$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa File: a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa (raw, json) Hash identifier: wc7IutC3M23LImvPMb81AnSQCIqB6/Ew2QEgY6DizHg= Subject key identifier: 16:82:A5:41:62:AA:3A:1D:CD:3D:D2:4C:8D:95:FE:0F:9F:DC:ED:D6 Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584AA160E02A40A558C5AC7D3D00 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e0:2a:40:a5:58:c5:ac:7d:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=444e5eb5-434d-41bf-bb5d-56f4970b57c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:0b:27:7f:55:ad:6e:dd:69:f3:dc:fc:b1: 72:0c:4f:19:8f:9f:5e:12:ef:35:af:20:a7:77:03: 9c:01:30:47:0a:d3:26:29:15:4c:2d:e4:97:65:e5: 45:04:d5:1b:3e:5b:a5:22:22:f2:ce:0e:8c:87:e3: dd:b1:b4:a1:23:dd:32:d7:94:08:0b:e2:79:44:6c: 47:f0:9a:c6:a4:14:4b:f2:fb:00:dd:be:0a:93:24: b9:a2:86:3a:22:bd:c3:e8:ee:7b:bd:ce:0d:43:6b: cc:86:b2:7a:08:34:a2:89:e3:35:97:93:d4:10:8f: 59:c2:40:0d:13:a6:34:a4:fd:b0:b5:c3:d3:ae:7d: 63:3f:90:5d:03:ca:ff:52:0b:f1:b7:96:e9:18:c1: 7e:15:37:99:dc:d7:ed:e9:24:7e:6e:0c:c4:6b:db: 00:1e:43:f3:01:22:fd:12:4d:34:e8:16:0e:f9:3a: e2:eb:e1:3d:50:49:7f:76:5b:3f:7b:1e:ab:43:43: 92:30:61:5f:14:72:93:2a:06:a9:0e:5e:23:67:c7: 16:17:39:eb:cc:4b:4d:f9:64:9b:00:d3:77:63:3a: c8:0c:1b:62:6c:fd:23:6f:2e:ef:6c:94:32:ea:40: 82:de:aa:68:00:31:1e:94:6b:ad:9f:2d:88:57:6b: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:A5:41:62:AA:3A:1D:CD:3D:D2:4C:8D:95:FE:0F:9F:DC:ED:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:24:d1:18:6a:71:d0:b2:78:8f:f8:42:02:ed:52:81:31: a2:2d:21:76:cd:39:ac:5a:cb:cb:e7:fc:33:57:e1:f4:89:aa: d8:58:aa:d3:f5:4f:1e:fb:7b:d6:4d:2e:de:e1:08:88:28:05: 2e:88:b9:05:d3:02:24:82:c0:e9:56:19:07:93:dd:0b:62:da: da:b8:92:12:22:92:eb:73:6b:67:43:84:6a:e4:f0:33:87:2a: d4:23:c4:eb:e6:42:a1:0c:76:24:37:cb:a8:fc:4e:44:c5:8c: b6:ba:cc:87:fe:2e:71:49:cf:10:08:58:f4:aa:cc:54:e7:4d: e5:08:3f:94:74:50:98:bb:06:fe:4d:62:60:92:b4:d5:5e:c6: ab:16:4a:45:3f:0c:5d:5d:f4:c3:9e:eb:09:01:46:a3:9f:f0: e9:82:7c:7b:76:34:fe:ca:b9:4c:31:8e:dc:43:78:a4:a5:76: 23:4d:ae:f5:8f:53:a9:7e:27:96:b5:68:6e:7d:5c:dd:ed:c5: 39:f9:aa:d5:e9:4c:d2:d5:8b:c8:65:46:ae:82:96:3e:ff:94: ab:43:93:a8:35:55:51:cd:1c:5f:e4:89:ba:99:6d:09:bf:10: fd:98:2c:d9:6d:4f:7c:32:26:65:e2:be:b5:cf:da:3b:1e:ff: 50:2e:cb:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOAqQKVYxax9PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NDQ0ZTVlYjUtNDM0ZC00MWJmLWJiNWQtNTZmNDk3MGI1N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDwLJ39VrW7dafPc/LFyDE8Zj59eEu81ryCn dwOcATBHCtMmKRVMLeSXZeVFBNUbPlulIiLyzg6Mh+PdsbShI90y15QIC+J5RGxH 8JrGpBRL8vsA3b4KkyS5ooY6Ir3D6O57vc4NQ2vMhrJ6CDSiieM1l5PUEI9ZwkAN E6Y0pP2wtcPTrn1jP5BdA8r/Ugvxt5bpGMF+FTeZ3Nft6SR+bgzEa9sAHkPzASL9 Ek006BYO+Tri6+E9UEl/dls/ex6rQ0OSMGFfFHKTKgapDl4jZ8cWFznrzEtN+WSb ANN3YzrIDBtibP0jby7vbJQy6kCC3qpoADEelGutny2IV2v5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaCpUFiqjodzT3STI2V/g+f3O3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvYTU3ZmZiNTktOTljYS0z Nzg5LWI5NmYtMGZjZGQ0MmNlMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA59JNEYanHQsniP+EIC7VKBMaItIXbNOaxay8vn/DNX4fSJqthYqtP1 Tx77e9ZNLt7hCIgoBS6IuQXTAiSCwOlWGQeT3Qti2tq4khIikutza2dDhGrk8DOH KtQjxOvmQqEMdiQ3y6j8TkTFjLa6zIf+LnFJzxAIWPSqzFTnTeUIP5R0UJi7Bv5N YmCStNVexqsWSkU/DF1d9MOe6wkBRqOf8OmCfHt2NP7KuUwxjtxDeKSldiNNrvWP U6l+J5a1aG59XN3txTn5qtXpTNLVi8hlRq6Clj7/lKtDk6g1VVHNHF/kibqZbQm/ EP2YLNltT3wyJmXivrXP2jse/1Auy1I= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:56 2025 by rpki-client