$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa File: d34dc38a-07ce-3e37-9cd0-a31173f32136.roa (raw, json) Hash identifier: 6MyHbHUX4TPkm+D5Qt2Ggth1yv7vot8MtfEk4xYNtys= Subject key identifier: D3:4D:68:56:F3:8F:D1:AB:C1:AC:81:C3:8A:31:DF:F7:4E:3B:8C:42 Certificate issuer: /CN=f5f37851-5580-4893-8a07-8693f2521f18 Certificate serial: 010D0C9F4328584AB721A2EFFB0C45BECCDE01C0 Authority key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa Signing time: Fri 01 Aug 2025 20:01:28 +0000 ROA not before: Fri 01 Aug 2025 20:01:28 +0000 ROA not after: Thu 30 Oct 2025 20:01:28 +0000 asID: 401897 IP address blocks: 23.143.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:21:a2:ef:fb:0c:45:be:cc:de:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f37851-5580-4893-8a07-8693f2521f18 Validity Not Before: Aug 1 20:01:28 2025 GMT Not After : Oct 30 20:01:28 2025 GMT Subject: CN=acbfe526-f699-4859-82e9-47e0f99a6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f9:92:c7:da:9f:ee:1e:c2:a6:83:d0:b2:2f: ed:31:69:ac:75:48:53:83:1e:95:fe:f3:c0:b4:93: c1:3e:81:e9:3f:18:fe:95:81:c2:f8:b8:ca:10:f5: a2:70:a0:fc:4c:a0:1e:35:2e:a6:7f:ac:0a:81:d2: e8:20:7d:aa:34:75:03:20:d4:62:8a:61:f9:f8:1e: fd:b5:78:cb:75:9a:93:98:ce:cf:db:81:09:38:c0: 00:47:70:17:3e:ff:45:fa:b8:fd:1c:1e:c2:52:87: 58:7f:bb:36:c6:b2:32:b0:76:af:5b:81:07:f4:a4: 99:dd:51:51:6f:57:b8:26:00:5e:e0:58:c8:d0:b3: 5d:b5:ce:91:a1:93:18:f8:03:47:01:d3:09:9a:92: bb:70:2a:1f:c3:e3:49:94:e8:84:f5:a3:ef:bb:62: 15:ea:be:b4:5c:db:4b:50:89:7b:76:ec:eb:f0:53: 66:d8:ac:64:80:5f:41:56:94:01:6f:a1:c6:d7:fc: 4a:27:ac:eb:3a:96:fb:26:52:6d:32:23:54:e4:a5: 35:c6:67:d5:46:2e:b8:01:0a:2d:e5:94:0d:db:04: be:98:11:ed:c3:69:d7:05:27:9f:0f:db:94:fd:1e: 68:78:53:2d:6d:93:fe:b0:0a:40:2f:cb:00:f8:d6: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:68:56:F3:8F:D1:AB:C1:AC:81:C3:8A:31:DF:F7:4E:3B:8C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl X509v3 Authority Key Identifier: keyid:67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer sbgp-ipAddrBlock: critical IPv4: 23.143.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:70:81:38:90:09:38:74:4f:2f:03:03:41:03:81:7d:f5:dd: 6f:0a:67:48:39:95:7e:fb:86:fb:e5:2f:56:8e:1d:9a:d8:d2: 43:e7:90:82:a6:9d:a9:60:d2:17:e5:e8:ea:b6:c8:60:62:3d: fe:1a:5c:e1:70:30:35:2b:a9:11:1d:2b:ed:85:61:1e:c1:fa: 2d:59:2a:35:8c:57:49:ef:3a:7a:94:0e:52:3e:d1:e0:bf:8c: cf:c5:ff:14:9f:29:df:64:12:8c:0b:0f:d8:be:98:77:15:11: 70:f2:b8:a1:ce:6e:7d:2f:9c:58:8d:0f:67:0c:4b:a2:cb:a8: 91:5f:5d:5c:4b:db:40:e5:bd:a8:76:44:41:ec:66:29:1d:ee: c6:c4:5a:2b:16:ff:8f:c4:dd:5d:ca:7d:28:4e:98:0b:2e:50: 89:a7:db:4f:74:ba:66:f5:bd:38:a4:c5:d6:bc:fb:8f:d4:a1: d2:19:30:cd:80:51:6f:2f:55:3c:bf:75:2c:e2:91:25:80:39: 50:24:07:c7:a9:19:df:1d:4b:91:5e:10:00:d8:d3:1b:eb:c2: 62:4f:b9:6c:42:83:bc:c0:91:07:61:4e:72:b7:61:c0:60:95: ec:5c:4e:63:25:2d:02:73:5f:f3:55:2b:28:01:15:76:20:1c: d9:3b:8a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3IaLv+wxFvszeAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIx ZjE4MB4XDTI1MDgwMTIwMDEyOFoXDTI1MTAzMDIwMDEyOFowLzEtMCsGA1UEAxMk YWNiZmU1MjYtZjY5OS00ODU5LTgyZTktNDdlMGY5OWE2NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/mSx9qf7h7CpoPQsi/tMWmsdUhTgx6V/vPA tJPBPoHpPxj+lYHC+LjKEPWicKD8TKAeNS6mf6wKgdLoIH2qNHUDINRiimH5+B79 tXjLdZqTmM7P24EJOMAAR3AXPv9F+rj9HB7CUodYf7s2xrIysHavW4EH9KSZ3VFR b1e4JgBe4FjI0LNdtc6RoZMY+ANHAdMJmpK7cCofw+NJlOiE9aPvu2IV6r60XNtL UIl7duzr8FNm2KxkgF9BVpQBb6HG1/xKJ6zrOpb7JlJtMiNU5KU1xmfVRi64AQot 5ZQN2wS+mBHtw2nXBSefD9uU/R5oeFMtbZP+sApAL8sA+NZAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNNaFbzj9GrwayBw4ox3/dOO4xCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYz Nzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvZDM0ZGMzOGEtMDdjZS0z ZTM3LTljZDAtYTMxMTczZjMyMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmMzc4NTEtNTU4MC00ODkzLThh MDctODY5M2YyNTIxZjE4L2Y1ZjM3ODUxLTU1ODAtNDg5My04YTA3LTg2OTNmMjUy MWYxOC5jcmwwHwYDVR0jBBgwFoAUZx+MpTUZQVaS9pbf+jE3qIwL2zgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04Njkz ZjI1MjFmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpwgTiQCTh0Ty8DA0EDgX313W8KZ0g5lX77hvvlL1aOHZrY0kPnkIKm nalg0hfl6Oq2yGBiPf4aXOFwMDUrqREdK+2FYR7B+i1ZKjWMV0nvOnqUDlI+0eC/ jM/F/xSfKd9kEowLD9i+mHcVEXDyuKHObn0vnFiND2cMS6LLqJFfXVxL20Dlvah2 REHsZikd7sbEWisW/4/E3V3KfShOmAsuUImn2090umb1vTikxda8+4/UodIZMM2A UW8vVTy/dSzikSWAOVAkB8epGd8dS5FeEADY0xvrwmJPuWxCg7zAkQdhTnK3YcBg lexcTmMlLQJzX/NVKygBFXYgHNk7isk= -----END CERTIFICATE-----Generated at Tue Aug 12 13:30:09 2025 by rpki-client