$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa File: a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa (raw, json) Hash identifier: Q0etlgx3QFPE8VjP0SqkiI69pkdUMLvcUz13HY6hELU= Subject key identifier: 00:B5:01:11:A6:35:57:B1:96:A1:19:22:A2:A8:25:7B:95:74:FD:EB Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584AB91B826BC42F79875FE42080 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395823 IP address blocks: 23.169.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:82:6b:c4:2f:79:87:5f:e4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=85c6f038-7a3a-4f09-bfc4-d9ee602876db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:11:95:44:44:fb:af:43:e1:4e:7d:cc:9f: 42:c5:51:95:d3:64:94:83:b2:a3:81:e9:a6:f9:0d: 5a:37:93:00:f6:a5:a7:1a:a8:12:6c:d3:9b:59:af: aa:13:b9:7d:da:36:38:db:fb:bd:31:43:35:8c:36: 4c:bc:29:15:7a:7a:7a:7e:01:4d:4b:dc:2d:e6:e8: d4:27:58:ae:62:e1:cd:3e:8a:69:e5:2a:4f:f5:aa: 2a:31:13:0f:e3:2a:5b:e2:dc:8e:31:c7:23:e0:e7: c6:5b:9a:1f:29:ef:bb:6c:94:07:99:0c:f1:8a:97: 31:ba:b3:be:8f:65:47:c0:60:1b:e2:d6:f9:05:af: c0:f2:5e:fb:95:93:a9:75:da:54:f2:05:64:01:34: e2:a0:aa:a9:08:8a:1b:44:1f:98:51:33:27:4d:69: e1:df:c5:0c:a1:a4:f1:40:c8:0a:5f:cc:00:53:7b: 7e:c8:a7:78:78:a4:ee:3e:c6:f2:16:24:0f:44:0f: c5:3b:20:98:37:17:b4:3f:09:35:be:49:7a:63:f1: 33:27:13:bd:8c:37:2d:e3:6f:92:be:21:eb:38:bb: ff:dc:12:2a:e6:36:3b:56:14:08:a8:62:5b:3d:fd: 45:3f:93:2a:03:bb:a3:40:55:84:ba:d1:53:c4:84: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:01:11:A6:35:57:B1:96:A1:19:22:A2:A8:25:7B:95:74:FD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 23.169.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e1:14:9f:31:f9:8d:57:66:2b:95:f2:0b:c4:15:b8:d4:21: f0:25:7a:e5:31:f7:16:4b:ad:6c:11:ce:61:4b:e9:d4:48:03: ff:ad:95:f4:9a:c3:8a:49:15:50:9e:fd:bc:1b:d4:75:70:16: e1:f9:aa:35:f3:df:f1:43:fd:d9:d5:26:53:a3:6d:5d:87:a2: 95:0d:d3:b1:22:7a:d0:a1:be:d8:5a:80:fa:ce:f1:91:67:48: 69:25:ca:f8:f0:f6:26:8e:06:8a:6d:7c:b2:85:45:e4:77:47: 3e:72:63:0c:16:fc:9f:4f:29:ad:96:19:1b:7a:f5:1b:f1:5a: 8f:55:14:26:ab:a5:ca:16:fe:5f:3f:54:06:92:73:50:5f:2e: 98:e0:4c:3a:69:ed:67:41:c0:1c:db:f0:c4:eb:fd:39:28:f3: ec:e0:81:32:3f:6c:73:20:b4:47:01:5a:b9:63:50:7c:2c:22: 88:55:07:8b:ff:dc:61:e5:c7:05:b6:18:c9:2f:69:c7:e8:db: 9e:7a:7a:35:a1:b0:d6:b1:b2:3e:cd:78:38:5d:ce:26:af:ec: d7:9b:d6:f4:c9:f8:b7:af:08:38:42:cd:de:de:fb:d5:54:6b: 69:67:79:41:a8:69:64:f5:31:66:2f:85:3f:9e:b9:77:e8:64: 79:47:01:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4JrxC95h1/kIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODVjNmYwMzgtN2EzYS00ZjA5LWJmYzQtZDllZTYwMjg3NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBoRlURE+69D4U59zJ9CxVGV02SUg7Kjgemm +Q1aN5MA9qWnGqgSbNObWa+qE7l92jY42/u9MUM1jDZMvCkVenp6fgFNS9wt5ujU J1iuYuHNPopp5SpP9aoqMRMP4ypb4tyOMccj4OfGW5ofKe+7bJQHmQzxipcxurO+ j2VHwGAb4tb5Ba/A8l77lZOpddpU8gVkATTioKqpCIobRB+YUTMnTWnh38UMoaTx QMgKX8wAU3t+yKd4eKTuPsbyFiQPRA/FOyCYNxe0Pwk1vkl6Y/EzJxO9jDct42+S viHrOLv/3BIq5jY7VhQIqGJbPf1FP5MqA7ujQFWEutFTxIQLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC1ARGmNVexlqEZIqKoJXuVdP3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvYTM0NDNiYTktYTVjMS0z ZjU4LWJmMzctYTNiMDU0OWUxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7hFJ8x+Y1XZiuV8gvEFbjUIfAleuUx9xZLrWwRzmFL6dRIA/+tlfSa w4pJFVCe/bwb1HVwFuH5qjXz3/FD/dnVJlOjbV2HopUN07EietChvthagPrO8ZFn SGklyvjw9iaOBoptfLKFReR3Rz5yYwwW/J9PKa2WGRt69RvxWo9VFCarpcoW/l8/ VAaSc1BfLpjgTDpp7WdBwBzb8MTr/Tko8+zggTI/bHMgtEcBWrljUHwsIohVB4v/ 3GHlxwW2GMkvacfo2556ejWhsNaxsj7NeDhdziav7Neb1vTJ+LevCDhCzd7e+9VU a2lneUGoaWT1MWYvhT+euXfoZHlHASg= -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:53 2025 by rpki-client