$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa File: 161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa (raw, json) Hash identifier: 43hGYnAAsuDo4O33/3cMoiSVk7s/Kkbusn7mf3rcAoI= Subject key identifier: 6D:94:31:02:7E:CF:3A:83:84:00:5D:4A:64:CE:DE:F8:B4:33:A5:30 Certificate issuer: /CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Certificate serial: 010D0C9F4328584AAB2650D6A0933D47C2CF26C8 Authority key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 26370 IP address blocks: 23.178.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:50:d6:a0:93:3d:47:c2:cf:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80ecca4-df87-49ed-896a-31c912ba8c98 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=32f7b0e9-84bf-49a4-a2a6-e017fb4dc1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:41:9a:97:85:0e:75:86:c0:3a:f1:24:09: 50:e9:cd:a8:98:1e:c7:f4:93:5c:ef:dd:d4:c7:52: 2e:99:9f:3b:6a:91:5f:71:c8:04:67:c0:60:f0:bd: ad:3b:23:05:34:20:fc:56:0d:6a:3e:0f:29:92:32: 65:59:d6:65:cb:55:cc:45:fa:d8:50:d1:94:5e:0c: e7:4f:90:d9:44:6b:95:e5:ce:d1:99:11:d9:32:85: e2:c2:e7:95:9d:22:b1:08:8b:d2:5a:86:a4:04:0b: f5:15:8c:a1:f0:1b:bf:2f:1b:46:fe:2f:83:7e:5c: b9:3a:17:97:07:97:26:79:55:4f:f9:39:1e:98:36: 4b:47:84:fa:a7:49:5d:95:38:a5:8f:f6:bd:90:b9: 95:8c:e4:85:a8:d0:f2:d5:77:ba:69:b8:2a:2c:b7: cd:ad:3e:03:1c:16:ad:5b:25:5b:90:ed:52:19:26: 9c:b2:19:e3:af:95:f6:ac:80:9a:b9:45:06:a9:51: 66:5b:38:0b:27:9f:a0:db:c5:04:56:b4:16:b1:10: c8:ba:29:8a:69:55:8b:dd:5c:d2:6a:99:2a:17:9b: f8:16:f3:92:98:50:da:ee:21:08:41:3c:56:8e:2a: 2b:73:42:74:27:ee:d4:ff:74:eb:b7:b3:3d:ac:bf: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:94:31:02:7E:CF:3A:83:84:00:5D:4A:64:CE:DE:F8:B4:33:A5:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/161ac4a1-0e7d-3e5b-b0ef-58de20b1b325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl X509v3 Authority Key Identifier: keyid:FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer sbgp-ipAddrBlock: critical IPv4: 23.178.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:94:b0:15:85:d7:54:57:b3:f3:e5:70:44:1c:70:ea:8b:95: 32:e3:ce:c6:98:6b:15:df:30:bd:ac:c8:39:86:a2:c3:69:9b: 98:52:c0:f5:65:f1:b1:90:f2:91:60:68:60:e0:78:e2:81:f2: 76:54:2b:81:e1:3f:03:45:cd:c7:91:9a:24:f2:89:fe:4b:6a: 6b:0c:a0:17:b7:cd:e3:5c:e0:dc:1b:87:47:6a:b1:f9:aa:1b: d8:3e:7b:b8:6d:85:2a:53:c5:c0:98:1b:75:e3:79:56:49:58: 8b:d8:3d:01:bb:7d:37:19:7b:32:b4:3c:3b:28:5b:ce:b2:cc: 6f:4d:90:24:c7:7e:24:9b:13:7c:57:16:b4:96:fa:d6:35:33: 65:5d:b5:9d:b6:79:db:23:ae:e0:3b:37:e4:76:6d:24:f8:bf: 99:33:67:5c:b2:b4:7c:8b:c8:1e:cb:6c:fe:44:5f:f1:cc:6c: 7b:16:55:0d:78:35:4b:7f:d5:a0:16:64:cd:09:d5:51:dc:2f: 0b:b1:b0:b3:83:b6:a4:d6:3f:09:71:86:46:55:18:f3:78:41: a9:9d:c6:fd:1f:9e:e3:0b:34:db:55:42:ce:91:e8:cc:51:a1: 68:09:7b:10:b0:64:8a:e7:5b:24:7e:17:b7:3a:06:51:8b:19: 62:46:b6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlDWoJM9R8LPJsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZWNjYTQtZGY4Ny00OWVkLTg5NmEtMzFjOTEyYmE4 Yzk4MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MzJmN2IwZTktODRiZi00OWE0LWEyYTYtZTAxN2ZiNGRjMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdBmpeFDnWGwDrxJAlQ6c2omB7H9JNc793U x1IumZ87apFfccgEZ8Bg8L2tOyMFNCD8Vg1qPg8pkjJlWdZly1XMRfrYUNGUXgzn T5DZRGuV5c7RmRHZMoXiwueVnSKxCIvSWoakBAv1FYyh8Bu/LxtG/i+Dfly5OheX B5cmeVVP+TkemDZLR4T6p0ldlTilj/a9kLmVjOSFqNDy1Xe6abgqLLfNrT4DHBat WyVbkO1SGSacshnjr5X2rICauUUGqVFmWzgLJ5+g28UEVrQWsRDIuimKaVWL3VzS apkqF5v4FvOSmFDa7iEIQTxWjiorc0J0J+7U/3Trt7M9rL/IYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2UMQJ+zzqDhABdSmTO3vi0M6UwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kODBl Y2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5MTJiYThjOTgvMTYxYWM0YTEtMGU3ZC0z ZTViLWIwZWYtNThkZTIwYjFiMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDgwZWNjYTQtZGY4Ny00OWVkLTg5 NmEtMzFjOTEyYmE4Yzk4L2Q4MGVjY2E0LWRmODctNDllZC04OTZhLTMxYzkxMmJh OGM5OC5jcmwwHwYDVR0jBBgwFoAU+tkPw3jWtvxPD72Itim2cZabDRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kODBlY2NhNC1kZjg3LTQ5ZWQtODk2YS0zMWM5 MTJiYThjOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2UsBWF11RXs/PlcEQccOqLlTLjzsaYaxXfML2syDmGosNpm5hSwPVl 8bGQ8pFgaGDgeOKB8nZUK4HhPwNFzceRmiTyif5LamsMoBe3zeNc4Nwbh0dqsfmq G9g+e7hthSpTxcCYG3XjeVZJWIvYPQG7fTcZezK0PDsoW86yzG9NkCTHfiSbE3xX FrSW+tY1M2VdtZ22edsjruA7N+R2bST4v5kzZ1yytHyLyB7LbP5EX/HMbHsWVQ14 NUt/1aAWZM0J1VHcLwuxsLODtqTWPwlxhkZVGPN4Qamdxv0fnuMLNNtVQs6R6MxR oWgJexCwZIrnWyR+F7c6BlGLGWJGttA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:51 2025 by rpki-client