$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa File: 87fba722-5dc2-3c90-8573-bed0796d43f1.roa (raw, json) Hash identifier: 10FdFb9MJRaYnR08HCkfVWtxft9jPckCLKErQptHM98= Subject key identifier: 4A:18:7C:50:13:48:09:51:F6:41:5D:DC:50:99:A0:C6:66:22:F9:F6 Certificate issuer: /CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Certificate serial: 010D0C9F4328584AD23BD2F5EB31CC46FEBF4300 Authority key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 399478 IP address blocks: 23.176.240.0/24 maxlen: 24 2620:95:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d2:f5:eb:31:cc:46:fe:bf:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=aa02bf42-b788-4097-a668-877f4a84c47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:63:a5:fb:e8:66:bf:9e:de:b8:c8:69:98: a4:9b:f8:a7:6a:03:8e:2e:d9:94:15:b8:c6:3f:d8: 6b:0e:1c:3c:ff:25:6d:77:eb:ef:8a:cc:88:e5:da: 5b:10:45:d5:df:db:4f:5c:70:63:87:47:b6:d6:66: c9:23:45:ce:3e:c2:0a:12:84:bd:d0:5d:ed:dd:5a: e0:14:90:02:d3:e5:5d:9e:cd:1f:d8:a0:80:8b:59: 3a:b8:d5:47:7a:cf:c8:69:77:c2:44:96:32:f4:63: 13:86:b5:b2:97:c8:3f:6b:c4:ec:51:13:02:a2:9a: 9a:39:fa:e8:7b:f3:a2:aa:0a:de:41:6d:44:45:f3: 4f:09:35:9f:17:1d:af:30:f9:89:d8:d1:58:61:90: fb:bb:c3:ae:a3:9a:75:f5:c0:84:89:7d:0f:b0:83: f1:91:ce:c1:7b:cf:a2:17:8b:f4:e7:39:3c:30:39: be:4e:4d:5e:ee:07:91:1f:69:81:7b:bc:1d:8e:b1: 4f:ca:82:df:f0:e8:7b:c5:d6:a2:fb:19:3c:00:e5: 96:1b:dc:06:01:43:35:dc:20:2c:79:b0:bc:a3:45: e5:78:f6:9b:dc:f2:46:3b:fa:31:b0:d9:79:1f:13: e4:a5:7a:b9:82:2f:9e:6c:fb:40:89:d5:0c:41:67: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:7C:50:13:48:09:51:F6:41:5D:DC:50:99:A0:C6:66:22:F9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl X509v3 Authority Key Identifier: keyid:88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer sbgp-ipAddrBlock: critical IPv4: 23.176.240.0/24 IPv6: 2620:95:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:41:66:9c:d6:6a:b3:f0:c6:24:74:78:fb:fc:c7:a2:2a:0f: cb:cc:1f:3f:d4:93:0b:42:5b:50:a4:fd:3b:41:8b:12:7c:f2: 77:ca:c0:4a:95:e0:74:9b:7b:f2:84:e1:65:ec:3e:8c:5f:d7: 6e:f3:ad:42:54:b7:ff:b8:26:5c:d1:df:f1:99:1e:6c:ee:73: 80:15:b7:21:61:21:51:21:38:76:ea:ed:d2:51:4a:73:65:67: f7:5b:5c:0e:27:b9:30:bc:44:89:43:bc:7e:38:fd:14:55:7e: 47:e1:29:3f:b9:9e:8f:2e:e2:b9:1f:a4:73:11:f4:fb:d7:4c: f0:2a:62:48:d2:85:94:09:97:b9:45:97:d0:a0:86:ec:e9:27: 28:c1:3a:99:32:a4:b7:e4:a8:a8:ef:c4:f9:39:77:e0:6b:53: 1c:fc:af:72:fe:97:9a:79:72:dd:d4:a9:79:a5:d2:8b:b0:17: 80:78:ef:2c:50:51:60:c9:38:95:b4:9e:1c:72:c2:03:f3:92: cc:ad:af:be:5e:0a:5e:ac:16:f1:b5:f2:e9:f6:1b:5e:23:f7: c5:55:29:e8:75:c0:c2:17:0a:07:82:0f:d4:65:a3:d5:d4:ac: 6e:8e:c0:bc:94:e4:55:7d:6f:ad:f0:ad:b0:29:5a:b2:c3:d8: 34:98:af:65 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErSO9L16zHMRv6/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwNDA3MTAtN2NjZi00Yzg1LTk4YzctOGQ2MjQ2ZDE0 NmY1MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWEwMmJmNDItYjc4OC00MDk3LWE2NjgtODc3ZjRhODRjNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/1jpfvoZr+e3rjIaZikm/inagOOLtmUFbjG P9hrDhw8/yVtd+vvisyI5dpbEEXV39tPXHBjh0e21mbJI0XOPsIKEoS90F3t3Vrg FJAC0+Vdns0f2KCAi1k6uNVHes/IaXfCRJYy9GMThrWyl8g/a8TsURMCopqaOfro e/OiqgreQW1ERfNPCTWfFx2vMPmJ2NFYYZD7u8Ouo5p19cCEiX0PsIPxkc7Be8+i F4v05zk8MDm+Tk1e7geRH2mBe7wdjrFPyoLf8Oh7xdai+xk8AOWWG9wGAUM13CAs ebC8o0XlePab3PJGO/oxsNl5HxPkpXq5gi+ebPtAidUMQWd5OwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEoYfFATSAlR9kFd3FCZoMZmIvn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMDA0 MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZkMTQ2ZjUvODdmYmE3MjItNWRjMi0z YzkwLTg1NzMtYmVkMDc5NmQ0M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzAwNDA3MTAtN2NjZi00Yzg1LTk4 YzctOGQ2MjQ2ZDE0NmY1LzMwMDQwNzEwLTdjY2YtNGM4NS05OGM3LThkNjI0NmQx NDZmNS5jcmwwHwYDVR0jBBgwFoAUiElsmgZB17Iubf/sts0kW7e7CjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYy NDZkMTQ2ZjUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7DwMA8E AgACMAkDBwAmIACVoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzUFmnNZqs/DGJHR4+/zHoioPy8wfP9ST C0JbUKT9O0GLEnzyd8rASpXgdJt78oThZew+jF/XbvOtQlS3/7gmXNHf8ZkebO5z gBW3IWEhUSE4durt0lFKc2Vn91tcDie5MLxEiUO8fjj9FFV+R+EpP7mejy7iuR+k cxH0+9dM8CpiSNKFlAmXuUWX0KCG7OknKME6mTKkt+SoqO/E+Tl34GtTHPyvcv6X mnly3dSpeaXSi7AXgHjvLFBRYMk4lbSeHHLCA/OSzK2vvl4KXqwW8bXy6fYbXiP3 xVUp6HXAwhcKB4IP1GWj1dSsbo7AvJTkVX1vrfCtsClassPYNJivZQ== -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:43 2025 by rpki-client