$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa File: fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa (raw, json) Hash identifier: 3mFctbGel6Cj6QAL+D+V5dRB/8bB2kajm8/YeZy0z5o= Subject key identifier: 88:EA:EE:EF:DE:4E:78:BF:B0:E2:39:C5:C9:FC:1C:29:6D:36:7E:0A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ACE0BB0227763753B21C9CEC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 4.42.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:b0:22:77:63:75:3b:21:c9:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=d82bd6cf-7154-4e61-99cc-1c0700b1f198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:72:eb:f4:40:f8:48:74:c0:af:7d:a6:8f: da:18:87:b8:ec:1f:9c:d5:d3:f8:e9:f3:41:cc:55: 15:22:8f:a0:65:a1:9e:34:b3:45:35:fa:c3:67:e0: 8b:41:86:82:fa:55:cb:dd:64:fc:7b:7a:40:58:85: 63:13:7b:6f:85:3e:0c:67:ad:65:f8:90:5d:a1:d9: 5b:06:cc:8a:e6:00:26:1d:b8:22:fc:87:da:f1:fe: e9:05:50:27:68:ce:73:77:31:7b:48:b3:f4:da:2a: 63:a2:e8:ba:08:31:d0:46:45:a4:e2:65:c9:de:f3: 3c:fe:62:25:aa:d6:10:30:68:bd:b1:19:c0:52:e6: d0:41:d4:ad:47:90:f9:08:dd:e2:a0:26:c6:cd:fc: e6:7a:39:40:c6:5a:82:0d:ee:40:c8:b0:df:29:83: d4:5d:54:fc:c9:29:49:50:de:4f:27:3b:b1:8f:47: b3:9b:5a:23:f7:be:dd:80:a8:79:9e:b9:0a:fb:e3: 8c:63:ba:2f:9c:3e:10:a9:95:70:95:b3:83:fb:45: 11:32:f7:08:21:f9:8c:08:8f:1b:a5:92:01:67:d2: cf:cd:b8:51:53:bc:f7:55:c7:da:ed:1c:9a:2a:66: 2d:bf:6d:37:0e:18:5a:a9:0c:2d:92:74:4d:b2:d9: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:EE:EF:DE:4E:78:BF:B0:E2:39:C5:C9:FC:1C:29:6D:36:7E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 4.42.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:dc:d3:67:d0:b0:b1:59:05:38:fe:30:51:a5:32:31:58:12: 29:fe:50:8f:a6:6a:fd:aa:c6:3f:97:96:f9:21:42:10:8f:47: 21:a6:5f:f6:95:ed:11:df:61:f7:29:a6:35:b7:6c:9d:5e:76: 78:1a:5c:92:6f:79:ba:99:2f:5c:f1:b3:4d:3d:94:ae:ef:61: aa:89:90:ba:3a:85:ee:5f:27:58:5f:59:d1:e2:90:64:e0:64: b0:71:8e:3b:9d:96:e1:d6:de:16:e8:18:ca:02:cc:7b:42:f9: f7:cb:02:38:01:28:9c:39:5e:26:77:19:74:8e:69:f3:03:78: d4:b0:4d:18:d6:76:e3:d3:02:a4:5d:77:60:7a:1f:e9:15:2b: 4d:03:68:2c:77:c9:2d:fd:26:99:78:bd:a6:eb:9b:37:59:08: 26:4c:74:83:d1:b9:e0:42:cc:42:33:ed:2a:93:ab:e6:26:af: 2b:e3:94:97:4f:2a:1e:bd:80:0f:99:14:58:0c:53:b1:e3:ef: a5:ef:5a:05:d6:7e:e3:9c:af:5b:d1:12:28:1c:c3:44:91:a9: fe:fa:13:8f:d3:32:87:3d:7b:3b:eb:e0:42:65:22:6c:43:57: 90:ef:eb:a0:ff:23:7f:32:7b:3b:71:63:1d:94:cc:33:aa:03: 64:98:b4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC7Aid2N1OyHJzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZDgyYmQ2Y2YtNzE1NC00ZTYxLTk5Y2MtMWMwNzAwYjFmMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Ny6/RA+Eh0wK99po/aGIe47B+c1dP46fNB zFUVIo+gZaGeNLNFNfrDZ+CLQYaC+lXL3WT8e3pAWIVjE3tvhT4MZ61l+JBdodlb BsyK5gAmHbgi/Ifa8f7pBVAnaM5zdzF7SLP02ipjoui6CDHQRkWk4mXJ3vM8/mIl qtYQMGi9sRnAUubQQdStR5D5CN3ioCbGzfzmejlAxlqCDe5AyLDfKYPUXVT8ySlJ UN5PJzuxj0ezm1oj977dgKh5nrkK++OMY7ovnD4QqZVwlbOD+0URMvcIIfmMCI8b pZIBZ9LPzbhRU7z3Vcfa7RyaKmYtv203DhhaqQwtknRNstkmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjq7u/eTni/sOI5xcn8HCltNn4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmNmNmVhMTYtMDQ4Ny0z ODBlLWFmNmItM2FmZGVjZGU5YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABCrlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/c02fQsLFZBTj+MFGlMjFYEin+UI+mav2qxj+XlvkhQhCPRyGmX/aV 7RHfYfcppjW3bJ1edngaXJJvebqZL1zxs009lK7vYaqJkLo6he5fJ1hfWdHikGTg ZLBxjjudluHW3hboGMoCzHtC+ffLAjgBKJw5XiZ3GXSOafMDeNSwTRjWduPTAqRd d2B6H+kVK00DaCx3yS39Jpl4vabrmzdZCCZMdIPRueBCzEIz7SqTq+YmryvjlJdP Kh69gA+ZFFgMU7Hj76XvWgXWfuOcr1vREigcw0SRqf76E4/TMoc9ezvr4EJlImxD V5Dv66D/I38yeztxYx2UzDOqA2SYtGk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:33 2025 by rpki-client