$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa File: dca32146-dfdc-3078-86b5-f295935cc6e9.roa (raw, json) Hash identifier: FDcIj4jotfshN4tvyhtsLygP/SVH1b/pRVr7EjGLfY0= Subject key identifier: 30:C4:34:4C:A5:BD:9C:C1:5A:C7:8E:5D:85:A5:08:F3:18:9D:1F:11 Certificate issuer: /CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22 Certificate serial: 010D0C9F4328584AC2E0FD76433FF9CAD673D140 Authority key identifier: 44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 53763 IP address blocks: 23.164.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fd:76:43:3f:f9:ca:d6:73:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0c3e2298-7ec9-45f0-9767-245dec760fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:5a:a0:b7:4c:a2:52:36:e0:ac:98:6a:58: cb:df:39:23:d7:b4:d1:7c:af:2c:d7:48:67:ce:e2: 70:23:1e:68:55:38:58:63:1e:85:c3:46:c4:61:37: 9d:1c:62:b9:67:c1:2b:eb:aa:74:41:71:3e:34:d7: 4c:63:18:0f:81:61:96:39:18:62:89:0f:63:21:c6: 8d:70:d0:7c:7e:70:a8:a6:20:f4:83:d1:7b:60:34: 67:29:86:4f:00:a2:8d:9b:a7:1c:44:8c:52:f3:ad: 06:88:cc:83:d6:fb:83:36:be:92:ff:be:96:f8:7f: 6e:15:43:29:9f:1b:22:ef:c5:e1:ab:d9:49:e8:85: 8f:58:93:b5:59:0b:7e:bc:6f:95:f9:58:38:c8:5c: cb:8e:dd:78:06:66:56:3f:28:cc:7f:5f:57:30:88: 4a:d7:40:65:f1:89:31:e1:3a:61:5c:c9:42:e8:ef: f7:46:d9:8b:f8:a7:7d:15:da:23:ed:29:50:ec:b4: 93:4f:a3:ba:8c:a5:82:31:0f:5e:20:85:7a:8f:38: 6a:23:24:be:bd:b0:91:2c:6c:57:0d:22:63:53:bc: 62:31:35:6f:e5:99:40:8e:50:1d:02:22:53:ca:37: a0:6c:d3:28:11:96:be:26:9c:33:33:b3:8c:d9:cc: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:34:4C:A5:BD:9C:C1:5A:C7:8E:5D:85:A5:08:F3:18:9D:1F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl X509v3 Authority Key Identifier: keyid:44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer sbgp-ipAddrBlock: critical IPv4: 23.164.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:bb:6c:98:ee:58:74:f9:58:02:a8:c1:6b:82:f2:05:8d:cf: b2:7c:c1:a1:ae:8d:51:04:ab:8e:03:47:c5:53:1f:f6:87:9e: de:86:81:a8:0a:f5:c2:1e:20:c5:7f:4f:26:4c:7f:b8:df:25: 69:11:ed:24:5b:33:9d:5b:99:5d:c6:e9:dc:4a:ae:ff:3b:53: 60:ab:f5:a1:ed:9e:0d:88:74:d9:d0:4b:5a:10:d4:76:81:34: 02:8f:45:67:0a:72:ce:28:79:d9:ef:b1:65:50:2d:61:d0:52: 86:8d:1c:52:99:df:94:12:79:4e:5c:09:70:52:cb:75:ff:af: 66:e8:7f:1d:ef:3c:c8:e6:e1:33:b7:41:7d:52:8a:7e:aa:4e: e6:d2:cd:33:22:3f:85:af:cc:3f:18:69:c7:66:1f:7b:8c:c1: 96:f0:3f:a1:29:50:63:44:95:9e:6c:3f:82:3d:92:38:e1:8f: 24:1c:b0:e5:bd:7b:b6:7d:8b:f8:9d:a4:ed:bd:fe:9c:26:1b: ca:46:b8:af:8a:03:c8:fb:e9:aa:53:84:fa:8f:25:33:93:fa: 66:c9:e0:00:20:28:36:fa:84:60:2c:8f:09:c6:1d:c0:3b:49: 3d:0d:06:36:01:42:7c:b6:d4:43:a4:98:de:15:95:a1:db:57: 30:e2:b5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P12Qz/5ytZz0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JiOTM0OGYtMGU3NC00ZmIzLTllYTktODQ2MjY5NjJj YjIyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGMzZTIyOTgtN2VjOS00NWYwLTk3NjctMjQ1ZGVjNzYwZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIlaoLdMolI24KyYaljL3zkj17TRfK8s10hn zuJwIx5oVThYYx6Fw0bEYTedHGK5Z8Er66p0QXE+NNdMYxgPgWGWORhiiQ9jIcaN cNB8fnCopiD0g9F7YDRnKYZPAKKNm6ccRIxS860GiMyD1vuDNr6S/76W+H9uFUMp nxsi78Xhq9lJ6IWPWJO1WQt+vG+V+Vg4yFzLjt14BmZWPyjMf19XMIhK10Bl8Ykx 4TphXMlC6O/3RtmL+Kd9Fdoj7SlQ7LSTT6O6jKWCMQ9eIIV6jzhqIyS+vbCRLGxX DSJjU7xiMTVv5ZlAjlAdAiJTyjegbNMoEZa+JpwzM7OM2cwzYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDENEylvZzBWseOXYWlCPMYnR8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYmI5 MzQ4Zi0wZTc0LTRmYjMtOWVhOS04NDYyNjk2MmNiMjIvZGNhMzIxNDYtZGZkYy0z MDc4LTg2YjUtZjI5NTkzNWNjNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2JiOTM0OGYtMGU3NC00ZmIzLTll YTktODQ2MjY5NjJjYjIyL2NiYjkzNDhmLTBlNzQtNGZiMy05ZWE5LTg0NjI2OTYy Y2IyMi5jcmwwHwYDVR0jBBgwFoAURC+/sYAf5uukj6c3QrpoMR87RwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYmI5MzQ4Zi0wZTc0LTRmYjMtOWVhOS04NDYy Njk2MmNiMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+7bJjuWHT5WAKowWuC8gWNz7J8waGujVEEq44DR8VTH/aHnt6GgagK 9cIeIMV/TyZMf7jfJWkR7SRbM51bmV3G6dxKrv87U2Cr9aHtng2IdNnQS1oQ1HaB NAKPRWcKcs4oednvsWVQLWHQUoaNHFKZ35QSeU5cCXBSy3X/r2bofx3vPMjm4TO3 QX1Sin6qTubSzTMiP4WvzD8YacdmH3uMwZbwP6EpUGNElZ5sP4I9kjjhjyQcsOW9 e7Z9i/idpO29/pwmG8pGuK+KA8j76apThPqPJTOT+mbJ4AAgKDb6hGAsjwnGHcA7 ST0NBjYBQny21EOkmN4VlaHbVzDitbA= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:43 2025 by rpki-client