$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa File: d0ea46a9-3140-3de2-b792-a1cb38602e36.roa (raw, json) Hash identifier: 1vXmuBz+4lhxE/an7EStbs4cldHRnUB9EhHOo8u3LYE= Subject key identifier: D9:0C:0D:47:06:B2:09:49:CD:8A:81:00:82:5D:7F:4D:EE:0E:9B:29 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ACCA64EA9F1268D371AD57264 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 32696 IP address blocks: 8.224.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4e:a9:f1:26:8d:37:1a:d5:72:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=9b229cd4-61b8-455e-be40-248dd8fcf146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:64:f7:ff:8a:3d:92:6c:fe:5b:c0:af:33: e1:ba:8c:12:21:80:fb:99:e7:5d:a1:03:67:3b:ca: cc:62:25:47:e5:26:d7:96:38:78:4e:45:6f:9a:b6: 2c:f1:9d:59:ea:5e:2a:f9:67:88:a6:de:ef:1e:d7: a2:23:fe:d9:40:62:31:19:cd:f5:d8:c8:e1:26:23: 0d:ed:8f:26:9c:c2:2e:36:4f:a8:90:c5:7f:61:57: 76:d4:1e:b5:e5:9b:83:d0:28:d2:c6:91:d6:c8:89: c3:8f:69:e0:b1:0e:23:d7:24:27:02:61:cb:51:64: b4:32:d8:9f:14:8a:e0:b3:fe:9b:4c:a5:5b:fe:fe: 61:34:68:23:26:16:94:7e:75:41:2c:a8:36:48:50: c0:2c:5c:94:70:1b:81:b6:22:47:84:7b:77:30:a7: 67:6b:60:fe:1d:53:65:4b:71:85:36:1a:2a:75:28: 20:f2:69:9f:20:eb:74:0f:e9:21:87:f8:35:10:dc: 1b:a3:33:64:c4:33:27:66:c8:c3:00:ae:d3:98:f5: 32:ef:80:dc:1a:fb:71:52:9b:22:f7:dc:5d:8f:98: 5d:b6:b3:a0:e1:b9:51:48:cd:4b:79:f8:db:34:4b: 20:eb:39:3a:e1:c2:73:3b:7d:87:bd:e2:a5:86:fa: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:0D:47:06:B2:09:49:CD:8A:81:00:82:5D:7F:4D:EE:0E:9B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.224.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9c:40:da:e6:f4:7f:b1:b4:67:cc:7f:5c:1f:db:d8:a1:6c: e4:00:4c:76:d2:ae:06:aa:e4:a1:d0:89:79:1e:fc:bc:bc:ac: 74:ae:2a:eb:27:f0:c6:96:a1:ab:33:9e:13:40:fe:d4:ab:2a: a4:5f:0f:b9:a6:be:10:56:bd:ff:17:c5:99:2e:ed:ff:88:8d: 36:9b:29:79:8f:dc:84:72:89:a9:b7:f2:c3:8e:89:6e:ea:21: d0:63:87:8e:63:f5:7e:97:b6:ae:55:65:dd:8a:b6:70:b6:df: 38:54:d3:12:2d:16:e6:14:17:ef:da:32:6b:1f:eb:f3:f2:d4: 94:bf:b7:65:29:46:f7:95:43:6c:18:66:5d:9c:99:42:39:88: 20:aa:c6:8a:25:e7:bf:28:87:77:1e:c2:e9:ca:c7:61:82:fa: 8b:36:91:83:dd:9f:5f:8a:1b:ac:bc:d0:ec:7a:80:0e:78:33: b7:a3:ed:5d:78:fc:96:61:d6:12:98:c5:ba:fe:54:fc:7f:1e: 0e:3f:03:65:ae:aa:16:19:ab:de:9b:e7:a8:31:80:78:29:d7: bd:df:f8:e4:4a:c6:63:d0:ce:49:11:8f:b8:00:56:5c:b7:d5: be:f2:dc:0f:b5:34:96:06:94:d3:a6:03:25:79:18:a0:87:93: 91:c6:41:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk6p8SaNNxrVcmQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OWIyMjljZDQtNjFiOC00NTVlLWJlNDAtMjQ4ZGQ4ZmNmMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkypk9/+KPZJs/lvArzPhuowSIYD7meddoQNn O8rMYiVH5SbXljh4TkVvmrYs8Z1Z6l4q+WeIpt7vHteiI/7ZQGIxGc312MjhJiMN 7Y8mnMIuNk+okMV/YVd21B615ZuD0CjSxpHWyInDj2ngsQ4j1yQnAmHLUWS0Mtif FIrgs/6bTKVb/v5hNGgjJhaUfnVBLKg2SFDALFyUcBuBtiJHhHt3MKdna2D+HVNl S3GFNhoqdSgg8mmfIOt0D+khh/g1ENwbozNkxDMnZsjDAK7TmPUy74DcGvtxUpsi 99xdj5hdtrOg4blRSM1LefjbNEsg6zk64cJzO32HveKlhvpM/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkMDUcGsglJzYqBAIJdf03uDpspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDBlYTQ2YTktMzE0MC0z ZGUyLWI3OTItYTFjYjM4NjAyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACOAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGcQNrm9H+xtGfMf1wf29ihbOQATHbSrgaq5KHQiXke/Ly8rHSuKusn 8MaWoasznhNA/tSrKqRfD7mmvhBWvf8XxZku7f+IjTabKXmP3IRyiam38sOOiW7q IdBjh45j9X6Xtq5VZd2KtnC23zhU0xItFuYUF+/aMmsf6/Py1JS/t2UpRveVQ2wY Zl2cmUI5iCCqxool578oh3cewunKx2GC+os2kYPdn1+KG6y80Ox6gA54M7ej7V14 /JZh1hKYxbr+VPx/Hg4/A2WuqhYZq96b56gxgHgp173f+ORKxmPQzkkRj7gAVly3 1b7y3A+1NJYGlNOmAyV5GKCHk5HGQds= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:52 2025 by rpki-client