$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa File: be0dee30-c326-3427-9dce-49d70b8e6c8c.roa (raw, json) Hash identifier: V2M5aetrg/RyjNtZTUtbjE4Jg4ITMbZYWV1E3XB43q0= Subject key identifier: 64:13:73:E3:AE:39:90:09:8D:78:37:A2:E3:8F:EE:D3:81:82:BD:E1 Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584AA42B84CB9A772A29D68DE650 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 395842 IP address blocks: 23.144.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:84:cb:9a:77:2a:29:d6:8d:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=eb28fd42-9031-4f77-a767-d207d122bf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6e:7e:24:55:0b:04:ac:89:3c:a0:9f:0b:d1: cf:90:90:ad:6e:e5:54:a1:78:2f:47:37:d2:42:f6: 71:a9:22:6f:46:41:7a:9a:7c:45:e9:bb:83:a1:a3: 5a:ff:0d:17:66:ce:5b:dc:d9:31:ef:b7:5b:f1:eb: fb:18:c3:65:54:20:34:fb:1d:a0:f8:33:3e:8e:19: 4b:50:49:0b:43:83:53:23:67:fd:da:55:9e:5a:d8: ff:b0:0a:e5:ab:f6:92:30:2b:20:5a:3c:8c:da:44: df:9c:11:e8:22:87:33:61:07:3a:7a:5c:fa:7a:e5: 99:38:e7:d5:c7:9b:f9:d5:b1:fd:dd:cd:de:f6:76: 59:a4:b1:65:5b:bf:36:c7:2d:de:74:68:95:dc:ec: 2b:b6:9e:0b:d3:ff:9d:aa:c9:c6:49:24:0d:42:77: ff:c3:25:07:76:03:27:73:50:46:d5:b0:39:41:2d: 66:59:5b:36:28:34:71:d5:06:a4:a4:97:ea:84:7e: 71:57:af:31:c0:43:94:9d:e2:eb:0b:f2:ab:dd:fa: 4c:6b:92:4e:f1:2b:33:a8:ff:25:12:34:04:83:ee: c8:6b:bd:96:d2:be:7b:87:1f:67:d1:a7:a1:c1:17: 0e:6b:71:32:72:33:45:52:7f:ae:0f:ed:b5:63:24: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:73:E3:AE:39:90:09:8D:78:37:A2:E3:8F:EE:D3:81:82:BD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv4: 23.144.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:35:ca:a7:ae:0c:81:32:36:1b:9c:f6:2d:22:bc:41:e4:44: a2:54:b6:6c:80:1f:b4:b1:a5:f7:90:99:04:34:a0:50:4b:6e: 9f:96:fe:d1:67:e5:b3:95:aa:df:a9:16:75:cf:b2:b1:2b:2e: 96:25:d3:92:01:82:f2:6b:3d:f2:e1:d6:61:c9:15:42:c4:95: 6a:a1:57:1d:f7:0c:71:2a:b8:42:8d:00:60:13:dd:d9:8f:13: ea:ce:7e:4e:49:76:dd:31:98:72:8e:aa:62:7c:26:79:ee:cf: 71:e4:b9:39:f2:c4:17:f6:6c:4e:fe:ac:e3:48:10:4c:d5:89: 8d:49:a4:de:5e:b5:09:a3:ad:61:78:93:36:33:89:0f:d4:9f: 15:26:99:24:ea:df:5e:4b:de:7f:b3:58:fc:36:3c:a5:49:09: fe:16:0e:71:1a:49:0c:3f:da:68:2a:cc:83:0f:ec:ee:57:de: 6b:a2:58:49:7e:4b:31:2f:1d:8a:7d:d8:28:04:6c:95:f5:93: 19:56:9f:88:b8:08:13:18:b7:61:25:8e:f3:95:51:42:f2:0c: 0a:1f:9e:c2:74:ee:29:c1:a6:15:8f:3a:df:f7:7a:0f:48:9f: e6:3a:18:e7:c4:4a:73:38:7e:33:0c:2c:73:ef:f4:63:f4:40: 4b:14:c8:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4TLmncqKdaN5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZWIyOGZkNDItOTAzMS00Zjc3LWE3NjctZDIwN2QxMjJiZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW5+JFULBKyJPKCfC9HPkJCtbuVUoXgvRzfS QvZxqSJvRkF6mnxF6buDoaNa/w0XZs5b3Nkx77db8ev7GMNlVCA0+x2g+DM+jhlL UEkLQ4NTI2f92lWeWtj/sArlq/aSMCsgWjyM2kTfnBHoIoczYQc6elz6euWZOOfV x5v51bH93c3e9nZZpLFlW782xy3edGiV3Owrtp4L0/+dqsnGSSQNQnf/wyUHdgMn c1BG1bA5QS1mWVs2KDRx1QakpJfqhH5xV68xwEOUneLrC/Kr3fpMa5JO8SszqP8l EjQEg+7Ia72W0r57hx9n0aehwRcOa3EycjNFUn+uD+21YyR3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQTc+OuOZAJjXg3ouOP7tOBgr3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvYmUwZGVlMzAtYzMyNi0z NDI3LTlkY2UtNDlkNzBiOGU2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ1yqeuDIEyNhuc9i0ivEHkRKJUtmyAH7SxpfeQmQQ0oFBLbp+W/tFn 5bOVqt+pFnXPsrErLpYl05IBgvJrPfLh1mHJFULElWqhVx33DHEquEKNAGAT3dmP E+rOfk5Jdt0xmHKOqmJ8Jnnuz3HkuTnyxBf2bE7+rONIEEzViY1JpN5etQmjrWF4 kzYziQ/UnxUmmSTq315L3n+zWPw2PKVJCf4WDnEaSQw/2mgqzIMP7O5X3muiWEl+ SzEvHYp92CgEbJX1kxlWn4i4CBMYt2EljvOVUULyDAofnsJ07inBphWPOt/3eg9I n+Y6GOfESnM4fjMMLHPv9GP0QEsUyOE= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:06 2025 by rpki-client