$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa File: 6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa (raw, json) Hash identifier: 6TJSsk4ycVIqNKWkZmCYQSM6xzAAiXvZMQxNbzVQzSY= Subject key identifier: 27:27:31:F2:12:41:28:15:14:65:F1:85:ED:8C:80:19:40:90:0F:8C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ACCA64E7FB3A19CA51412E100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 32696 IP address blocks: 8.19.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4e:7f:b3:a1:9c:a5:14:12:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=42c9fb64-89ee-4433-9ce7-3fa735a62a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:85:eb:95:97:97:d8:63:01:98:0b:23:bf: 67:10:72:15:52:2c:30:c5:9b:67:b5:37:a4:a5:8d: 19:0e:02:5c:27:f8:23:d0:97:04:cb:a9:16:72:00: b6:bf:a8:da:43:c5:85:07:e2:39:2d:69:62:c9:29: 5e:2f:b5:12:de:e2:4a:00:7d:b3:61:ee:df:f6:a9: 70:79:f8:5d:3c:16:81:de:95:7a:3b:e8:b2:8a:25: 51:99:3a:bc:1e:3e:2f:f1:c2:ed:8b:c3:76:24:26: ae:05:06:b6:93:03:77:24:42:54:47:2e:67:55:ce: 03:f2:ff:d7:16:39:48:21:67:a3:81:2c:b0:23:ef: e3:33:8c:11:3c:dd:c4:4d:f2:0c:ee:92:3a:ee:74: 1b:eb:d7:b9:8d:27:51:72:28:05:c0:bc:fb:55:df: b5:17:13:44:71:b6:26:28:cd:f7:91:b7:46:0e:0f: 8e:52:f1:aa:8a:19:04:1e:44:34:94:59:c4:93:a4: a9:f7:f8:e7:98:d1:27:74:47:a5:33:c0:89:1f:70: 4f:7c:ee:86:fc:8f:9c:3e:5d:ef:48:d3:02:93:38: 41:0b:fe:eb:b6:01:cc:21:de:9d:4c:cd:97:0a:3c: ac:a7:8d:4f:56:f7:28:b2:ff:40:be:9c:65:9c:8d: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:31:F2:12:41:28:15:14:65:F1:85:ED:8C:80:19:40:90:0F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.19.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:6b:87:1c:5e:19:1d:cb:cc:75:35:a3:76:9c:e6:fa:ab: 27:20:10:2d:fa:f6:e8:09:aa:ec:2e:c1:cb:7c:5e:73:92:d9: 99:bd:b6:90:f6:2f:11:fe:80:07:50:4b:40:31:2e:a3:3c:dc: 71:59:59:28:51:8a:da:d9:c0:bb:1d:5c:3d:d7:69:48:99:36: a7:d4:1e:be:2f:5d:7d:9b:10:1e:01:9e:f1:d5:a6:44:0e:cb: b1:fc:18:ed:fe:96:68:3c:94:df:bc:33:6b:a5:ac:9d:6d:88: 4f:e5:e9:98:98:1f:49:f0:05:de:a7:2b:88:22:d8:2e:21:64: 09:60:e0:cf:08:77:f3:e4:e8:09:35:2a:dc:cf:72:35:7d:15: d0:ff:80:4d:13:08:3f:95:f5:c7:5a:b1:12:ca:6c:63:2b:0d: 67:7f:f8:55:81:21:6d:aa:53:18:c4:8e:35:0f:02:59:d4:75: 0b:b1:a5:73:f9:2a:75:6a:54:23:9d:65:c6:78:20:08:97:84: e5:1c:d1:16:2b:9d:50:da:e6:41:b4:cd:c4:9f:71:4d:5d:81: e5:89:95:3b:ca:b3:a3:fe:14:cc:94:3d:10:33:0d:17:e3:5c: ab:ed:3b:99:54:92:da:15:59:5b:6e:9f:66:4c:6f:71:34:74: 96:5f:b6:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk5/s6GcpRQS4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NDJjOWZiNjQtODllZS00NDMzLTljZTctM2ZhNzM1YTYyYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5iF65WXl9hjAZgLI79nEHIVUiwwxZtntTek pY0ZDgJcJ/gj0JcEy6kWcgC2v6jaQ8WFB+I5LWliySleL7US3uJKAH2zYe7f9qlw efhdPBaB3pV6O+iyiiVRmTq8Hj4v8cLti8N2JCauBQa2kwN3JEJURy5nVc4D8v/X FjlIIWejgSywI+/jM4wRPN3ETfIM7pI67nQb69e5jSdRcigFwLz7Vd+1FxNEcbYm KM33kbdGDg+OUvGqihkEHkQ0lFnEk6Sp9/jnmNEndEelM8CJH3BPfO6G/I+cPl3v SNMCkzhBC/7rtgHMId6dTM2XCjysp41PVvcosv9AvpxlnI00kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcnMfISQSgVFGXxhe2MgBlAkA+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjQ0NGFmNDQtYzM1Yi0z NThiLWI3YzEtOWYwMzA0YWQzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQza4ccXhkdy8x1NaN2nOb6qycgEC369ugJquwuwct8XnOS2Zm9tpD2 LxH+gAdQS0AxLqM83HFZWShRitrZwLsdXD3XaUiZNqfUHr4vXX2bEB4BnvHVpkQO y7H8GO3+lmg8lN+8M2ulrJ1tiE/l6ZiYH0nwBd6nK4gi2C4hZAlg4M8Id/Pk6Ak1 KtzPcjV9FdD/gE0TCD+V9cdasRLKbGMrDWd/+FWBIW2qUxjEjjUPAlnUdQuxpXP5 KnVqVCOdZcZ4IAiXhOUc0RYrnVDa5kG0zcSfcU1dgeWJlTvKs6P+FMyUPRAzDRfj XKvtO5lUktoVWVtun2ZMb3E0dJZftp4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:22 2025 by rpki-client