$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa File: a4248d18-50bd-3de2-869d-110232135253.roa (raw, json) Hash identifier: BiXyZfa9pWk8AeZ2QFiKvrVPJKjDDJDOOkJtSHnZfGI= Subject key identifier: 61:01:15:E3:7C:76:33:F4:F4:31:35:5B:21:25:7C:87:F0:D5:FD:24 Certificate issuer: /CN=bfe6b5ce-b18b-4608-80c9-5651cde85219 Certificate serial: 010D0C9F4328584ABD4B9E224FDD7658D1979E80 Authority key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 396100 IP address blocks: 23.164.168.0/24 maxlen: 24 141.193.0.0/23 maxlen: 24 2607:7540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9e:22:4f:dd:76:58:d1:97:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=94539d30-1166-4f57-894c-564366b7a479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d7:b2:7c:ba:fe:e8:81:7c:7c:bf:0f:54:5c: 4a:ab:9e:28:bc:8f:de:82:93:48:ac:9d:b2:34:b5: 71:75:95:e9:0e:c4:ee:5e:9f:b5:0b:25:ff:e7:48: dd:66:c8:d1:5e:0b:88:a3:cf:6d:30:46:13:fa:1e: b9:4d:4d:da:f4:3b:b1:e1:ba:70:f7:4e:e6:0f:5d: 59:e4:f4:76:36:8e:70:94:6c:80:9f:f3:65:c1:f0: ed:75:ad:b1:16:8a:4e:bf:c5:e6:f1:a0:9d:cd:f9: 92:97:39:fe:11:60:b3:64:11:7b:0d:a5:51:b0:6f: 13:48:f9:87:d3:1b:4d:62:1a:41:7c:fb:fc:e7:99: d2:29:37:25:9a:ae:50:c9:ea:b6:8f:5a:7d:e2:95: 18:ef:a1:0a:d8:fc:86:d9:db:d6:7e:5d:22:28:5a: 1f:d8:f8:1f:23:99:3a:ec:8e:2f:ad:cc:b8:da:c1: 94:6b:34:46:16:85:ed:ca:b2:9f:a0:8b:cf:36:77: 32:ac:4d:ea:0c:ce:8f:78:ec:54:08:f0:fd:1b:86: 17:3c:8d:69:31:01:65:51:b7:83:f1:98:b1:e6:4d: eb:fb:fa:f9:80:e1:e5:d1:b5:5c:a1:d2:17:aa:4a: 28:72:9e:ee:7c:5a:8a:c9:18:da:ed:b3:96:e8:0a: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:15:E3:7C:76:33:F4:F4:31:35:5B:21:25:7C:87:F0:D5:FD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl X509v3 Authority Key Identifier: keyid:E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer sbgp-ipAddrBlock: critical IPv4: 23.164.168.0/24 141.193.0.0/23 IPv6: 2607:7540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:76:d6:f5:ea:15:a1:64:69:3b:fa:dc:7f:99:c8:77:42:7a: a6:6a:6e:0f:9b:06:00:95:83:4b:db:11:39:e9:e0:d7:d6:9e: fb:0b:b2:46:72:e0:94:2b:6c:6a:39:c8:85:cd:0a:32:4b:0d: f7:a6:55:8b:01:b8:ee:6d:9a:df:73:4d:c4:5d:97:c7:7b:a1: 92:96:83:1f:25:42:20:20:73:03:a8:c8:da:cb:e2:40:16:96: 6f:e0:7e:9b:29:02:e1:dd:6a:29:41:be:17:f6:66:85:da:0e: dc:23:8b:e7:1f:0a:fc:7a:f4:fb:bf:13:02:93:f7:ea:40:eb: 9b:11:9f:e0:45:5e:db:fa:92:ab:eb:63:71:97:86:81:18:ab: 62:bc:9b:08:e8:ae:6b:35:d1:f4:8f:aa:8b:f1:38:d7:ba:7e: 33:4a:9d:a6:bf:ca:ac:64:63:e2:5d:ce:cf:cc:74:6b:bb:a7: c8:f1:ef:99:ae:45:ce:64:63:da:08:5e:ad:28:e8:9f:cd:a8: b9:c9:bf:18:7e:a5:3a:c5:55:ee:fa:91:da:ee:e8:67:55:34: 4e:5d:71:40:cc:d8:9b:7d:0f:a4:59:14:b0:c0:17:08:05:f9: 20:d8:f1:8a:60:a7:e2:d8:ff:a3:65:70:f9:dd:86:ba:fe:f4: 19:7e:27:e9 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEq9S54iT912WNGXnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZlNmI1Y2UtYjE4Yi00NjA4LTgwYzktNTY1MWNkZTg1 MjE5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTQ1MzlkMzAtMTE2Ni00ZjU3LTg5NGMtNTY0MzY2YjdhNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+deyfLr+6IF8fL8PVFxKq54ovI/egpNIrJ2y NLVxdZXpDsTuXp+1CyX/50jdZsjRXguIo89tMEYT+h65TU3a9Dux4bpw907mD11Z 5PR2No5wlGyAn/NlwfDtda2xFopOv8Xm8aCdzfmSlzn+EWCzZBF7DaVRsG8TSPmH 0xtNYhpBfPv855nSKTclmq5Qyeq2j1p94pUY76EK2PyG2dvWfl0iKFof2PgfI5k6 7I4vrcy42sGUazRGFoXtyrKfoIvPNncyrE3qDM6PeOxUCPD9G4YXPI1pMQFlUbeD 8Zix5k3r+/r5gOHl0bVcodIXqkoocp7ufFqKyRja7bOW6AoGdwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFGEBFeN8djP09DE1WyElfIfw1f0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmU2 YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2RlODUyMTkvYTQyNDhkMTgtNTBiZC0z ZGUyLTg2OWQtMTEwMjMyMTM1MjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmZlNmI1Y2UtYjE4Yi00NjA4LTgw YzktNTY1MWNkZTg1MjE5L2JmZTZiNWNlLWIxOGItNDYwOC04MGM5LTU2NTFjZGU4 NTIxOS5jcmwwHwYDVR0jBBgwFoAU4wTV5+RbGcycfWGjqqQcmYtItacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUx Y2RlODUyMTkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6SoAwQB jcEAMA0EAgACMAcDBQAmB3VAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZ21vXqFaFkaTv63H+ZyHdCeqZq bg+bBgCVg0vbETnp4NfWnvsLskZy4JQrbGo5yIXNCjJLDfemVYsBuO5tmt9zTcRd l8d7oZKWgx8lQiAgcwOoyNrL4kAWlm/gfpspAuHdailBvhf2ZoXaDtwji+cfCvx6 9Pu/EwKT9+pA65sRn+BFXtv6kqvrY3GXhoEYq2K8mwjorms10fSPqovxONe6fjNK naa/yqxkY+Jdzs/MdGu7p8jx75muRc5kY9oIXq0o6J/NqLnJvxh+pTrFVe76kdru 6GdVNE5dcUDM2Jt9D6RZFLDAFwgF+SDY8Ypgp+LY/6NlcPndhrr+9Bl+J+k= -----END CERTIFICATE-----Generated at Sat Aug 9 14:20:07 2025 by rpki-client