$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa File: 21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa (raw, json) Hash identifier: D0ex/mDprZY3PdUAsl7aiH6GPGhdmLqDh5esW9e6bVE= Subject key identifier: A7:54:57:D6:D5:C4:D2:B5:96:7E:FF:1D:CC:44:48:82:ED:8D:C2:9E Certificate issuer: /CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Certificate serial: 010D0C9F4328584A9D2AF477066E0D6B68C45B80 Authority key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa Signing time: Wed 23 Jul 2025 12:49:13 +0000 ROA not before: Wed 23 Jul 2025 12:49:13 +0000 ROA not after: Tue 21 Oct 2025 12:49:13 +0000 asID: 152918 IP address blocks: 23.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:2a:f4:77:06:6e:0d:6b:68:c4:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Validity Not Before: Jul 23 12:49:13 2025 GMT Not After : Oct 21 12:49:13 2025 GMT Subject: CN=c8311275-d854-40e9-948a-82574c5f456c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:e4:5f:89:3b:4b:58:eb:e8:a5:0b:50:8e: 5c:a9:07:c1:b4:31:d7:e0:14:f0:e8:0f:e8:d2:f5: a8:12:57:d8:21:be:5c:f6:f6:3e:fc:ac:ab:ee:29: 63:70:60:66:97:87:bb:ad:17:81:aa:e0:ae:2e:80: 91:e9:7b:24:f4:ae:73:69:cc:d8:4b:93:41:e6:3d: 6d:73:43:0e:37:d7:ef:83:af:1b:2a:4d:31:a3:e9: f6:87:49:8d:90:5b:aa:8d:f4:4d:d7:44:1b:9b:be: 0e:3c:74:dd:f5:49:af:62:68:62:56:41:2a:a6:cb: 9b:36:f9:19:95:77:e8:86:ca:99:71:80:cc:7b:b8: 3c:63:12:de:f1:1c:86:e4:43:ab:5e:8b:a3:3f:89: e4:9e:aa:12:87:79:e0:9a:6c:96:67:f1:70:99:a3: 9a:e0:2e:50:a6:bf:c7:27:c3:6c:db:6e:7d:38:de: 79:42:07:4d:3b:68:6d:9b:d3:af:35:35:27:75:f7: 0c:d2:57:62:d9:87:98:2e:45:10:d0:1e:3a:59:d6: 90:f8:87:4e:fa:06:b1:b8:10:f1:ba:bb:ad:ce:8e: d0:6b:58:ee:a1:a1:fe:8e:d6:ec:aa:94:3a:52:88: 79:ae:16:ae:92:35:34:fa:f5:28:29:17:29:7f:86: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:57:D6:D5:C4:D2:B5:96:7E:FF:1D:CC:44:48:82:ED:8D:C2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl X509v3 Authority Key Identifier: keyid:A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8e:bd:71:9b:4b:b8:c2:9f:bc:2f:ec:75:aa:c0:ed:ca:04: 9e:28:17:80:4f:b0:a7:47:eb:fa:bc:cd:e7:c1:82:4f:f3:bc: f3:92:22:01:6d:37:eb:48:54:98:65:14:ab:12:46:5d:bf:5f: 39:c0:30:d8:49:c8:48:42:47:2b:af:ca:7f:d4:4a:97:f1:9c: 7e:d2:5f:64:63:74:3d:46:05:62:c8:90:12:66:9b:2b:40:88: 0b:c5:6c:09:52:17:bc:ef:f0:0e:88:7b:0e:d3:4f:4a:3b:fa: ca:0e:89:5b:b0:db:a3:3c:45:2a:8b:1d:16:7a:bb:02:00:2c: ff:5e:53:c2:dc:1a:cb:af:f1:ab:63:35:a4:8b:c3:ae:9a:f4: ab:74:01:50:c6:17:a8:d1:7d:08:7c:04:22:df:81:19:11:88: a9:e0:06:bc:d5:d5:98:a8:34:68:f6:de:cc:00:fb:ef:66:0c: dd:34:59:4a:d7:8e:b0:cf:f6:ce:df:c4:48:a3:42:71:8c:b9: 2c:c0:09:70:51:72:0c:9c:85:cc:1f:36:f6:bf:e1:71:29:aa: 3d:73:99:5b:bd:83:6c:71:4b:f4:6f:d6:27:37:0d:46:02:73: a4:d1:ff:bc:f4:9b:64:02:31:58:19:92:b0:e4:09:7b:91:fa: b2:f0:2e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdKvR3Bm4Na2jEW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5 ZmI3MB4XDTI1MDcyMzEyNDkxM1oXDTI1MTAyMTEyNDkxM1owLzEtMCsGA1UEAxMk YzgzMTEyNzUtZDg1NC00MGU5LTk0OGEtODI1NzRjNWY0NTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPkX4k7S1jr6KULUI5cqQfBtDHX4BTw6A/o 0vWoElfYIb5c9vY+/Kyr7iljcGBml4e7rReBquCuLoCR6Xsk9K5zaczYS5NB5j1t c0MON9fvg68bKk0xo+n2h0mNkFuqjfRN10Qbm74OPHTd9UmvYmhiVkEqpsubNvkZ lXfohsqZcYDMe7g8YxLe8RyG5EOrXoujP4nknqoSh3ngmmyWZ/FwmaOa4C5Qpr/H J8Ns2259ON55QgdNO2htm9OvNTUndfcM0ldi2YeYLkUQ0B46WdaQ+IdO+gaxuBDx urutzo7Qa1juoaH+jtbsqpQ6Uoh5rhaukjU0+vUoKRcpf4aOoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdUV9bVxNK1ln7/HcxESILtjcKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODBk ZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMjFmNzgwZTQtODgwNC0z YzNmLWEzMmYtYzNjMThjZTVmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgwZGZiZDQtMDk0NC00YzI0LWE2 NDUtYTIzOGQ5OTQ5ZmI3L2Q4MGRmYmQ0LTA5NDQtNGMyNC1hNjQ1LWEyMzhkOTk0 OWZiNy5jcmwwHwYDVR0jBBgwFoAUo997XFZGSaHviZ1tCZ96IV4ljtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4 ZDk5NDlmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF400MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKOvXGbS7jCn7wv7HWqwO3KBJ4oF4BPsKdH6/q8zefBgk/zvPOSIgFt N+tIVJhlFKsSRl2/XznAMNhJyEhCRyuvyn/USpfxnH7SX2RjdD1GBWLIkBJmmytA iAvFbAlSF7zv8A6Iew7TT0o7+soOiVuw26M8RSqLHRZ6uwIALP9eU8LcGsuv8atj NaSLw66a9Kt0AVDGF6jRfQh8BCLfgRkRiKngBrzV1ZioNGj23swA++9mDN00WUrX jrDP9s7fxEijQnGMuSzACXBRcgychcwfNva/4XEpqj1zmVu9g2xxS/Rv1ic3DUYC c6TR/7z0m2QCMVgZkrDkCXuR+rLwLm4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:30 2025 by rpki-client