$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa File: af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa (raw, json) Hash identifier: CNGRLtRadF3rrZgtKIoz1leg9MmZxj9CDjXjOm1OEL0= Subject key identifier: 10:A8:BA:06:BD:F8:AE:40:CE:45:F8:8D:9C:5E:61:EE:27:78:F7:7A Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584ABA80CB4C45B0DA44E60D8AF3 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 23316 IP address blocks: 23.227.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:cb:4c:45:b0:da:44:e6:0d:8a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=4e8c4487-ab22-472d-acb7-fb1900e70e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:52:0f:fd:eb:7c:30:6b:d3:a3:1c:96:dc: 34:cc:50:e7:2b:a2:04:f0:fa:03:c4:d4:35:d3:86: 77:72:75:52:44:42:68:36:c9:d3:70:35:d8:93:ae: 23:b9:53:34:2f:b2:2e:43:42:4e:50:7f:84:d3:ab: 3a:28:39:37:ba:58:2a:58:4e:58:ce:94:17:82:b7: 69:c8:bb:79:ea:8b:c2:fe:20:73:87:cc:c0:e0:1e: 2f:cb:8c:b3:0f:26:93:eb:3f:88:22:89:36:da:38: a0:d2:5d:48:27:f6:10:7b:f5:90:0d:b9:ba:72:c7: c0:1f:ed:77:60:28:0d:0c:f1:1e:5e:5b:83:f8:9b: 92:0c:78:7d:4d:2f:3d:84:cd:75:4e:ea:5b:39:f1: a3:2a:8c:8b:a2:d1:d7:05:3a:2d:64:87:12:84:9c: d6:d0:9d:06:5e:de:c3:b9:4d:f8:67:e7:1a:88:61: 74:5e:26:da:86:c4:54:8b:3f:f6:03:4a:f2:7a:84: 14:4a:97:46:6c:75:cb:bb:d1:74:ab:9f:a3:12:50: dd:28:cb:f8:e8:4a:3b:e4:12:8a:50:ab:a7:83:dd: 9a:15:53:ac:0d:2a:63:c8:37:b3:54:5c:17:0c:fe: 47:92:0e:6d:e0:6d:17:8c:c4:c9:98:5c:4a:7c:94: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A8:BA:06:BD:F8:AE:40:CE:45:F8:8D:9C:5E:61:EE:27:78:F7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:61:9e:28:04:25:b7:5c:6e:60:8b:6f:ac:e4:35:9f:e2:06: 9b:7d:1a:06:3a:35:af:6d:a6:4d:96:ab:48:da:33:92:51:ef: 2f:07:1e:38:15:db:58:f4:36:39:8c:40:bd:5d:d6:02:34:dd: 31:f0:cf:1a:e9:82:7f:db:91:34:d7:b4:5f:e9:e9:1f:fd:ee: 8f:11:da:4c:64:17:f9:9d:a2:b1:b9:bb:45:c6:90:dd:ab:8f: ed:63:ce:78:69:09:8d:2c:cc:a0:fa:74:32:cf:3b:c6:70:03: e6:09:be:3e:10:29:78:3e:71:19:0c:88:34:e9:e1:14:2b:2b: 1d:34:f5:3b:cd:3e:5b:3b:41:a2:3a:22:70:39:a1:bd:fc:73: b4:5f:bd:57:ce:5d:7b:f0:bd:60:6d:ed:7a:b5:c5:5b:b2:d9: c2:70:95:c7:e3:de:c8:80:2b:6c:87:6a:94:09:3c:d0:00:49: 5e:6d:6b:66:23:c2:0e:66:95:2f:e1:2a:e5:e5:38:55:fc:ee: fa:be:be:a8:aa:37:ee:11:14:87:63:f3:10:9c:17:d3:a7:6f: aa:7d:92:74:9d:6a:4f:66:53:38:78:9a:b7:54:02:65:af:af: ce:e2:fe:82:d2:37:4a:56:02:f7:6a:c6:3d:9b:91:f8:cd:89: 8a:8e:4a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMtMRbDaROYNivMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk NGU4YzQ0ODctYWIyMi00NzJkLWFjYjctZmIxOTAwZTcwZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoRSD/3rfDBr06Mcltw0zFDnK6IE8PoDxNQ1 04Z3cnVSREJoNsnTcDXYk64juVM0L7IuQ0JOUH+E06s6KDk3ulgqWE5YzpQXgrdp yLt56ovC/iBzh8zA4B4vy4yzDyaT6z+IIok22jig0l1IJ/YQe/WQDbm6csfAH+13 YCgNDPEeXluD+JuSDHh9TS89hM11TupbOfGjKoyLotHXBTotZIcShJzW0J0GXt7D uU34Z+caiGF0XibahsRUiz/2A0ryeoQUSpdGbHXLu9F0q5+jElDdKMv46Eo75BKK UKung92aFVOsDSpjyDezVFwXDP5Hkg5t4G0XjMTJmFxKfJQz/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCouga9+K5AzkX4jZxeYe4nePd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvYWY0MzBlNjItNmU3OS0z NWJmLWJlNjAtNWQ2ZmRmZDdmY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxhnigEJbdcbmCLb6zkNZ/iBpt9GgY6Na9tpk2Wq0jaM5JR7y8HHjgV 21j0NjmMQL1d1gI03THwzxrpgn/bkTTXtF/p6R/97o8R2kxkF/mdorG5u0XGkN2r j+1jznhpCY0szKD6dDLPO8ZwA+YJvj4QKXg+cRkMiDTp4RQrKx009TvNPls7QaI6 InA5ob38c7RfvVfOXXvwvWBt7Xq1xVuy2cJwlcfj3siAK2yHapQJPNAASV5ta2Yj wg5mlS/hKuXlOFX87vq+vqiqN+4RFIdj8xCcF9Onb6p9knSdak9mUzh4mrdUAmWv r87i/oLSN0pWAvdqxj2bkfjNiYqOSss= -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:01 2025 by rpki-client