$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json) Hash identifier: X1ehLcfjrhbLy6gI9SZ6AnZow1+b+H6uhwIQHhNbCjI= Subject key identifier: E8:44:30:E0:46:EE:A2:21:73:69:76:3A:55:DB:20:44:81:66:BB:88 Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Certificate serial: 010D0C9F4328584A9FFBAB64F6D8F1015AE7B5C0 Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 399935 IP address blocks: 23.168.216.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ab:64:f6:d8:f1:01:5a:e7:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=43396853-a242-4687-ab99-979b95531424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:3f:38:c6:fe:57:94:d4:15:c6:52:5c:80: 23:c2:1c:91:c2:cc:fd:a1:f9:ac:66:a3:cf:c5:87: 00:a6:d4:96:3d:6a:72:91:93:f0:f0:58:b5:05:45: c7:26:9b:41:83:bb:fb:76:f6:3a:5d:15:f8:fe:ba: 82:a6:0b:3d:02:b4:42:c6:d8:a5:bb:76:89:49:7f: 3c:1b:9c:d3:7d:82:08:99:80:5b:a0:27:c8:08:37: d0:06:ba:d9:63:2e:91:91:e8:be:d2:41:ae:f9:9f: 97:c8:d1:17:7f:82:02:fb:86:7d:8f:92:79:9e:2f: 0f:c4:1a:e6:94:62:30:f7:c4:30:6d:f5:f9:85:f8: e9:35:21:53:26:7e:c6:73:b2:1e:45:76:de:4a:b6: 29:e8:a1:de:48:bc:21:1a:11:21:81:49:08:4d:19: 9e:20:30:3f:dd:7c:ce:80:60:e6:96:6e:af:7a:25: d3:a0:9e:f9:3c:fd:21:7c:f8:a8:db:d5:7f:6e:d1: 56:1c:8c:62:41:49:01:e6:cc:c3:54:07:45:c3:dd: 2a:cd:a5:f2:45:7b:91:f9:6c:49:fa:ee:5d:b6:15: 7d:2c:f1:8a:4d:38:4b:cf:bc:a3:a7:1d:19:3b:d9: f2:d6:2a:34:ec:09:2a:23:35:60:04:ad:70:55:ae: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:44:30:E0:46:EE:A2:21:73:69:76:3A:55:DB:20:44:81:66:BB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl X509v3 Authority Key Identifier: keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:dd:76:3a:e5:4b:69:02:83:31:9c:59:7e:c9:f5:c5:2b:ea: 62:87:f3:af:1d:8b:e1:d7:95:74:2e:ca:8e:80:d5:b9:2e:f9: b3:da:a4:d8:a8:9c:17:e3:f7:89:fc:79:2e:37:68:11:a7:6c: b1:71:3c:19:06:b1:9d:09:a7:a3:29:cd:46:18:bd:38:67:db: 86:c4:0f:82:50:5f:6e:14:c5:29:d0:e4:25:7a:05:6e:b6:7b: 35:d3:78:23:a0:b4:01:27:2b:b1:18:80:af:ee:07:59:7b:49: 2f:e9:a3:f2:c4:4a:e3:61:12:f6:19:d1:b8:2b:85:e5:83:02: 96:81:3e:09:80:48:f3:fd:0a:48:17:68:92:d0:4f:e5:d1:3d: 96:6f:e2:b1:43:e8:81:46:92:e5:af:eb:0c:ee:e0:52:67:c2: bc:61:da:34:73:96:b1:9a:49:0c:b4:4a:7e:e7:a4:60:bd:bd: 17:8f:3c:92:91:c2:a1:9c:24:55:90:41:9c:4b:4b:76:23:27: 4f:6b:5e:a4:aa:d0:5f:6f:37:30:15:5b:56:f8:02:1d:19:cb: a9:6e:37:d4:62:f6:15:bc:f8:83:be:0e:f1:d2:8f:c3:9d:f6: a9:8c:f6:17:84:3c:fb:80:cd:3e:a8:cd:63:7a:09:c6:de:7f: 5b:7f:cd:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6tk9tjxAVrntcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw MDk4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NDMzOTY4NTMtYTI0Mi00Njg3LWFiOTktOTc5Yjk1NTMxNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQ/OMb+V5TUFcZSXIAjwhyRwsz9ofmsZqPP xYcAptSWPWpykZPw8Fi1BUXHJptBg7v7dvY6XRX4/rqCpgs9ArRCxtilu3aJSX88 G5zTfYIImYBboCfICDfQBrrZYy6Rkei+0kGu+Z+XyNEXf4IC+4Z9j5J5ni8PxBrm lGIw98QwbfX5hfjpNSFTJn7Gc7IeRXbeSrYp6KHeSLwhGhEhgUkITRmeIDA/3XzO gGDmlm6veiXToJ75PP0hfPio29V/btFWHIxiQUkB5szDVAdFw90qzaXyRXuR+WxJ +u5dthV9LPGKTThLz7yjpx0ZO9ny1io07AkqIzVgBK1wVa6k7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhEMOBG7qIhc2l2OlXbIESBZruIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5 ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvODUzZDI3NjEtNDMwZi0z NDA2LTgzNTMtZTI5MWU4N2M4YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm YzFiZTAwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvddjrlS2kCgzGcWX7J9cUr6mKH868di+HXlXQuyo6A1bku+bPapNio nBfj94n8eS43aBGnbLFxPBkGsZ0Jp6MpzUYYvThn24bED4JQX24UxSnQ5CV6BW62 ezXTeCOgtAEnK7EYgK/uB1l7SS/po/LESuNhEvYZ0bgrheWDApaBPgmASPP9CkgX aJLQT+XRPZZv4rFD6IFGkuWv6wzu4FJnwrxh2jRzlrGaSQy0Sn7npGC9vRePPJKR wqGcJFWQQZxLS3YjJ09rXqSq0F9vNzAVW1b4Ah0Zy6luN9Ri9hW8+IO+DvHSj8Od 9qmM9heEPPuAzT6ozWN6Ccbef1t/zYE= -----END CERTIFICATE-----Generated at Thu Aug 7 03:27:56 2025 by rpki-client