$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa File: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (raw, json) Hash identifier: 7ECzzGkxsy5N0R2Op2Fhk7xqa3FcnTBI9A5/PjTYI2w= Subject key identifier: 0A:0E:BC:13:89:9B:B5:6A:68:03:DC:77:CD:2A:39:18:59:EB:42:0D Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584A912F8B3C59EE52E3002C6180 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa Signing time: Sat 19 Jul 2025 05:48:46 +0000 ROA not before: Sat 19 Jul 2025 05:48:46 +0000 ROA not after: Fri 17 Oct 2025 05:48:46 +0000 asID: 3257 IP address blocks: 23.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:91:2f:8b:3c:59:ee:52:e3:00:2c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Jul 19 05:48:46 2025 GMT Not After : Oct 17 05:48:46 2025 GMT Subject: CN=a8cbda7f-8f34-42cf-a3c1-71dd1ee7ddeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:37:43:b9:e8:77:78:6e:df:25:89:95:c6: d7:78:19:49:2b:95:eb:25:09:40:4d:59:79:57:83: 11:e6:ac:40:65:c4:36:3a:b5:d8:e3:b5:c4:fd:2a: f4:72:bf:66:84:51:65:38:ab:bb:08:25:08:9f:f7: d7:88:6b:a3:49:ad:90:1f:35:ef:5b:d6:cb:8a:08: a2:ad:70:78:23:19:e6:d4:49:98:71:1b:f2:80:a4: 8e:0d:db:9c:f8:22:19:c1:c4:f5:a0:7a:a6:b7:56: dd:1c:b8:be:2e:7b:e9:f3:34:a2:02:e0:79:3e:64: 66:4d:33:4b:df:a8:78:bf:be:59:6c:e2:0a:a2:6c: 05:45:a4:14:26:fe:ca:6d:e0:ec:14:9c:25:ff:7b: 65:c3:b1:b9:40:e4:c1:be:68:55:52:ac:55:be:25: 7f:34:7c:cc:92:9d:b6:56:39:4a:2b:8a:84:d2:0d: 87:49:49:d9:c3:17:1b:72:25:cc:74:c6:30:da:26: 37:4e:4c:80:c1:f7:99:3c:15:a0:be:8c:cf:fa:73: 49:5e:17:2c:17:78:c4:4a:98:e6:9c:a4:7c:25:90: a0:69:b1:9c:c7:35:1e:e6:0b:0e:38:4c:8e:57:ce: f2:11:62:64:6f:c7:e4:2a:82:02:c4:6d:25:9a:50: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:BC:13:89:9B:B5:6A:68:03:DC:77:CD:2A:39:18:59:EB:42:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a5:03:ad:d7:58:76:f6:ae:61:1e:28:1f:43:7c:8e:cb:6c: 78:ca:6f:dd:f8:f7:1a:57:67:94:c7:02:9a:80:d0:17:dc:a7: 22:1e:fc:17:d0:cd:4b:a3:d9:a0:94:39:f0:c7:66:72:cd:d4: 1a:ab:c2:c3:b8:ad:db:a6:4b:8d:7f:05:ff:6f:8e:a5:1a:c1: 2c:96:e4:b7:11:f7:68:43:58:ad:fe:3c:09:d5:4a:dd:40:8e: 81:9f:ea:f6:e4:9e:58:32:28:d7:ab:49:10:37:8e:ca:d7:61: f1:6d:fa:96:fd:8e:d2:2e:80:17:2c:6d:a2:bc:d6:37:04:7b: bd:84:25:e8:30:ab:34:be:c4:39:02:bc:08:03:f5:09:04:9a: 4e:6c:70:43:9d:85:1d:50:2f:f6:93:78:0c:97:fa:40:f6:34: 9e:e1:9d:dd:95:de:c2:ab:29:82:f8:23:11:e0:1a:d1:63:cc: 9e:30:62:55:d6:d0:3b:0a:20:7d:98:99:91:9d:5a:b6:4a:af: d1:fe:73:45:79:ce:69:51:cc:97:8c:a4:a6:94:d5:15:4f:0a: a7:e5:df:34:f8:64:07:b5:7e:de:35:7e:22:b7:8e:ff:5f:91: 57:e7:5c:17:c4:28:ed:90:b9:e8:d6:50:ad:d2:42:49:1c:5f: 77:31:0e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqRL4s8We5S4wAsYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI1MDcxOTA1NDg0NloXDTI1MTAxNzA1NDg0NlowLzEtMCsGA1UEAxMk YThjYmRhN2YtOGYzNC00MmNmLWEzYzEtNzFkZDFlZTdkZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoY3Q7nod3hu3yWJlcbXeBlJK5XrJQlATVl5 V4MR5qxAZcQ2OrXY47XE/Sr0cr9mhFFlOKu7CCUIn/fXiGujSa2QHzXvW9bLigii rXB4Ixnm1EmYcRvygKSODduc+CIZwcT1oHqmt1bdHLi+Lnvp8zSiAuB5PmRmTTNL 36h4v75ZbOIKomwFRaQUJv7KbeDsFJwl/3tlw7G5QOTBvmhVUqxVviV/NHzMkp22 VjlKK4qE0g2HSUnZwxcbciXMdMYw2iY3TkyAwfeZPBWgvozP+nNJXhcsF3jESpjm nKR8JZCgabGcxzUe5gsOOEyOV87yEWJkb8fkKoICxG0lmlBhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoOvBOJm7VqaAPcd80qORhZ60INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMzhkZTQwZWUtZGU3ZC0z ZTUyLTkxNWMtMmMyOGIzOThmNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFelA63XWHb2rmEeKB9DfI7LbHjKb9349xpXZ5THApqA0BfcpyIe/BfQ zUuj2aCUOfDHZnLN1BqrwsO4rdumS41/Bf9vjqUawSyW5LcR92hDWK3+PAnVSt1A joGf6vbknlgyKNerSRA3jsrXYfFt+pb9jtIugBcsbaK81jcEe72EJegwqzS+xDkC vAgD9QkEmk5scEOdhR1QL/aTeAyX+kD2NJ7hnd2V3sKrKYL4IxHgGtFjzJ4wYlXW 0DsKIH2YmZGdWrZKr9H+c0V5zmlRzJeMpKaU1RVPCqfl3zT4ZAe1ft41fiK3jv9f kVfnXBfEKO2QuejWUK3SQkkcX3cxDmk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:07:14 2025 by rpki-client