$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa File: 9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa (raw, json) Hash identifier: WCS7qT/rOkRWDBUrqPUlm6dUGi/h+GaI5ctR+1yWh/c= Subject key identifier: 39:B7:1A:4D:4F:57:28:BC:1E:DB:2A:23:D3:1F:E2:26:BC:C1:1B:1A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AD3A0F49F54BB43FEB2C62400 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 209 IP address blocks: 64.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f4:9f:54:bb:43:fe:b2:c6:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=aa2b9685-30b5-4785-a1bb-3469cc813ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:7d:fe:4d:35:17:79:f9:d8:44:23:90:2a: 76:dc:3b:f0:ec:51:e2:8e:9c:f4:ce:30:3a:cc:9e: d6:14:81:e0:8d:e4:c9:b1:be:f1:c0:32:53:30:0f: 38:bf:53:10:db:43:2b:ee:01:61:50:6c:fe:c3:6b: ce:f1:06:43:12:bf:10:ac:50:f3:d9:2b:cd:43:fd: 3a:1b:2a:3e:da:2e:1b:69:2d:76:76:05:c2:ee:4c: 25:43:e6:31:cc:40:4e:ca:9e:7a:11:a9:66:73:0c: a1:5b:21:cf:8a:7d:08:a1:45:40:ce:a9:89:14:32: 01:19:f0:74:2b:ed:17:4b:cd:6a:fc:a7:34:dc:df: 38:54:76:45:8a:2b:7e:9d:72:f5:9b:bf:30:e9:4e: ca:b6:27:47:91:d8:03:79:f1:e9:09:66:cd:3b:34: c8:d9:63:95:15:a4:22:1a:21:24:84:e8:d9:7f:33: 1c:4a:a1:62:c8:ab:5d:a3:c8:66:80:e8:09:52:a6: a5:dd:11:49:ef:56:5f:7c:47:4a:96:fc:75:28:20: 05:66:9c:e2:ef:cd:25:57:6a:72:e1:04:fa:fd:6f: 8a:8a:1e:b3:49:f4:57:c2:d8:f7:0f:44:2e:15:fe: 77:cf:51:07:ec:33:ff:da:9f:9d:74:ce:81:19:cd: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B7:1A:4D:4F:57:28:BC:1E:DB:2A:23:D3:1F:E2:26:BC:C1:1B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:13:c3:dd:1a:a4:97:3f:aa:b4:02:1c:a7:66:c6:21:3a:4b: 57:7e:97:9c:6a:58:ed:98:19:ac:87:37:4f:cd:d4:db:08:da: 12:a7:fb:fa:f9:80:17:85:be:2a:97:5a:cb:ab:58:b2:78:93: 1a:97:16:f0:5e:16:14:e9:0b:9b:15:2d:2f:dc:a3:89:b2:8c: ae:a6:25:fd:f9:8c:93:a9:59:fe:cb:88:ee:6d:d7:4e:cb:e4: 3d:0b:dc:71:d1:7e:0c:5d:83:7c:3f:da:42:55:03:5f:aa:aa: 80:12:7f:b8:32:95:f6:38:a3:cc:dc:ba:93:13:f7:69:e2:29: c1:d3:f2:4d:ad:09:12:84:fe:6b:52:fc:97:50:66:8a:a9:52: 2e:98:b8:0e:9e:7b:4f:31:54:6a:1a:b7:57:e6:39:5f:a1:6f: d9:46:4e:e3:a5:da:1d:ad:e9:cf:5b:51:97:e6:66:7c:05:0e: 5c:43:0c:0a:cf:41:6c:9a:2d:f6:f9:df:d6:a8:7d:1a:88:6d: b6:0f:6d:4d:ae:70:95:21:62:49:f7:38:5f:16:80:e5:c0:73: 87:ea:6e:ce:cc:a6:4c:45:28:22:cd:91:d9:6c:bb:ca:ce:1b: 0c:73:c5:cd:01:9d:83:db:72:3c:0f:b3:19:19:e4:71:c2:cd: 7d:31:f4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPSfVLtD/rLGJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YWEyYjk2ODUtMzBiNS00Nzg1LWExYmItMzQ2OWNjODEzYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTt9/k01F3n52EQjkCp23Dvw7FHijpz0zjA6 zJ7WFIHgjeTJsb7xwDJTMA84v1MQ20Mr7gFhUGz+w2vO8QZDEr8QrFDz2SvNQ/06 Gyo+2i4baS12dgXC7kwlQ+YxzEBOyp56EalmcwyhWyHPin0IoUVAzqmJFDIBGfB0 K+0XS81q/Kc03N84VHZFiit+nXL1m78w6U7KtidHkdgDefHpCWbNOzTI2WOVFaQi GiEkhOjZfzMcSqFiyKtdo8hmgOgJUqal3RFJ71ZffEdKlvx1KCAFZpzi780lV2py 4QT6/W+Kih6zSfRXwtj3D0QuFf53z1EH7DP/2p+ddM6BGc0MwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm3Gk1PVyi8HtsqI9Mf4ia8wRsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWJlYzc2OGMtZGE4YS0z OTRhLTljNmYtMmNlZTcwMjVkZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoTw90apJc/qrQCHKdmxiE6S1d+l5xqWO2YGayHN0/N1NsI2hKn+/r5 gBeFviqXWsurWLJ4kxqXFvBeFhTpC5sVLS/co4myjK6mJf35jJOpWf7LiO5t107L 5D0L3HHRfgxdg3w/2kJVA1+qqoASf7gylfY4o8zcupMT92niKcHT8k2tCRKE/mtS /JdQZoqpUi6YuA6ee08xVGoat1fmOV+hb9lGTuOl2h2t6c9bUZfmZnwFDlxDDArP QWyaLfb539aofRqIbbYPbU2ucJUhYkn3OF8WgOXAc4fqbs7MpkxFKCLNkdlsu8rO Gwxzxc0BnYPbcjwPsxkZ5HHCzX0x9Cc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:41 2025 by rpki-client