$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa File: ff7898c3-7996-33eb-8215-9ca64f698bd9.roa (raw, json) Hash identifier: BxMdTrp53q8hnCeED7WpjTktBMCEKRaYKBN3pxr9/k8= Subject key identifier: 9E:3C:88:0D:BD:05:62:02:8E:1D:FD:8E:B7:1C:F1:48:EA:FC:E9:18 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AC8763E2C8AF964D23D0DBEC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3e:2c:8a:f9:64:d2:3d:0d:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=f799cbde-91af-492c-832f-dc4351e672df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:04:bd:63:8b:8b:95:3b:0e:57:09:5b:7a: d1:ac:47:4b:1b:80:0e:9e:1d:cf:7c:4a:71:7f:5b: a6:2a:72:81:84:b7:60:c1:1e:56:89:ac:06:e3:81: a6:d9:4e:97:bb:06:b3:27:d8:c1:1b:1b:f1:7c:99: de:d3:3b:92:d2:48:43:4e:95:68:d1:7e:9d:dc:30: 7e:49:52:d8:0c:25:41:98:d5:42:74:c0:51:6b:ce: a1:06:57:74:a1:e3:75:93:1d:77:87:e5:98:23:fc: 86:d5:0d:a5:88:27:f2:e7:2d:b0:54:4a:0f:7f:3a: a8:ba:bd:fe:2e:a4:1e:66:30:c7:d2:0c:d0:38:fd: 38:7b:16:e2:ef:c9:b1:65:43:4a:3c:74:b2:4c:70: 53:76:f0:93:07:69:c5:1c:5c:13:09:a3:9b:c1:51: 23:8e:b0:94:7e:4b:0d:db:e2:1c:05:a8:97:3e:08: 52:df:33:01:f2:5a:d1:25:6c:67:7a:6d:d3:dd:aa: 3f:f0:b1:36:98:4a:5c:1e:29:e2:77:97:a5:3c:c9: 38:32:9d:9a:ba:c9:03:15:8a:b8:80:b7:93:ba:2c: 7b:f8:84:e1:b7:c2:f4:41:53:c5:06:02:a1:cc:f2: 79:27:a7:55:89:16:89:01:a5:84:69:38:56:d8:ff: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3C:88:0D:BD:05:62:02:8E:1D:FD:8E:B7:1C:F1:48:EA:FC:E9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:a8:72:db:bc:6a:47:cf:17:55:4b:fb:18:06:08:9d:62:38: 8a:19:ee:18:7a:eb:c2:8e:cb:92:22:2a:ce:c9:e2:a8:2e:0e: fc:16:11:a9:8b:81:e9:05:fd:48:54:fd:78:cd:6f:cd:11:5c: aa:10:02:5d:83:eb:51:a7:fa:e1:4f:3c:8d:b0:8c:03:55:e1: b0:27:ec:eb:83:e2:b8:aa:d1:bf:11:3b:08:4e:27:4e:eb:85: 08:48:9c:b4:c1:45:dc:e6:11:f1:18:1e:b6:ca:8b:73:f8:d5: 2f:1b:25:5f:d7:b3:6f:b6:0e:cc:3c:de:96:42:9b:f0:ef:44: ab:34:66:8e:98:a2:a4:57:8f:31:bc:38:07:fc:5a:3b:03:15: dc:c4:ce:02:59:f2:cd:a8:25:bc:49:8b:f3:b5:d8:01:36:53: 26:6b:d1:4c:85:51:30:dd:a7:15:d1:0c:88:2a:ce:5e:97:f7: 30:4c:c8:e6:74:2e:21:81:ba:46:7f:1a:6d:5b:63:5b:2d:e7: 5b:56:43:b3:e2:74:5a:a7:67:da:97:1a:8d:42:b0:57:9b:91: 24:10:4c:43:b9:36:6a:89:1e:b2:44:82:04:91:ff:41:c6:34: 7b:db:f4:21:8a:4d:ce:fb:f1:60:2a:11:90:c8:a2:cb:e3:0b: 47:d3:7c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdj4sivlk0j0NvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc5OWNiZGUtOTFhZi00OTJjLTgzMmYtZGM0MzUxZTY3MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcAEvWOLi5U7DlcJW3rRrEdLG4AOnh3PfEpx f1umKnKBhLdgwR5WiawG44Gm2U6XuwazJ9jBGxvxfJne0zuS0khDTpVo0X6d3DB+ SVLYDCVBmNVCdMBRa86hBld0oeN1kx13h+WYI/yG1Q2liCfy5y2wVEoPfzqour3+ LqQeZjDH0gzQOP04exbi78mxZUNKPHSyTHBTdvCTB2nFHFwTCaObwVEjjrCUfksN 2+IcBaiXPghS3zMB8lrRJWxnem3T3ao/8LE2mEpcHinid5elPMk4Mp2auskDFYq4 gLeTuix7+ITht8L0QVPFBgKhzPJ5J6dViRaJAaWEaThW2P+mUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ48iA29BWICjh39jrcc8Ujq/OkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmY3ODk4YzMtNzk5Ni0z M2ViLTgyMTUtOWNhNjRmNjk4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOoctu8akfPF1VL+xgGCJ1iOIoZ7hh668KOy5IiKs7J4qguDvwWEamL gekF/UhU/XjNb80RXKoQAl2D61Gn+uFPPI2wjANV4bAn7OuD4riq0b8ROwhOJ07r hQhInLTBRdzmEfEYHrbKi3P41S8bJV/Xs2+2Dsw83pZCm/DvRKs0Zo6YoqRXjzG8 OAf8WjsDFdzEzgJZ8s2oJbxJi/O12AE2UyZr0UyFUTDdpxXRDIgqzl6X9zBMyOZ0 LiGBukZ/Gm1bY1st51tWQ7PidFqnZ9qXGo1CsFebkSQQTEO5NmqJHrJEggSR/0HG NHvb9CGKTc778WAqEZDIosvjC0fTfMQ= -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:21 2025 by rpki-client