e3:7b:97:9b:00:88:93:3e:07:9b:1e:0d:bf:32: 17:be:cb:8d:b9:2b:75:ca:b8:4d:d5:c8:67:55:10: ba:a5:df:45:f8:f5:1a:e8:3c:f3:4d:2d:21:79:03: 69:0f:28:08:4f:1a:35:46:03:9e:aa:46:00:33:33: e7:75:8d:08:12:5a:90:8d:1d:ce:2f:65:8b:2f:6d: eb:69:0a:6a:3e:a5:a2:b3:dc:b8:a7:7b:c8:3e:b1: 92:24:48:40:7d:c1:c9:32:f6:98:2b:c6:cb:38:ad: 8b:35:25:1d:bc:3c:50:5f:e9:e8:91:13:5d:ec:24: 1d:3c:d2:7b:26:78:05:97:fa:3a:78:bb:1c:30:d9: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1A:65:D8:C7:DE:7B:4E:9B:1C:A2:79:B0:1F:93:60:19:04:F3:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:8c:37:d0:56:e7:63:50:0e:83:16:63:f5:43:2b:ed:e5: eb:34:bf:69:be:0b:b5:c8:af:6a:85:6d:21:0c:28:2d:f1:f8: 8c:12:dd:49:91:25:8a:1b:df:82:b9:6e:b2:0f:83:e1:18:48: 1d:62:77:a2:4c:2b:17:db:57:d9:a8:fd:08:a6:9d:e6:f2:a9: 4c:55:6c:81:72:e2:39:b8:00:68:71:a8:1c:0d:31:b3:70:08: be:bb:e2:c1:09:09:a8:34:bb:55:32:65:55:99:aa:e8:ef:f6: d4:56:28:c7:3d:32:64:dd:e6:fe:cd:bd:7c:20:01:aa:20:c6: 5e:17:13:c8:a8:03:7a:e2:4d:fd:07:2b:30:2f:4a:8d:a9:ce: f2:2e:66:8f:6b:71:e4:5c:79:9c:9d:2e:8d:f9:d5:8d:fb:43: a6:77:c9:b7:57:00:52:4f:9b:84:f4:d3:33:61:cb:14:0f:5b: d3:99:22:3c:25:55:96:c4:eb:aa:34:2d:84:17:b1:b1:50:29: ee:29:a9:26:75:e7:34:95:a0:d5:2a:01:0d:c1:5e:5c:08:ed: fb:fa:16:8a:40:ac:ca:ab:65:85:3a:46:b9:21:11:46:6b:42: b9:1e:09:74:b4:a1:ae:80:f8:92:cf:0e:6b:d8:7b:7c:d2:b4: 16:86:de:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmqwFPIpo+parkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZGExNjNmZTMtZTZiNy00MWM3LWJmOTItYWE3ZWFjMGNhZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXWvSGzAL2eQ6oQ/VPx9IJHay4Rwsu87F5iN 49hA1j1C1T/yGmMZ8A4y8kBessdhZEZVMk210CP5LmA8Z+x66cE3dbSmdys6X5IG In9reaF4w1asrEpD3UpV6AshakaIvHAFae8BtHMhBH+cMs/WcEFYYiALkweM43uX mwCIkz4Hmx4NvzIXvsuNuSt1yrhN1chnVRC6pd9F+PUa6DzzTS0heQNpDygITxo1 RgOeqkYAMzPndY0IElqQjR3OL2WLL23raQpqPqWis9y4p3vIPrGSJEhAfcHJMvaY K8bLOK2LNSUdvDxQX+nokRNd7CQdPNJ7JngFl/o6eLscMNmxkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAaZdjH3ntOmxyiebAfk2AZBPMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvMDdmNmI1ZDAtZTgwYS0z NDRiLWEyNTItMjEyOWM2NGQ5NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFswjDfQVudjUA6DFmP1Qyvt5es0v2m+C7XIr2qFbSEMKC3x+IwS3UmR JYob34K5brIPg+EYSB1id6JMKxfbV9mo/QimnebyqUxVbIFy4jm4AGhxqBwNMbNw CL674sEJCag0u1UyZVWZqujv9tRWKMc9MmTd5v7NvXwgAaogxl4XE8ioA3riTf0H KzAvSo2pzvIuZo9rceRceZydLo351Y37Q6Z3ybdXAFJPm4T00zNhyxQPW9OZIjwl VZbE66o0LYQXsbFQKe4pqSZ15zSVoNUqAQ3BXlwI7fv6FopArMqrZYU6RrkhEUZr QrkeCXS0oa6A+JLPDmvYe3zStBaG3sQ= -----END CERTIFICATE-----Generated at Tue Aug 5 08:23:59 2025 by rpki-client