$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a203587f-64ee-3786-b9c8-70e7a10432b6.roa File: a203587f-64ee-3786-b9c8-70e7a10432b6.roa (raw, json) Hash identifier: 7CGjNvffEcCd1smP9fBZCtlk2IEUxaarVFWrVRBzHzg= Subject key identifier: 6C:8B:FE:65:8F:FB:56:D8:48:23:10:F7:26:AB:59:8F:20:0F:03:C1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AB4EF067829B8624F328C7180 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a203587f-64ee-3786-b9c8-70e7a10432b6.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 174 IP address blocks: 173.232.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:06:78:29:b8:62:4f:32:8c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=64dbf81c-4066-46ff-bc1d-a4c8d0d0644f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:43:a1:cb:f9:29:76:14:3f:29:b8:5a:6e: 68:82:5a:2a:ea:51:49:59:6c:24:b3:e3:71:fb:cf: de:f4:0a:f0:ba:45:f6:e3:d4:dd:f1:ec:c7:55:ab: 1b:b4:e9:43:48:c1:c6:47:86:fa:f1:76:8d:95:8f: ee:ba:e8:49:16:e7:5c:e8:0f:bf:40:7c:94:35:87: 1c:0b:23:d7:2b:56:82:cf:0a:87:49:e4:72:17:b8: 11:fe:84:3e:19:40:25:c6:be:f9:f8:1e:6f:86:50: 8a:27:c7:05:46:3d:59:b4:13:50:9a:3b:53:4b:95: bc:4d:82:2f:87:29:80:21:2b:b7:d8:0a:65:53:e2: a4:db:5a:63:3d:8c:ba:55:65:43:c4:92:d4:76:9b: 3c:64:0a:c8:2e:cf:ab:21:8c:20:a3:33:d8:51:26: 42:fa:1b:db:57:bf:36:98:4f:3d:68:98:8f:5b:83: cc:9f:b9:17:9c:20:20:63:11:bb:83:b5:4a:a1:91: 6b:21:82:25:80:98:ab:ce:c7:20:2d:6e:6d:0b:a6: 90:fb:9c:89:2b:e3:bb:2f:1b:5c:e1:50:f7:b1:14: 5e:5d:7b:4e:8d:4b:94:e0:a7:de:ae:97:81:81:73: e5:11:56:74:f1:b4:ad:85:1a:69:55:7f:80:73:89: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:FE:65:8F:FB:56:D8:48:23:10:F7:26:AB:59:8F:20:0F:03:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a203587f-64ee-3786-b9c8-70e7a10432b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:57:0f:cc:2a:98:7a:da:2c:95:c5:2e:fb:21:0e:92:43:ad: 03:cc:08:5e:dd:6c:87:62:fa:63:90:bc:6d:fe:0e:26:ae:05: 9f:77:46:2f:04:f6:79:87:00:16:aa:61:da:c3:3f:79:f4:13: 7a:b7:a1:c6:fd:4e:29:41:73:3f:6c:cc:69:a5:ef:e9:fd:a7: 91:10:39:3c:cf:4c:0e:18:47:2d:94:fb:f0:a5:08:9d:0e:81: 47:2c:55:f9:52:7b:cd:77:c7:7a:b6:64:0f:46:22:a3:32:de: 1b:83:ee:d5:b0:de:f0:c6:3e:89:4b:4f:4d:c5:3e:f0:ba:1e: 3a:b2:02:3f:b4:c2:dd:82:a8:44:8d:ea:cc:5e:40:67:fc:aa: cc:9d:11:03:f9:e2:9d:e9:48:16:9e:9d:21:5a:ad:74:78:52: ec:1d:d8:d4:2f:3d:bf:21:97:c1:e0:6f:77:12:14:cd:7e:88: 2b:12:77:c8:28:18:fd:a5:15:17:e1:73:85:df:d9:28:46:ee: f5:3a:9e:dd:cd:05:7a:72:26:a0:80:ab:14:b0:7b:07:d9:a8: db:ae:32:6a:e2:4f:16:b9:f5:78:ec:47:23:f8:eb:2d:39:30: 66:4e:21:2d:75:ab:ad:72:7f:9f:ff:6a:b0:30:28:97:27:d6: 8a:b4:13:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wZ4KbhiTzKMcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjRkYmY4MWMtNDA2Ni00NmZmLWJjMWQtYTRjOGQwZDA2NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVtDocv5KXYUPym4Wm5ogloq6lFJWWwks+Nx +8/e9ArwukX249Td8ezHVasbtOlDSMHGR4b68XaNlY/uuuhJFudc6A+/QHyUNYcc CyPXK1aCzwqHSeRyF7gR/oQ+GUAlxr75+B5vhlCKJ8cFRj1ZtBNQmjtTS5W8TYIv hymAISu32AplU+Kk21pjPYy6VWVDxJLUdps8ZArILs+rIYwgozPYUSZC+hvbV782 mE89aJiPW4PMn7kXnCAgYxG7g7VKoZFrIYIlgJirzscgLW5tC6aQ+5yJK+O7Lxtc 4VD3sRReXXtOjUuU4KferpeBgXPlEVZ08bSthRppVX+Ac4mzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyL/mWP+1bYSCMQ9yarWY8gDwPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTIwMzU4N2YtNjRlZS0z Nzg2LWI5YzgtNzBlN2ExMDQzMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRXD8wqmHraLJXFLvshDpJDrQPMCF7dbIdi+mOQvG3+DiauBZ93Ri8E 9nmHABaqYdrDP3n0E3q3ocb9TilBcz9szGml7+n9p5EQOTzPTA4YRy2U+/ClCJ0O gUcsVflSe813x3q2ZA9GIqMy3huD7tWw3vDGPolLT03FPvC6HjqyAj+0wt2CqESN 6sxeQGf8qsydEQP54p3pSBaenSFarXR4Uuwd2NQvPb8hl8Hgb3cSFM1+iCsSd8go GP2lFRfhc4Xf2ShG7vU6nt3NBXpyJqCAqxSwewfZqNuuMmriTxa59XjsRyP46y05 MGZOIS11q61yf5//arAwKJcn1oq0E5k= -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:55 2025 by rpki-client