$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json) Hash identifier: 1CvMmaTxt+vzgaL3M3nBa7sGOC06goU6D95nJh0i6vU= Subject key identifier: 48:B9:1A:EB:13:45:FA:CE:D0:30:2D:77:02:4E:AD:00:6B:A8:6A:1C Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F4328584AF256800B5C835CB00AE92D80 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 30690 IP address blocks: 23.171.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:80:0b:5c:83:5c:b0:0a:e9:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=04fe63e6-6741-48a5-b91d-4b935f6592ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:0c:8c:c3:da:f6:27:fd:d0:fb:ca:96:73: e1:a0:1f:35:25:47:a2:9c:d0:6c:b9:61:3f:e0:63: 15:74:d7:4c:8d:da:ea:fa:a1:58:67:5e:37:48:55: 7e:99:ba:bc:52:9f:99:df:76:cc:22:8a:cd:13:e2: e4:25:21:a3:81:47:b2:c8:7f:af:45:d5:8d:fc:57: 5d:ba:65:0f:39:5f:eb:f1:89:b0:88:cb:81:c8:33: 24:1e:10:19:a2:5a:1b:cc:41:25:d2:f9:5f:62:d0: 15:f0:9f:dd:05:db:87:f7:02:df:fb:94:72:9b:5b: c0:3b:22:95:33:a5:99:d6:b7:83:05:7c:e9:7d:70: 98:90:09:d3:24:2a:9d:25:f3:cc:14:83:b0:cc:78: 0d:97:cd:ab:b6:33:3f:61:20:d5:46:e0:6f:b5:98: d8:85:a6:3c:e1:95:9f:23:8d:98:00:29:a4:3e:84: dd:e7:bf:2d:38:67:a9:9b:3e:4d:6c:23:ff:3e:09: 25:89:9a:9b:de:bf:49:b7:8d:79:78:92:aa:c9:3c: ee:9b:25:05:91:30:eb:f8:8b:ee:cf:83:f6:4e:42: d9:0d:bf:d8:8c:a4:4b:09:ac:c1:77:80:b0:95:61: 31:69:11:37:75:3e:73:86:ab:1e:75:58:d3:ce:9a: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:1A:EB:13:45:FA:CE:D0:30:2D:77:02:4E:AD:00:6B:A8:6A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: 23.171.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2a:75:c0:56:f8:0d:12:c0:1d:53:1c:5b:19:b6:a3:f3:dc: 77:cc:4a:ab:66:20:f9:55:23:80:3b:14:98:08:65:a2:e8:6b: 7e:6a:92:32:28:28:f2:b4:af:f8:71:36:d9:10:00:a6:c1:02: 28:81:88:3c:f6:c9:c7:eb:fa:71:99:43:ba:39:bb:25:73:aa: 22:cf:20:0c:10:ba:e9:fb:f3:2a:52:fd:97:c4:67:45:51:dd: f8:77:7b:7d:cb:9c:27:d2:e3:9e:2a:2b:7a:91:9a:73:04:9b: 2a:41:70:f2:ed:7d:f6:2d:b4:bb:f9:ab:1e:18:cf:64:c1:98: a2:2b:b1:7b:87:36:75:d1:7c:61:eb:c3:cd:41:43:e2:77:9d: ed:f0:43:d7:d3:10:9f:6e:dd:c7:88:58:02:60:67:5b:81:1b: b4:01:e7:8a:6f:db:22:80:03:0f:a3:69:0c:01:b3:a3:80:20: 8e:93:14:a6:3b:2d:0a:20:de:30:58:fb:c7:b9:4e:55:1f:eb: 8e:8b:af:de:58:4e:f5:aa:30:3e:a9:b7:82:30:66:89:ac:18: 1a:98:1d:7d:8d:12:0b:e3:a7:eb:3e:39:01:8a:f6:56:b6:96: 84:3b:b7:f4:0c:62:06:0e:54:57:29:2e:92:f8:0c:ba:61:82: 13:01:09:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoALXINcsArpLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MDRmZTYzZTYtNjc0MS00OGE1LWI5MWQtNGI5MzVmNjU5MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tYMjMPa9if90PvKlnPhoB81JUeinNBsuWE/ 4GMVdNdMjdrq+qFYZ143SFV+mbq8Up+Z33bMIorNE+LkJSGjgUeyyH+vRdWN/Fdd umUPOV/r8YmwiMuByDMkHhAZolobzEEl0vlfYtAV8J/dBduH9wLf+5Rym1vAOyKV M6WZ1reDBXzpfXCYkAnTJCqdJfPMFIOwzHgNl82rtjM/YSDVRuBvtZjYhaY84ZWf I42YACmkPoTd578tOGepmz5NbCP/PgkliZqb3r9Jt415eJKqyTzumyUFkTDr+Ivu z4P2TkLZDb/YjKRLCazBd4CwlWExaRE3dT5zhqsedVjTzpqL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi5GusTRfrO0DAtdwJOrQBrqGocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvZDY4YjE3NDctODc2Ni0z MGM3LTk3NjEtMDM2OGYzMTA2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoqdcBW+A0SwB1THFsZtqPz3HfMSqtmIPlVI4A7FJgIZaLoa35qkjIo KPK0r/hxNtkQAKbBAiiBiDz2ycfr+nGZQ7o5uyVzqiLPIAwQuun78ypS/ZfEZ0VR 3fh3e33LnCfS454qK3qRmnMEmypBcPLtffYttLv5qx4Yz2TBmKIrsXuHNnXRfGHr w81BQ+J3ne3wQ9fTEJ9u3ceIWAJgZ1uBG7QB54pv2yKAAw+jaQwBs6OAII6TFKY7 LQog3jBY+8e5TlUf646Lr95YTvWqMD6pt4IwZomsGBqYHX2NEgvjp+s+OQGK9la2 loQ7t/QMYgYOVFcpLpL4DLphghMBCa8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:28 2025 by rpki-client