$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa File: 2777582d-66eb-3ff0-9d65-00628aec15bc.roa (raw, json) Hash identifier: 8QmJo0Tt4IfnjQeq1s6Q9X6gNON4tcIPLTrc1dVzDaQ= Subject key identifier: 11:B3:A6:35:CA:B2:27:FD:37:76:29:0D:D8:E3:A5:9C:B2:1F:C3:9E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ADDB462C181F92454CE2BF3C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa Signing time: Fri 15 Aug 2025 15:37:52 +0000 ROA not before: Fri 15 Aug 2025 15:37:52 +0000 ROA not after: Thu 13 Nov 2025 16:37:52 +0000 asID: 25623 IP address blocks: 8.20.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:b4:62:c1:81:f9:24:54:ce:2b:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 15 15:37:52 2025 GMT Not After : Nov 13 16:37:52 2025 GMT Subject: CN=96f3bd33-415f-45a7-a42c-1989b5c54c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:50:aa:d9:4e:e6:98:12:32:49:9d:34:a0: fd:23:59:4d:68:25:e6:db:32:88:30:9a:7c:6b:db: a0:e8:cb:f0:0a:c5:26:d7:61:81:6c:d2:4a:f9:2d: fb:2f:04:e9:20:ed:c4:1e:49:20:23:55:89:e2:d7: 92:1c:2e:9b:d0:54:d4:e7:39:80:4f:76:8e:98:15: 62:0d:34:0e:9d:c3:d9:42:67:2d:aa:25:3b:4e:7b: a9:05:8b:f8:af:47:b8:b5:ba:66:08:39:ee:b9:1f: 20:1f:1c:92:fe:b5:b7:1d:28:56:2f:48:76:99:5d: 4b:35:67:c4:58:10:cf:f4:50:bc:91:18:4e:cb:5a: b9:0d:71:5e:54:2b:36:fc:9b:50:71:9f:1b:2e:22: bb:b8:e8:aa:c6:7e:27:db:e9:68:fa:f5:6c:2f:06: c4:5f:de:02:eb:db:04:35:24:47:a2:57:1b:44:fa: 4a:03:24:e7:ea:68:cc:02:f8:19:20:7c:6d:13:d4: 75:10:98:c7:57:95:c9:fa:92:0a:df:1b:3e:06:59: ef:1a:e3:0f:30:00:5b:1e:90:90:30:70:c8:22:19: cc:36:d8:81:98:14:a4:81:ff:4f:a7:ef:d4:52:da: b4:90:31:be:ac:68:bd:ae:db:88:3d:30:e9:a4:fd: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:A6:35:CA:B2:27:FD:37:76:29:0D:D8:E3:A5:9C:B2:1F:C3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:82:c4:0c:11:1f:6d:34:47:0d:52:a5:32:a9:a1:99:36:6e: 1d:33:4b:66:ab:21:35:60:ee:d1:84:d7:4d:92:ad:86:0c:c2: 03:a1:f4:6d:76:19:3a:52:33:d8:8f:04:41:4b:d5:f4:ee:3f: d2:7f:96:17:e8:86:21:92:75:65:21:23:4f:9f:6c:aa:85:14: e7:b7:bc:ed:b1:29:a9:b0:00:06:39:cd:21:fe:39:13:0b:7f: 10:9b:75:58:a9:c9:e4:4b:77:ef:85:70:7c:48:d1:b3:1c:f1: e6:4a:a4:c2:f9:41:76:44:f3:85:e4:99:bc:d2:dc:df:32:1d: e1:5b:01:dc:3f:97:27:23:96:a1:a2:8c:d4:7f:4e:19:bf:28: 29:56:e7:ba:8f:c5:0d:69:24:ce:a2:57:a7:69:a1:ce:93:c2: bc:66:c5:ea:c4:cf:8a:34:bb:ad:0a:bd:e2:d9:5d:3d:1a:ea: d2:50:73:0f:9a:21:8c:f6:30:42:50:b3:2d:7c:81:7e:bb:4b: 1c:2f:15:1b:34:d1:90:d4:ac:b1:f2:bf:26:ab:27:3c:d8:c5: 94:79:f8:fa:e2:e4:07:de:2a:32:2a:2e:4a:c2:79:05:14:36: 63:03:74:c3:91:d9:3d:99:88:d0:fd:b9:3c:76:61:50:e3:36: 48:83:f8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdtGLBgfkkVM4r88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxNTE1Mzc1MloXDTI1MTExMzE2Mzc1MlowLzEtMCsGA1UEAxMk OTZmM2JkMzMtNDE1Zi00NWE3LWE0MmMtMTk4OWI1YzU0YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRFQqtlO5pgSMkmdNKD9I1lNaCXm2zKIMJp8 a9ug6MvwCsUm12GBbNJK+S37LwTpIO3EHkkgI1WJ4teSHC6b0FTU5zmAT3aOmBVi DTQOncPZQmctqiU7TnupBYv4r0e4tbpmCDnuuR8gHxyS/rW3HShWL0h2mV1LNWfE WBDP9FC8kRhOy1q5DXFeVCs2/JtQcZ8bLiK7uOiqxn4n2+lo+vVsLwbEX94C69sE NSRHolcbRPpKAyTn6mjMAvgZIHxtE9R1EJjHV5XJ+pIK3xs+BlnvGuMPMABbHpCQ MHDIIhnMNtiBmBSkgf9Pp+/UUtq0kDG+rGi9rtuIPTDppP1NTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGzpjXKsif9N3YpDdjjpZyyH8OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjc3NzU4MmQtNjZlYi0z ZmYwLTlkNjUtMDA2MjhhZWMxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBS/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyCxAwRH200Rw1SpTKpoZk2bh0zS2arITVg7tGE102SrYYMwgOh9G12 GTpSM9iPBEFL1fTuP9J/lhfohiGSdWUhI0+fbKqFFOe3vO2xKamwAAY5zSH+ORML fxCbdVipyeRLd++FcHxI0bMc8eZKpML5QXZE84XkmbzS3N8yHeFbAdw/lycjlqGi jNR/Thm/KClW57qPxQ1pJM6iV6dpoc6TwrxmxerEz4o0u60KveLZXT0a6tJQcw+a IYz2MEJQsy18gX67SxwvFRs00ZDUrLHyvyarJzzYxZR5+Pri5AfeKjIqLkrCeQUU NmMDdMOR2T2ZiND9uTx2YVDjNkiD+C4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:09 2025 by rpki-client