$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: 7gu4hMGmIeNF8aHjGkBjGzAGS9Tf/fOlo0rTOC5JrTQ= Subject key identifier: F3:A0:69:DE:5D:D9:4E:E1:C5:8A:7B:DD:57:E3:A3:AB:CB:B4:40:0F Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584ADA9BCCC0AA40C11AB65A4980 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cc:c0:aa:40:c1:1a:b6:5a:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=3d543cdc-9f92-4e37-aa84-dd374ccb3275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:e8:c9:51:9b:db:4c:b5:45:bb:fa:fa:c3: f9:8f:20:14:d3:d3:61:0b:48:b2:55:58:32:b9:aa: 67:33:51:dd:01:14:4d:ea:bc:90:c6:e3:24:8a:87: 59:e6:6e:3c:a9:27:90:bf:2f:af:dc:82:f2:26:9b: f1:98:e8:1e:b0:4d:d3:84:75:5b:16:86:b5:1f:63: 28:76:52:87:5b:0f:f7:31:95:2f:4c:4a:d1:4d:0b: 2d:6d:3f:5e:ea:8e:cd:d8:54:f7:69:d0:da:01:db: 2c:43:2a:b0:2a:f1:40:98:6c:ac:3f:58:6e:ca:63: d8:16:af:a3:46:41:d2:98:4f:66:b4:0f:fa:76:f8: e4:42:89:77:10:7a:d0:40:db:85:ec:32:48:53:0d: 3c:ec:de:f1:eb:09:67:78:de:7b:44:df:31:80:04: 70:56:85:4f:1e:01:12:de:80:3f:34:70:d2:3e:e5: 08:96:61:87:21:93:7e:b8:61:c7:d1:7e:1d:98:f4: 32:0a:de:fe:17:df:bc:a4:5b:c8:82:ac:72:f7:64: 96:e6:df:88:85:d4:ab:c1:5d:79:60:df:d9:50:a9: 06:c7:aa:7c:96:79:3e:23:9e:20:d8:02:36:50:ce: ab:23:47:6f:2b:b6:df:79:54:ce:ed:1f:50:0b:69: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A0:69:DE:5D:D9:4E:E1:C5:8A:7B:DD:57:E3:A3:AB:CB:B4:40:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7e:4d:78:75:32:7d:65:83:eb:2a:fa:11:0d:6a:56:b2:a8: bd:67:0e:09:8e:ee:b4:fb:e3:61:12:a7:48:7e:c2:1b:1e:90: c1:e0:bf:32:ad:84:67:b6:e0:dd:c9:3a:35:4c:8c:d7:49:6a: 72:76:b0:d3:b6:b3:61:31:e9:d5:36:f5:f9:1a:a4:38:af:cf: 24:6a:36:4e:dc:49:1f:5a:27:25:2b:a8:3c:07:38:d7:62:bc: 8c:11:78:2d:c5:3d:ea:f4:d8:53:3f:db:a3:31:b6:79:f6:4b: 60:f7:6e:20:83:e6:33:14:2a:26:5a:a8:23:2d:f9:9d:ea:d7: bc:15:0a:2f:20:d9:3f:68:2b:98:31:74:94:7f:ee:79:1b:15: c1:54:5d:cb:3b:e9:18:e1:a8:71:9d:79:c7:4e:ad:b2:6e:d4: bd:b6:2f:b6:da:a9:8f:ac:22:ed:4c:2c:a8:80:e9:8a:e0:bb: 28:20:b9:e6:2b:ab:20:e9:3b:a2:70:93:bb:da:2e:41:90:8e: 36:f7:b4:76:33:e0:47:f2:3e:2c:23:fd:59:c1:8a:60:6f:36: 89:5e:42:dc:72:16:ae:e3:00:80:bf:af:13:bf:4b:8d:49:ad: 44:de:02:f5:99:5b:16:2e:53:4d:15:04:97:01:14:c2:3e:43: 20:47:f7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8zAqkDBGrZaSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk M2Q1NDNjZGMtOWY5Mi00ZTM3LWFhODQtZGQzNzRjY2IzMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRnoyVGb20y1Rbv6+sP5jyAU09NhC0iyVVgy uapnM1HdARRN6ryQxuMkiodZ5m48qSeQvy+v3ILyJpvxmOgesE3ThHVbFoa1H2Mo dlKHWw/3MZUvTErRTQstbT9e6o7N2FT3adDaAdssQyqwKvFAmGysP1huymPYFq+j RkHSmE9mtA/6dvjkQol3EHrQQNuF7DJIUw087N7x6wlneN57RN8xgARwVoVPHgES 3oA/NHDSPuUIlmGHIZN+uGHH0X4dmPQyCt7+F9+8pFvIgqxy92SW5t+IhdSrwV15 YN/ZUKkGx6p8lnk+I54g2AI2UM6rI0dvK7bfeVTO7R9QC2l7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOgad5d2U7hxYp73Vfjo6vLtEAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt+TXh1Mn1lg+sq+hENalayqL1nDgmO7rT742ESp0h+whsekMHgvzKt hGe24N3JOjVMjNdJanJ2sNO2s2Ex6dU29fkapDivzyRqNk7cSR9aJyUrqDwHONdi vIwReC3FPer02FM/26Mxtnn2S2D3biCD5jMUKiZaqCMt+Z3q17wVCi8g2T9oK5gx dJR/7nkbFcFUXcs76RjhqHGdecdOrbJu1L22L7baqY+sIu1MLKiA6YrguyggueYr qyDpO6Jwk7vaLkGQjjb3tHYz4EfyPiwj/VnBimBvNoleQtxyFq7jAIC/rxO/S41J rUTeAvWZWxYuU00VBJcBFMI+QyBH9+0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:55 2025 by rpki-client