$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/14b50d3d-5c26-38e8-a8f1-d6c6ce6a72a5.roa File: 14b50d3d-5c26-38e8-a8f1-d6c6ce6a72a5.roa (raw, json) Hash identifier: TNVnWSdktZndjLChFKJ7OSJLqxSqN492LYjuN6nVYmw= Subject key identifier: 19:FA:4A:10:70:15:13:8C:CA:0D:12:95:B8:AF:7C:79:F5:F2:D8:EF Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584A9900C6924296921645E834E0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/14b50d3d-5c26-38e8-a8f1-d6c6ce6a72a5.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 23.91.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c6:92:42:96:92:16:45:e8:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=50b880eb-e13c-4d13-892f-b2d69142f6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:77:d3:5a:b8:d3:0b:3c:ad:da:7f:b9:09:b8: 61:56:51:2d:71:fa:c9:8e:e2:08:56:ba:5f:44:ba: ea:73:18:7e:2e:de:60:89:e8:20:90:2b:b1:1a:dc: 73:59:64:88:0b:86:ce:ac:b8:0e:0c:3c:62:c9:68: 15:af:a4:dc:9b:82:1e:05:85:84:33:78:a4:e0:2c: 46:7d:b8:8e:c7:68:59:5e:7e:6c:6b:f1:7e:81:ff: f5:0c:fe:5f:57:34:af:c6:77:0a:f9:c9:af:59:53: d9:e8:ab:d5:2c:bd:d9:7c:c0:3d:3c:c3:81:2b:dc: a8:06:39:e0:62:f1:d2:fc:66:c5:2f:a8:cb:cc:49: 5a:0b:bf:6c:b0:27:f5:9c:ea:8f:c1:2a:7a:8a:a0: 6e:73:9b:41:3d:ae:1e:6b:ee:fd:3a:5d:6c:e9:bc: b7:0e:09:84:17:fc:3e:31:dd:b9:72:e2:53:d9:60: d7:ae:f9:d6:69:7e:3d:26:bf:f5:68:03:9a:83:e9: 1f:3c:34:0f:36:c6:83:39:32:08:40:e1:47:5a:02: 2d:fb:65:41:52:a9:ff:7c:da:dc:d4:3a:6a:58:14: 46:08:75:ec:64:b7:ec:c1:75:95:11:41:d2:bc:ab: c4:b2:22:5c:1c:51:33:80:34:b6:3c:86:5d:03:a0: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FA:4A:10:70:15:13:8C:CA:0D:12:95:B8:AF:7C:79:F5:F2:D8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/14b50d3d-5c26-38e8-a8f1-d6c6ce6a72a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 23.91.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:ab:8f:da:8b:d2:86:59:13:65:69:48:a6:f4:fe:4c:0b:6b: 4a:d7:b4:26:5b:2e:e3:53:76:16:8e:ed:37:44:82:6d:93:85: 89:87:d2:ba:f7:9e:34:01:5c:23:c7:6a:1f:94:51:e5:c5:28: 35:44:da:e5:66:b7:6e:6b:a1:d7:93:ab:14:db:b6:8e:90:da: 0a:e9:f8:a3:d5:a5:5c:f1:7f:f7:26:75:75:af:f9:af:af:4a: ec:b0:ed:90:82:df:fe:d5:66:02:4c:e6:76:b2:e2:5f:06:b9: 07:03:71:21:7c:2b:d0:08:1b:8e:27:7c:ff:2c:c5:ce:44:4f: c6:ff:64:b9:96:f1:76:13:ab:1a:93:f3:7b:43:51:8c:44:aa: cc:c6:af:3c:21:90:32:1b:9a:d2:04:35:47:58:32:29:0c:91: 97:07:37:fc:93:20:57:8b:fb:24:e1:b1:eb:f9:c8:af:e1:5e: 8d:8a:a4:39:2d:16:1f:2a:45:0f:dd:e1:7f:4e:41:f6:e6:c3: 29:29:2d:3d:49:94:47:49:df:60:55:8a:78:c9:f1:bc:b7:1d: d1:1f:fd:68:e7:cd:63:c8:d5:c6:a6:18:88:bd:91:17:8d:1d: da:b0:1c:f2:ef:1e:2e:30:b0:d9:e6:7b:08:64:8c:1d:2e:fa: b7:1a:2e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMaSQpaSFkXoNOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTBiODgwZWItZTEzYy00ZDEzLTg5MmYtYjJkNjkxNDJmNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XfTWrjTCzyt2n+5CbhhVlEtcfrJjuIIVrpf RLrqcxh+Lt5gieggkCuxGtxzWWSIC4bOrLgODDxiyWgVr6Tcm4IeBYWEM3ik4CxG fbiOx2hZXn5sa/F+gf/1DP5fVzSvxncK+cmvWVPZ6KvVLL3ZfMA9PMOBK9yoBjng YvHS/GbFL6jLzElaC79ssCf1nOqPwSp6iqBuc5tBPa4ea+79Ol1s6by3DgmEF/w+ Md25cuJT2WDXrvnWaX49Jr/1aAOag+kfPDQPNsaDOTIIQOFHWgIt+2VBUqn/fNrc 1DpqWBRGCHXsZLfswXWVEUHSvKvEsiJcHFEzgDS2PIZdA6DhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn6ShBwFROMyg0SlbivfHn18tjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTRiNTBkM2QtNWMyNi0z OGU4LWE4ZjEtZDZjNmNlNmE3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF1uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMurj9qL0oZZE2VpSKb0/kwLa0rXtCZbLuNTdhaO7TdEgm2ThYmH0rr3 njQBXCPHah+UUeXFKDVE2uVmt25rodeTqxTbto6Q2grp+KPVpVzxf/cmdXWv+a+v Suyw7ZCC3/7VZgJM5nay4l8GuQcDcSF8K9AIG44nfP8sxc5ET8b/ZLmW8XYTqxqT 83tDUYxEqszGrzwhkDIbmtIENUdYMikMkZcHN/yTIFeL+yThsev5yK/hXo2KpDkt Fh8qRQ/d4X9OQfbmwykpLT1JlEdJ32BVinjJ8by3HdEf/WjnzWPI1camGIi9kReN HdqwHPLvHi4wsNnmewhkjB0u+rcaLmc= -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:47 2025 by rpki-client