$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa File: db2238da-4bac-3b0b-8968-b635c3d98c49.roa (raw, json) Hash identifier: lAv2GI/zzKDNiQRj5vIAujJmIDR622zkbexf/2yad3Y= Subject key identifier: 40:5D:DB:51:CF:D6:21:2D:14:0C:3F:0C:CF:F8:CA:1D:39:56:45:AA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AECC12900186D9A54B21D0E80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30305 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:29:00:18:6d:9a:54:b2:1d:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=506f39f9-7aab-44e8-b764-4f56d0281e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:ea:34:85:2a:fc:2d:57:0b:38:9e:7b:60: cf:de:82:ca:48:d3:ba:c6:40:02:e1:f7:6a:bf:b5: be:80:52:08:3d:38:a7:19:ce:9c:3c:da:94:19:a2: 4f:04:5a:0a:0e:1c:9d:ea:25:97:f3:22:34:b0:2a: 8a:32:2d:7f:19:ed:ac:92:e2:de:6b:c8:32:0e:ce: a0:b6:8e:6b:67:27:eb:d4:20:81:e1:cb:f9:45:91: 62:c7:97:88:56:9d:d1:87:32:d9:29:72:95:67:b3: 02:07:7e:7f:37:8b:f1:67:09:9a:3d:74:d5:e4:1c: 57:f3:78:69:2b:39:0e:20:3c:f4:48:4b:45:8a:0d: c1:3f:71:94:1d:3c:7a:1e:7f:c3:c5:5d:4f:69:29: 43:03:81:15:7e:d9:bd:a1:d8:7e:1b:a1:27:d8:63: 8a:78:14:5b:69:c4:08:57:55:ae:5e:3e:28:01:79: bb:28:8d:af:d5:05:93:e0:54:d9:39:63:00:ac:09: 35:f9:a8:0d:ee:a3:d4:4f:23:0c:76:c8:22:3f:85: 04:f9:d5:5f:48:62:e1:3e:e0:f7:fc:7d:fe:75:fa: 9e:ca:78:b3:03:6e:23:2c:5a:1f:c0:c1:b0:bd:ff: 5c:26:92:0b:6c:83:f0:e3:31:aa:56:ec:25:f6:be: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5D:DB:51:CF:D6:21:2D:14:0C:3F:0C:CF:F8:CA:1D:39:56:45:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:aa:b3:25:61:75:6e:b6:4d:19:e5:54:37:b6:bf:38:80:d5: ac:d9:9d:bf:1f:f9:6a:e6:5e:5f:8b:77:bc:3b:ac:3e:ac:ab: 81:a8:ca:9b:f8:a4:20:a1:f9:c2:07:27:ee:71:a3:ed:d6:06: 8c:07:2f:00:00:96:da:1c:7f:79:17:2b:d0:7d:a2:57:8e:40: 0b:86:3e:d1:d0:40:64:e0:70:64:05:bd:a9:90:bd:63:e0:69: f0:50:24:bd:c0:8d:a8:c8:b6:ca:74:7b:b6:26:95:34:b5:94: e1:e9:ae:dc:9c:e6:a2:65:2a:c5:79:e1:ad:ac:5c:b6:06:43: c6:6b:b6:12:4a:63:64:8d:82:56:2e:ef:5f:e6:c7:da:e4:cd: 72:bd:73:42:f9:da:2d:e0:12:bd:20:1d:c3:11:ea:c1:5f:d8: e6:15:79:1a:38:7a:da:2f:8a:43:51:46:fa:22:43:d9:5b:20: e6:37:36:ac:48:dc:38:b4:0a:54:26:a0:2f:67:35:56:31:b1: 09:03:5f:2f:37:32:a4:3b:7d:06:4c:d9:08:fb:8e:ef:4b:4e: 34:be:af:4a:78:d7:ed:a1:0d:01:7c:bd:06:49:de:0a:c7:37: 54:b3:01:7f:f9:2d:ff:53:f4:52:bc:62:34:1f:7c:de:ef:0d: 5d:66:92:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSkAGG2aVLIdDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTA2ZjM5ZjktN2FhYi00NGU4LWI3NjQtNGY1NmQwMjgxZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJjqNIUq/C1XCziee2DP3oLKSNO6xkAC4fdq v7W+gFIIPTinGc6cPNqUGaJPBFoKDhyd6iWX8yI0sCqKMi1/Ge2skuLea8gyDs6g to5rZyfr1CCB4cv5RZFix5eIVp3RhzLZKXKVZ7MCB35/N4vxZwmaPXTV5BxX83hp KzkOIDz0SEtFig3BP3GUHTx6Hn/DxV1PaSlDA4EVftm9odh+G6En2GOKeBRbacQI V1WuXj4oAXm7KI2v1QWT4FTZOWMArAk1+agN7qPUTyMMdsgiP4UE+dVfSGLhPuD3 /H3+dfqeynizA24jLFofwMGwvf9cJpILbIPw4zGqVuwl9r68BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBd21HP1iEtFAw/DM/4yh05VkWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGIyMjM4ZGEtNGJhYy0z YjBiLTg5NjgtYjYzNWMzZDk4YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2qsyVhdW62TRnlVDe2vziA1azZnb8f+WrmXl+Ld7w7rD6sq4Goypv4 pCCh+cIHJ+5xo+3WBowHLwAAltocf3kXK9B9oleOQAuGPtHQQGTgcGQFvamQvWPg afBQJL3AjajItsp0e7YmlTS1lOHprtyc5qJlKsV54a2sXLYGQ8ZrthJKY2SNglYu 71/mx9rkzXK9c0L52i3gEr0gHcMR6sFf2OYVeRo4etovikNRRvoiQ9lbIOY3NqxI 3Di0ClQmoC9nNVYxsQkDXy83MqQ7fQZM2Qj7ju9LTjS+r0p41+2hDQF8vQZJ3grH N1SzAX/5Lf9T9FK8YjQffN7vDV1mkrA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:47 2025 by rpki-client