$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: wDXjdDghaHpG/IVAoqHXhQwJkD49+MIUPVEm031xhXU= Subject key identifier: F2:10:83:2F:C6:C5:E6:2B:32:BD:E5:C5:4A:83:D6:48:C9:69:1D:28 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584A6DBB404AC8EBB7F615545C00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:40:4a:c8:eb:b7:f6:15:54:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=ff2892c1-3f38-4639-bde1-d432b6898bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:a5:88:bb:aa:a9:ee:d8:ca:8f:2a:95:dc: 4b:3e:c5:ed:7f:ac:a7:bf:0e:46:ce:56:3c:ec:44: 97:69:79:ad:f6:0d:99:42:62:7a:ea:0a:f1:10:cb: 88:d1:d7:14:55:61:24:11:70:f5:1c:77:62:bf:3c: 10:01:f0:a3:66:2a:ad:58:75:05:28:c8:35:8d:0b: 77:5d:3d:4c:17:70:cb:55:28:58:8f:1c:2b:b8:f5: 23:36:b6:9c:8f:ee:79:4d:37:3c:62:b2:d8:b2:34: 4f:0a:3e:ea:c3:94:5d:3e:70:56:1f:b8:37:55:4b: d8:08:55:14:e1:71:7d:8f:19:a5:47:db:fd:11:c9: 9a:cd:2d:c4:33:22:97:c0:68:35:d8:a1:74:5b:58: 4d:cb:5b:ef:21:8b:a1:46:ae:8e:9e:74:5c:4c:2d: 6a:bb:4d:83:19:c0:c6:02:a0:35:0e:20:eb:db:71: e9:42:40:59:ef:33:84:6d:1a:15:02:0d:c9:dd:55: 3c:94:0d:04:ef:1b:38:77:59:27:96:da:df:ae:32: db:3e:7a:f0:52:37:70:e0:a0:c9:a2:95:bb:29:f0: 73:b9:b5:80:5d:17:5a:b3:e3:84:22:02:7d:4b:62: 9c:d7:68:bd:40:f4:bb:39:42:89:1c:53:74:4a:8a: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:83:2F:C6:C5:E6:2B:32:BD:E5:C5:4A:83:D6:48:C9:69:1D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:70:7c:18:07:41:c2:4a:f0:a1:87:ba:70:28:bb:bf:c5:f2: b9:87:02:83:a0:2f:cc:25:a3:90:35:bd:e3:54:ac:bc:ed:71: 29:e9:10:a2:05:b9:a3:1a:e9:73:d0:07:bb:00:06:ed:57:60: fa:20:6e:02:e2:a9:1c:3f:b5:ad:21:fc:6a:e8:64:bd:ba:01: 6a:c2:48:c4:73:ad:40:d3:0b:d9:2b:e5:8e:b4:91:78:48:c9: a1:e2:ff:4f:7f:89:2e:2c:59:4e:9d:fc:bd:27:7a:65:eb:78: 3f:93:cb:41:33:b9:47:a9:d8:f7:aa:0b:de:46:02:18:4c:e1: 30:18:0e:a1:c9:f2:68:11:93:4e:ec:a5:7a:70:bf:60:f1:32: d7:94:bf:ce:e6:57:81:50:e9:f2:04:d8:c8:9d:53:7d:35:42: c9:d3:1b:b8:7d:91:6f:31:be:ca:9c:c0:9f:06:f0:0d:9c:34: 90:60:45:7c:6e:a0:c8:fe:8b:62:86:ca:74:e0:58:81:53:6a: 31:ac:73:f2:c5:39:cb:3a:4a:a0:c7:ca:f4:f6:39:33:bd:8a: 3c:5f:68:13:72:ad:78:9a:82:c8:01:47:8b:c4:78:4b:fc:a2: c2:79:5a:6f:03:67:62:cd:59:aa:35:f3:ad:a2:df:f1:ee:f2: db:bc:52:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0BKyOu39hVUXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ZmYyODkyYzEtM2YzOC00NjM5LWJkZTEtZDQzMmI2ODk4YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3mliLuqqe7Yyo8qldxLPsXtf6ynvw5GzlY8 7ESXaXmt9g2ZQmJ66grxEMuI0dcUVWEkEXD1HHdivzwQAfCjZiqtWHUFKMg1jQt3 XT1MF3DLVShYjxwruPUjNracj+55TTc8YrLYsjRPCj7qw5RdPnBWH7g3VUvYCFUU 4XF9jxmlR9v9EcmazS3EMyKXwGg12KF0W1hNy1vvIYuhRq6OnnRcTC1qu02DGcDG AqA1DiDr23HpQkBZ7zOEbRoVAg3J3VU8lA0E7xs4d1knltrfrjLbPnrwUjdw4KDJ opW7KfBzubWAXRdas+OEIgJ9S2Kc12i9QPS7OUKJHFN0SooUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIQgy/GxeYrMr3lxUqD1kjJaR0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9wfBgHQcJK8KGHunAou7/F8rmHAoOgL8wlo5A1veNUrLztcSnpEKIF uaMa6XPQB7sABu1XYPogbgLiqRw/ta0h/GroZL26AWrCSMRzrUDTC9kr5Y60kXhI yaHi/09/iS4sWU6d/L0nemXreD+Ty0EzuUep2PeqC95GAhhM4TAYDqHJ8mgRk07s pXpwv2DxMteUv87mV4FQ6fIE2MidU301QsnTG7h9kW8xvsqcwJ8G8A2cNJBgRXxu oMj+i2KGynTgWIFTajGsc/LFOcs6SqDHyvT2OTO9ijxfaBNyrXiagsgBR4vEeEv8 osJ5Wm8DZ2LNWao1862i3/Hu8tu8Uv4= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:55 2025 by rpki-client