$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: GY3759jswLtQSBocPMjulBasFBEFkMrVmZQYkdKPx3A= Subject key identifier: CC:9E:89:E1:C0:B3:EE:B1:45:06:AE:90:B6:73:4E:03:B6:6D:15:50 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584A814654568B86E095BAF47740 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:54:56:8b:86:e0:95:ba:f4:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=b915b16e-4d5e-4db3-a85c-50abe8f2bcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:e0:53:13:32:5d:d6:b0:c7:77:af:4e:43: e8:ea:25:88:b6:9e:2a:fe:fd:e8:e2:65:ec:95:4c: 51:af:56:f8:7e:db:de:ea:2a:cf:f3:d4:50:c1:73: 1d:0f:95:a7:cf:73:5c:67:ab:58:7f:f5:b1:7c:2c: 1b:71:f2:1e:fa:d9:f0:fd:31:f0:9e:c2:5e:50:60: 7c:e2:d2:8b:4d:42:6a:f5:da:c0:9c:04:c3:5c:3b: d5:97:6c:6f:1f:fa:41:6b:51:8d:b2:bb:eb:53:63: e3:bc:79:ca:43:d3:1f:db:be:ab:9b:89:a9:fb:2b: f2:43:24:65:1d:2c:a0:6a:79:7f:15:7b:da:98:00: 8a:0b:03:d6:79:1a:37:a3:6a:d2:b7:95:f5:4e:9a: de:99:50:cf:8d:6f:39:32:af:3d:73:df:54:a3:0f: 3b:fa:cb:20:dd:97:68:a4:11:82:51:26:12:70:a6: 49:04:ac:42:dd:64:2c:95:ad:0e:8f:1a:96:24:38: 22:3e:fd:ab:f9:c3:74:a3:46:46:8e:5d:94:e8:6a: 90:23:c7:6a:31:14:2e:6a:0e:cd:9a:d1:76:93:c2: b1:83:6d:a8:a4:71:84:81:2f:c9:87:b3:83:b9:11: 08:26:e7:f5:86:e2:e4:fa:87:d2:0f:6b:6e:1c:81: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:89:E1:C0:B3:EE:B1:45:06:AE:90:B6:73:4E:03:B6:6D:15:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9c:47:48:89:03:f9:61:c9:4d:8a:c2:55:c9:c2:da:2a:39: 88:fd:22:36:c0:04:75:10:c5:bd:8e:42:ae:03:11:a2:73:dc: 17:1a:3e:6e:04:99:95:5f:45:72:1b:de:e7:fe:0c:54:8b:55: c5:89:bd:8e:b7:d4:83:e7:64:07:11:f0:3b:dc:d5:be:9d:3c: 5f:3c:64:26:c6:db:4d:1a:9d:69:8e:49:e6:47:a5:ad:67:b7: 7d:ee:8d:a3:1a:c0:d3:44:18:d9:1a:ce:7a:de:50:cc:77:5c: e4:a0:1b:0d:96:3a:2f:3b:6b:34:f9:88:2f:8b:3a:56:3d:69: a8:0d:ce:1f:74:db:b2:4f:74:4b:72:e7:cd:19:6f:4f:ea:26: 30:6f:83:ef:a0:8b:e8:17:32:24:a1:70:ad:d5:c4:a3:10:f4: 02:9a:9a:2e:9f:e9:e6:e5:57:a2:97:25:17:c9:fa:53:56:ed: ae:61:dd:b4:f9:fe:45:6c:03:96:fe:f8:0b:46:5d:4a:c0:2e: a8:b1:81:7f:f6:b3:ce:40:bc:43:e3:9f:d0:3b:b8:cf:5a:22: c9:f7:00:fc:86:d6:b3:f4:81:41:cc:59:09:19:35:d5:3a:0a: 5b:23:69:fb:68:3c:aa:18:9a:26:9f:85:0b:24:0b:4c:2f:6f: 49:0c:3a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlRWi4bglbr0d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YjkxNWIxNmUtNGQ1ZS00ZGIzLWE4NWMtNTBhYmU4ZjJiY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EDgUxMyXdawx3evTkPo6iWItp4q/v3o4mXs lUxRr1b4ftve6irP89RQwXMdD5Wnz3NcZ6tYf/WxfCwbcfIe+tnw/THwnsJeUGB8 4tKLTUJq9drAnATDXDvVl2xvH/pBa1GNsrvrU2PjvHnKQ9Mf276rm4mp+yvyQyRl HSyganl/FXvamACKCwPWeRo3o2rSt5X1TpremVDPjW85Mq89c99Uow87+ssg3Zdo pBGCUSYScKZJBKxC3WQsla0OjxqWJDgiPv2r+cN0o0ZGjl2U6GqQI8dqMRQuag7N mtF2k8Kxg22opHGEgS/Jh7ODuREIJuf1huLk+ofSD2tuHIG4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyeieHAs+6xRQaukLZzTgO2bRVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADScR0iJA/lhyU2KwlXJwtoqOYj9IjbABHUQxb2OQq4DEaJz3BcaPm4E mZVfRXIb3uf+DFSLVcWJvY631IPnZAcR8Dvc1b6dPF88ZCbG200anWmOSeZHpa1n t33ujaMawNNEGNkaznreUMx3XOSgGw2WOi87azT5iC+LOlY9aagNzh9027JPdEty 580Zb0/qJjBvg++gi+gXMiShcK3VxKMQ9AKami6f6eblV6KXJRfJ+lNW7a5h3bT5 /kVsA5b++AtGXUrALqixgX/2s85AvEPjn9A7uM9aIsn3APyG1rP0gUHMWQkZNdU6 ClsjaftoPKoYmiafhQskC0wvb0kMOro= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:27 2025 by rpki-client