$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa File: 37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa (raw, json) Hash identifier: GQPoIA/oh9HwQDFk36JYkDXy139xA1GdGfMYVzvxgSA= Subject key identifier: 9E:D6:91:D8:AA:8D:99:B6:86:0E:EF:A1:30:35:47:27:D1:4F:0D:27 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AC8763E17F0F7205D7D472800 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 6404 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3e:17:f0:f7:20:5d:7d:47:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=1e377891-0e16-4b73-a8c4-5971339ba615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:9f:3a:90:19:f3:75:95:6f:da:cd:2b:c3: 2a:0a:ba:fe:12:46:92:6c:96:bf:cf:a2:15:a2:69: 0c:8f:f5:3a:92:4b:7d:73:ca:92:11:67:98:42:54: 9b:15:89:04:76:cc:92:ae:fd:31:2a:a5:6b:63:0f: 09:bf:ed:80:d9:d3:c0:26:57:56:4e:4a:b5:36:b5: e0:ac:8c:83:60:02:0f:2d:88:9a:f9:ff:6a:7c:49: 37:a2:b1:94:ff:fe:3f:10:88:05:89:15:6d:14:98: 81:69:19:80:5e:92:a6:15:bf:41:46:eb:7a:98:8b: f2:3c:76:d8:02:22:34:15:2c:d0:87:05:97:39:a3: 90:55:62:0d:e5:78:54:96:26:71:09:51:92:3c:a5: 90:89:3b:9e:b5:06:94:ee:4d:f4:de:ef:ca:04:21: 3a:e7:43:73:64:88:93:82:5c:74:52:1e:c3:c9:76: d5:1d:0a:88:9a:b7:b9:37:35:fd:8a:50:c2:ba:5c: 6b:e1:c0:f2:09:cb:83:4e:0e:28:2c:97:84:c2:b6: 98:a4:ec:98:77:bb:0b:7d:53:37:16:56:f5:82:5a: f0:aa:d8:0e:98:ca:79:e4:be:f7:e0:ba:4d:14:7b: 66:5f:c5:d3:2b:44:fb:a7:04:c2:4c:b0:d3:3e:99: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D6:91:D8:AA:8D:99:B6:86:0E:EF:A1:30:35:47:27:D1:4F:0D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0d:9f:57:7a:68:d3:bf:45:d8:bb:a1:93:9d:e3:5e:ee:6e: 5d:09:8a:f2:b3:21:fb:84:df:55:f3:c5:6e:5a:d7:8e:b9:8f: e8:e3:73:9f:a7:7d:7a:49:84:32:5b:da:d9:c4:e7:ee:f2:b8: ab:a5:d1:85:21:e5:ec:0f:6b:25:aa:d5:ac:3f:9e:85:f2:d1: c0:32:fc:56:61:df:d8:79:0f:1e:f6:c6:36:ff:8f:ff:8a:df: b1:38:e9:cb:68:5f:fb:d3:cd:15:95:9c:26:5e:46:3c:fd:60: fa:aa:f4:12:07:33:9c:7d:0c:40:c3:85:be:53:55:0f:ab:17: 25:c9:45:11:65:fe:d8:ed:f3:5a:bf:f4:40:bd:07:80:e9:21: aa:f2:ff:52:88:a8:b3:6d:60:11:92:1f:58:30:b6:74:40:20: 30:3f:0d:7b:1f:b4:a2:f5:8e:c3:45:2a:fa:eb:37:9c:83:4d: a9:19:ed:8e:77:53:af:0a:05:20:8c:be:9d:9f:d2:64:36:35: 9d:ec:21:4b:cc:c1:36:51:d9:c1:3c:0c:c5:2c:a9:63:9f:df: bf:7f:de:8d:e4:c8:d4:16:fe:e6:38:d4:b2:59:0e:b4:c4:2b: f2:8f:fb:63:ea:8d:e3:23:a5:22:e7:7e:9e:ea:5a:22:66:6b: c8:ec:d0:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdj4X8PcgXX1HKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWUzNzc4OTEtMGUxNi00YjczLWE4YzQtNTk3MTMzOWJhNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NafOpAZ83WVb9rNK8MqCrr+EkaSbJa/z6IV omkMj/U6kkt9c8qSEWeYQlSbFYkEdsySrv0xKqVrYw8Jv+2A2dPAJldWTkq1NrXg rIyDYAIPLYia+f9qfEk3orGU//4/EIgFiRVtFJiBaRmAXpKmFb9BRut6mIvyPHbY AiI0FSzQhwWXOaOQVWIN5XhUliZxCVGSPKWQiTuetQaU7k303u/KBCE650NzZIiT glx0Uh7DyXbVHQqImre5NzX9ilDCulxr4cDyCcuDTg4oLJeEwraYpOyYd7sLfVM3 Flb1glrwqtgOmMp55L734LpNFHtmX8XTK0T7pwTCTLDTPpku/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7WkdiqjZm2hg7voTA1RyfRTw0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzdmOTc3YWEtM2Q4MC0z MWQzLWJjN2QtZjg3M2YzZmZhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsNn1d6aNO/Rdi7oZOd417ubl0JivKzIfuE31XzxW5a1465j+jjc5+n fXpJhDJb2tnE5+7yuKul0YUh5ewPayWq1aw/noXy0cAy/FZh39h5Dx72xjb/j/+K 37E46ctoX/vTzRWVnCZeRjz9YPqq9BIHM5x9DEDDhb5TVQ+rFyXJRRFl/tjt81q/ 9EC9B4DpIary/1KIqLNtYBGSH1gwtnRAIDA/DXsftKL1jsNFKvrrN5yDTakZ7Y53 U68KBSCMvp2f0mQ2NZ3sIUvMwTZR2cE8DMUsqWOf379/3o3kyNQW/uY41LJZDrTE K/KP+2PqjeMjpSLnfp7qWiJma8js0HQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:37 2025 by rpki-client