$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa File: 90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa (raw, json) Hash identifier: ClNZIJtoZiNbUPMHnYc/GH4BLLsgN0KSWPVIpbdVYtg= Subject key identifier: 50:30:F5:E6:34:BF:E1:E1:A6:2B:6D:A4:E2:44:2E:97:4D:80:C6:68 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AD7D10FD562C3AD2E5643AD80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20473 IP address blocks: 8.9.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0f:d5:62:c3:ad:2e:56:43:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b2d5fc81-9235-441e-87f9-c9be97858acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:4e:4a:04:7e:35:b6:5b:86:dd:67:ce:8c: e2:9b:58:ff:65:e5:e4:82:0a:31:6a:9b:24:fc:bc: 09:ef:36:10:b1:e8:d2:6f:84:68:d1:56:11:66:a1: f4:70:fb:d7:e4:42:bb:60:d7:be:e6:dd:ef:41:b1: dd:fb:4e:d2:9f:88:9b:15:f4:c0:8c:09:e1:48:8c: 14:45:13:e7:c4:3f:e7:c2:8c:bd:b4:6f:0a:df:94: e0:ff:ed:a7:35:fd:01:40:e7:ea:c0:96:8a:cc:d2: a3:f2:b0:6d:f4:1b:b1:9d:e2:56:e6:b8:e0:16:e0: 92:8e:01:ae:61:62:a2:23:7d:4b:4f:0b:d2:12:34: cf:32:1c:0f:69:9c:41:78:61:ff:80:41:b6:45:ff: 77:16:dc:c7:a2:c2:64:b0:10:dc:3c:48:cd:fc:a3: 09:de:04:73:d1:59:5b:16:b9:c1:59:79:fd:aa:43: cd:27:c3:67:e8:6d:4c:16:f3:42:a2:1c:c0:a8:47: da:79:cd:95:08:3a:38:e9:45:cd:a3:1d:ef:07:d2: f2:47:ed:ed:5d:42:72:da:76:1e:3d:56:d8:8d:7f: ec:29:f9:e8:7a:5e:e5:4d:eb:c8:a9:bc:9b:c5:60: be:b4:6d:58:9b:45:df:ff:fc:b0:d8:88:2a:08:6b: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:F5:E6:34:BF:E1:E1:A6:2B:6D:A4:E2:44:2E:97:4D:80:C6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:27:fe:02:e4:dd:69:06:17:20:3e:24:6a:b1:db:13:5b:73: 59:fd:19:7f:e7:98:01:b3:fc:c3:a6:b9:0b:78:c8:dd:1a:81: cf:70:99:aa:15:b3:65:2c:e9:df:7c:72:53:d0:41:29:c8:5f: 1f:4b:8c:35:83:19:bb:d2:01:44:ea:2f:89:d2:44:4d:12:fa: ef:fd:ca:1f:c9:36:96:33:3f:52:73:fb:91:58:da:5e:fd:2a: 89:ed:04:54:f9:fc:94:73:d5:d9:82:be:46:66:ac:db:ba:5e: 4c:de:df:55:51:9b:0d:2b:b5:cc:db:d6:d4:bf:bd:12:54:04: 82:b3:c3:62:7a:46:82:17:89:09:e6:18:74:49:56:29:31:ce: 7c:98:fd:0b:9d:17:9c:ec:1d:00:25:58:1e:45:cd:00:29:b6: a3:27:5f:ea:dd:09:f8:6d:ea:24:30:5c:fb:95:ad:71:79:9c: dc:4b:2b:3d:4a:7e:25:8a:cd:3b:86:b5:3d:ab:2e:f2:29:2f: b9:84:b9:a8:fa:45:e5:fd:81:5a:5b:c1:59:f1:02:d7:85:ca: 22:14:88:7f:cf:ba:85:5f:a8:1f:07:33:86:04:ea:05:25:4c: 4b:19:e9:b8:2d:40:92:2d:29:c2:99:88:42:d8:ad:c4:51:72: c7:a9:f3:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Q/VYsOtLlZDrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YjJkNWZjODEtOTIzNS00NDFlLTg3ZjktYzliZTk3ODU4YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrlOSgR+NbZbht1nzozim1j/ZeXkggoxapsk /LwJ7zYQsejSb4Ro0VYRZqH0cPvX5EK7YNe+5t3vQbHd+07Sn4ibFfTAjAnhSIwU RRPnxD/nwoy9tG8K35Tg/+2nNf0BQOfqwJaKzNKj8rBt9BuxneJW5rjgFuCSjgGu YWKiI31LTwvSEjTPMhwPaZxBeGH/gEG2Rf93FtzHosJksBDcPEjN/KMJ3gRz0Vlb FrnBWXn9qkPNJ8Nn6G1MFvNCohzAqEfaec2VCDo46UXNox3vB9LyR+3tXUJy2nYe PVbYjX/sKfnoel7lTevIqbybxWC+tG1Ym0Xf//yw2IgqCGvHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAw9eY0v+HhpittpOJELpdNgMZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTBiOGJjYmYtMjBmYi0z N2VlLTlmMDYtYjkxNWNkNWE4MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0n/gLk3WkGFyA+JGqx2xNbc1n9GX/nmAGz/MOmuQt4yN0agc9wmaoV s2Us6d98clPQQSnIXx9LjDWDGbvSAUTqL4nSRE0S+u/9yh/JNpYzP1Jz+5FY2l79 KontBFT5/JRz1dmCvkZmrNu6Xkze31VRmw0rtczb1tS/vRJUBIKzw2J6RoIXiQnm GHRJVikxznyY/QudF5zsHQAlWB5FzQAptqMnX+rdCfht6iQwXPuVrXF5nNxLKz1K fiWKzTuGtT2rLvIpL7mEuaj6ReX9gVpbwVnxAteFyiIUiH/PuoVfqB8HM4YE6gUl TEsZ6bgtQJItKcKZiELYrcRRcsep81U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:57 2025 by rpki-client