$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa File: 8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa (raw, json) Hash identifier: FWf1o3PDferGe8XebT1DFC7dQ1ktEMGBtZMQsXta4PU= Subject key identifier: 09:4E:9B:55:CB:85:A8:56:2B:43:0E:2A:27:26:AE:85:EF:2E:9D:44 Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F4328584AE461198E676F11303F553200 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 13737 IP address blocks: 23.172.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:19:8e:67:6f:11:30:3f:55:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=7d4542d2-996d-41d6-88c9-a7e15c93c961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:a7:d1:af:05:d1:31:e4:a5:2a:51:ef:e9: 8d:0d:43:81:82:98:bc:79:6a:ae:51:7a:87:a8:77: 2e:f1:2a:78:66:22:16:b5:01:dd:82:c8:a3:88:b2: 2f:21:bd:ca:af:de:d6:e1:a5:73:bb:11:25:6a:db: 1a:02:ff:e6:ed:c6:4d:1f:48:42:df:ee:c2:38:4f: d1:ef:39:7d:a3:28:80:75:39:bf:c3:2a:16:1c:7b: 44:b5:f2:db:0c:74:96:af:c2:9d:bf:b9:20:01:0d: 2b:85:d6:75:3d:ff:a7:35:e1:92:32:e0:07:b2:7e: 01:a1:fb:37:f2:2b:90:72:14:ee:1b:c2:93:9a:c1: 53:aa:7b:99:22:40:28:3e:a7:4b:6e:ba:be:fe:bc: f0:e2:c7:ef:d3:58:22:f5:44:3f:83:b1:14:3c:6e: a3:5f:6a:08:c0:73:0f:d3:1c:4b:23:22:94:5a:10: 4a:f1:a4:a5:1d:db:35:d0:51:0c:bb:4d:e2:9f:35: 9d:4d:f4:d6:5d:11:17:18:0b:e8:a8:cd:1a:7d:65: 45:1e:04:db:32:9c:a6:17:37:90:2c:af:ce:d9:58: 9b:14:f9:63:4a:55:a3:22:88:08:af:1d:83:07:e7: 51:6e:35:b8:c7:04:47:39:c8:70:e0:b9:1e:14:f2: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:9B:55:CB:85:A8:56:2B:43:0E:2A:27:26:AE:85:EF:2E:9D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv4: 23.172.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:39:a7:ec:82:ca:c5:3d:23:a6:12:ef:27:90:e4:f8:b2:da: 37:43:69:35:8b:69:10:15:cd:44:6e:58:57:70:e5:99:31:4a: 85:88:49:31:43:67:0c:0c:45:01:6d:e4:63:14:1d:94:71:20: 6b:16:31:d8:50:a9:da:31:4b:1d:bb:42:02:c9:52:83:82:fc: 6a:d8:fd:80:b6:b1:67:1e:13:e8:00:d7:77:17:b7:32:46:ac: ca:a3:ab:49:b5:2b:0a:96:1e:50:71:2a:48:5e:8e:c7:05:8f: 96:ce:c2:d3:07:16:52:92:45:46:0d:08:9c:e5:71:cb:9f:a9: c1:bc:36:74:de:85:41:85:4e:13:b4:f3:11:ed:2d:6a:c1:13: 53:a5:61:b6:fb:22:50:e9:d8:16:6a:4a:4b:0e:b8:f6:0a:ef: 4d:62:90:c7:b7:7c:86:19:72:ad:20:d2:df:64:31:d7:72:16: 82:41:75:72:a8:91:50:3f:ac:d8:1c:e4:94:a9:97:fa:ce:4c: f5:0d:db:07:07:ef:7f:bb:01:6a:cc:e2:6b:38:30:90:4e:3d: 87:3d:00:9f:d3:09:23:b6:a5:5b:b1:72:fd:c8:ea:35:d4:85: 54:e3:91:5a:79:ca:7a:78:2c:97:1c:52:48:e4:ae:81:bb:39: 8d:7a:86:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRmOZ28RMD9VMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk N2Q0NTQyZDItOTk2ZC00MWQ2LTg4YzktYTdlMTVjOTNjOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMOn0a8F0THkpSpR7+mNDUOBgpi8eWquUXqH qHcu8Sp4ZiIWtQHdgsijiLIvIb3Kr97W4aVzuxElatsaAv/m7cZNH0hC3+7COE/R 7zl9oyiAdTm/wyoWHHtEtfLbDHSWr8Kdv7kgAQ0rhdZ1Pf+nNeGSMuAHsn4Bofs3 8iuQchTuG8KTmsFTqnuZIkAoPqdLbrq+/rzw4sfv01gi9UQ/g7EUPG6jX2oIwHMP 0xxLIyKUWhBK8aSlHds10FEMu03inzWdTfTWXREXGAvoqM0afWVFHgTbMpymFzeQ LK/O2VibFPljSlWjIogIrx2DB+dRbjW4xwRHOchw4LkeFPJh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlOm1XLhahWK0MOKicmroXvLp1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvOGI0ZmVhMWMtOGU3MC0z YWM4LTg0NDItZWM0NDEzZTg2ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg5p+yCysU9I6YS7yeQ5Piy2jdDaTWLaRAVzURuWFdw5ZkxSoWISTFD ZwwMRQFt5GMUHZRxIGsWMdhQqdoxSx27QgLJUoOC/GrY/YC2sWceE+gA13cXtzJG rMqjq0m1KwqWHlBxKkhejscFj5bOwtMHFlKSRUYNCJzlccufqcG8NnTehUGFThO0 8xHtLWrBE1OlYbb7IlDp2BZqSksOuPYK701ikMe3fIYZcq0g0t9kMddyFoJBdXKo kVA/rNgc5JSpl/rOTPUN2wcH73+7AWrM4ms4MJBOPYc9AJ/TCSO2pVuxcv3I6jXU hVTjkVp5ynp4LJccUkjkroG7OY16hkE= -----END CERTIFICATE-----Generated at Sun Aug 24 01:31:44 2025 by rpki-client