$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/80e58652-6973-354b-a5ea-8d395f3a70af.roa File: 80e58652-6973-354b-a5ea-8d395f3a70af.roa (raw, json) Hash identifier: pgmsXvY0TnrJUO7w0eTDjjH6NcBfLk0tzWdl+sNbs0s= Subject key identifier: 88:C0:F5:AF:FD:1A:6E:54:A3:C9:48:3D:48:BE:46:99:87:E3:2D:1B Certificate issuer: /CN=5225c725-faab-43c9-8d24-f49817b762c6 Certificate serial: 010D0C9F4328584A7085ED9ABB19AABB1BF069E0 Authority key identifier: D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/80e58652-6973-354b-a5ea-8d395f3a70af.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 207722 IP address blocks: 23.141.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ed:9a:bb:19:aa:bb:1b:f0:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5225c725-faab-43c9-8d24-f49817b762c6 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=7c3d5fd1-8ef0-45e5-bd4b-317367bcd461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:b2:1e:ba:7d:76:67:da:80:f7:ec:f7:ee: 5a:26:1e:0f:00:19:44:da:60:e7:e6:00:0a:b5:fd: fb:2f:a0:6d:21:79:1d:d7:24:9e:6c:0e:ad:66:1a: 4a:57:43:05:95:3d:31:63:9f:f6:61:cd:1a:7e:e3: 0f:ca:f6:e2:0c:0e:5d:d7:11:d2:e4:98:71:98:83: 08:c8:c3:49:42:04:75:9b:fb:87:d1:e3:e5:97:c4: f3:36:c3:89:87:06:f4:79:e3:49:e0:9e:23:12:9f: 6d:b9:bf:02:30:ee:ac:4e:6c:a3:69:5f:a1:d8:7a: 4a:ae:89:d2:d8:9a:a6:aa:23:48:b0:04:e1:ad:13: 4a:43:bd:8b:27:43:69:80:38:3e:90:52:09:f7:21: ea:41:87:22:63:22:06:3b:20:8a:83:9c:7a:f2:44: 63:cc:c5:23:91:1b:60:18:44:35:2e:79:bf:b5:ee: d1:a6:a7:be:e3:32:80:dd:16:e3:e3:12:0d:9c:b2: 62:9b:0e:e0:97:fd:ea:e4:1f:02:14:dd:1c:3f:0c: e6:77:c3:d2:8b:21:88:4d:c0:88:03:1f:dc:45:a5: 2f:ea:c5:51:c7:ac:06:15:b3:d2:14:0a:10:02:37: ac:2c:4c:eb:27:2d:27:e6:dd:bb:4e:c8:72:3e:f1: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C0:F5:AF:FD:1A:6E:54:A3:C9:48:3D:48:BE:46:99:87:E3:2D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/80e58652-6973-354b-a5ea-8d395f3a70af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl X509v3 Authority Key Identifier: keyid:D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer sbgp-ipAddrBlock: critical IPv4: 23.141.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6e:ef:b7:88:dd:88:1d:94:17:f3:96:31:e2:c9:b9:1d:36: 69:d9:f9:a0:3a:91:34:1c:73:9b:cf:99:24:16:47:98:48:9a: 1a:f0:ef:ce:8b:e4:d4:cb:37:4e:a3:52:c6:d6:e9:67:f5:9d: da:48:fc:33:b0:a7:71:3e:4c:6c:77:77:fd:3c:76:c6:c8:cb: 35:f9:85:a5:79:f9:d4:04:65:26:23:f0:27:3a:a7:a7:e7:26: 74:6f:72:b3:b0:00:d6:12:50:96:12:bf:d7:dd:f9:3b:6a:9b: e1:55:c7:57:06:68:90:5c:81:5e:2f:b2:2f:7f:5e:d8:cf:12: 8a:3b:49:59:50:71:43:11:7b:92:e9:99:3f:35:21:72:19:a5: 7b:54:a0:ba:df:ef:fd:7c:c0:ca:e8:63:df:1a:b1:07:37:9f: 47:89:ca:aa:66:96:88:95:f5:69:ef:35:83:f8:c2:62:4d:ee: 3e:04:48:a1:2b:51:a3:16:3e:5c:ac:b7:71:39:76:1e:72:1c: c9:5f:4e:43:a3:c3:56:20:ba:47:a6:bf:25:3a:92:93:6c:8c: f2:fe:b8:c5:a9:16:76:ba:69:ca:91:b3:3e:4a:19:79:cd:c6: bb:f7:39:c0:29:06:ae:99:8e:5f:79:15:e8:3e:7b:b5:1a:9e: d3:bd:31:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe2auxmquxvwaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIyNWM3MjUtZmFhYi00M2M5LThkMjQtZjQ5ODE3Yjc2 MmM2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk N2MzZDVmZDEtOGVmMC00NWU1LWJkNGItMzE3MzY3YmNkNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2GyHrp9dmfagPfs9+5aJh4PABlE2mDn5gAK tf37L6BtIXkd1ySebA6tZhpKV0MFlT0xY5/2Yc0afuMPyvbiDA5d1xHS5JhxmIMI yMNJQgR1m/uH0ePll8TzNsOJhwb0eeNJ4J4jEp9tub8CMO6sTmyjaV+h2HpKronS 2JqmqiNIsAThrRNKQ72LJ0NpgDg+kFIJ9yHqQYciYyIGOyCKg5x68kRjzMUjkRtg GEQ1Lnm/te7Rpqe+4zKA3Rbj4xINnLJimw7gl/3q5B8CFN0cPwzmd8PSiyGITcCI Ax/cRaUv6sVRx6wGFbPSFAoQAjesLEzrJy0n5t27TshyPvFqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjA9a/9Gm5Uo8lIPUi+RpmH4y0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MjI1 YzcyNS1mYWFiLTQzYzktOGQyNC1mNDk4MTdiNzYyYzYvODBlNTg2NTItNjk3My0z NTRiLWE1ZWEtOGQzOTVmM2E3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTIyNWM3MjUtZmFhYi00M2M5LThk MjQtZjQ5ODE3Yjc2MmM2LzUyMjVjNzI1LWZhYWItNDNjOS04ZDI0LWY0OTgxN2I3 NjJjNi5jcmwwHwYDVR0jBBgwFoAU01jPDgfTug6VlM7cxmb4G2rsNQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjI1YzcyNS1mYWFiLTQzYzktOGQyNC1mNDk4 MTdiNzYyYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhu77eI3YgdlBfzljHiybkdNmnZ+aA6kTQcc5vPmSQWR5hImhrw786L 5NTLN06jUsbW6Wf1ndpI/DOwp3E+TGx3d/08dsbIyzX5haV5+dQEZSYj8Cc6p6fn JnRvcrOwANYSUJYSv9fd+Ttqm+FVx1cGaJBcgV4vsi9/XtjPEoo7SVlQcUMRe5Lp mT81IXIZpXtUoLrf7/18wMroY98asQc3n0eJyqpmloiV9WnvNYP4wmJN7j4ESKEr UaMWPlyst3E5dh5yHMlfTkOjw1YgukemvyU6kpNsjPL+uMWpFna6acqRsz5KGXnN xrv3OcApBq6Zjl95Feg+e7UantO9MQE= -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:34 2025 by rpki-client