$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa File: 3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa (raw, json) Hash identifier: JVknmaG0YTjh2cOJUBydqYyyHaUuBd9rCdOdMB2I/HM= Subject key identifier: 96:81:93:AA:15:BE:1A:FD:1E:38:9C:33:33:29:FA:FE:CB:7A:93:54 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AECC11C33183B20D21A2A4900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3356 IP address blocks: 8.12.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1c:33:18:3b:20:d2:1a:2a:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f485b742-d83a-4cf0-aff2-c33a040b808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:ec:56:af:5f:39:64:f9:93:b1:f7:c6:34: 3a:9a:2a:82:1f:89:98:cc:d3:bb:1e:46:92:2c:83: 7b:b8:e3:73:2f:08:f3:f1:fa:77:ae:ce:74:d1:c1: d1:29:0e:12:57:6a:62:7b:25:62:c4:f3:b9:d7:af: 18:77:22:9f:79:c0:ab:34:6c:6b:ad:2c:b8:65:1c: db:2f:b9:e5:a0:6f:68:10:15:21:ec:cb:44:86:f7: 1c:f7:11:45:03:fb:38:6d:55:30:61:6a:77:14:14: 69:d2:bf:f6:e5:7c:e3:e6:c8:c5:a2:27:56:a8:fa: a1:57:fc:9f:67:03:67:a2:4c:42:31:23:60:9c:29: 17:32:02:74:20:74:db:b9:ac:4d:a3:53:5f:bb:34: 8b:ad:4b:a3:e0:ea:36:c7:35:52:ae:04:80:ce:e4: 6d:e6:02:ec:b0:ba:15:dc:14:0e:30:50:ec:a2:c4: 9d:a2:60:df:a3:8b:19:45:7b:49:dc:f9:91:73:2e: ef:aa:f7:1f:76:ad:3a:b2:c2:e8:ee:66:5d:b1:1f: 74:43:15:ec:b4:1e:4e:d3:e6:a6:23:fe:96:8f:74: 54:41:25:b8:d6:e5:3d:91:49:12:28:34:8d:c5:2d: 9a:41:ad:e2:54:43:6f:10:1f:be:60:47:92:8e:81: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:93:AA:15:BE:1A:FD:1E:38:9C:33:33:29:FA:FE:CB:7A:93:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.12.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:86:35:6b:8d:a7:26:b6:90:99:fd:47:a0:66:bb:8a:bd:e9: 73:11:a2:76:79:58:eb:ac:15:c8:24:a9:ac:f8:47:9b:a8:c6: 93:32:14:d3:6f:ad:9a:9f:40:3a:30:9c:7a:3b:b0:55:0d:7f: 26:31:1c:a0:8f:1f:55:d4:b4:8f:6a:7e:43:4e:eb:67:95:ea: c3:7d:9a:4c:f6:d6:a4:7e:82:b9:39:10:61:31:2c:17:2b:0a: 37:29:33:a3:d1:43:f6:4a:ee:a2:40:88:ff:14:c3:53:74:49: 36:38:f1:14:60:25:ec:a7:5b:ec:81:2a:9f:9f:5b:f8:cd:12: 31:f8:a1:67:ce:45:fe:86:07:f7:f4:3a:0f:f5:d2:66:94:2a: a2:ca:4f:f7:8e:82:01:d5:99:c0:34:e3:3a:8e:38:12:2f:a4: 6f:57:12:81:95:83:cc:fd:c8:f8:ab:40:53:a7:04:0d:cf:d7: a5:a2:5e:5f:e5:e4:61:a4:1d:d1:c8:91:6b:f4:f6:00:a5:77: f2:c7:6f:da:ff:ad:b8:64:ef:3b:39:5a:88:63:87:d4:55:80: 93:59:b7:b0:72:33:2d:bd:3f:c7:20:fa:c1:d8:a6:bd:e5:b0: 5c:f2:10:b9:0e:c1:74:f0:22:53:ea:96:14:1f:b3:ed:57:19: 26:04:c5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRwzGDsg0hoqSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjQ4NWI3NDItZDgzYS00Y2YwLWFmZjItYzMzYTA0MGI4MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrsVq9fOWT5k7H3xjQ6miqCH4mYzNO7HkaS LIN7uONzLwjz8fp3rs500cHRKQ4SV2pieyVixPO5168YdyKfecCrNGxrrSy4ZRzb L7nloG9oEBUh7MtEhvcc9xFFA/s4bVUwYWp3FBRp0r/25Xzj5sjFoidWqPqhV/yf ZwNnokxCMSNgnCkXMgJ0IHTbuaxNo1NfuzSLrUuj4Oo2xzVSrgSAzuRt5gLssLoV 3BQOMFDsosSdomDfo4sZRXtJ3PmRcy7vqvcfdq06ssLo7mZdsR90QxXstB5O0+am I/6Wj3RUQSW41uU9kUkSKDSNxS2aQa3iVENvEB++YEeSjoEKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaBk6oVvhr9HjicMzMp+v7LepNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzA1NmYyY2EtYzdjYy0z YmY0LTlhYWItZjRjMjhlMDA4OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAxPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyGNWuNpya2kJn9R6Bmu4q96XMRonZ5WOusFcgkqaz4R5uoxpMyFNNv rZqfQDownHo7sFUNfyYxHKCPH1XUtI9qfkNO62eV6sN9mkz21qR+grk5EGExLBcr CjcpM6PRQ/ZK7qJAiP8Uw1N0STY48RRgJeynW+yBKp+fW/jNEjH4oWfORf6GB/f0 Og/10maUKqLKT/eOggHVmcA04zqOOBIvpG9XEoGVg8z9yPirQFOnBA3P16WiXl/l 5GGkHdHIkWv09gCld/LHb9r/rbhk7zs5Wohjh9RVgJNZt7ByMy29P8cg+sHYpr3l sFzyELkOwXTwIlPqlhQfs+1XGSYExZ4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:06 2025 by rpki-client