$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa File: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (raw, json) Hash identifier: tpwIHAPeP6VO01vStT1MXeARsWZrICbXBqQ+6206mSI= Subject key identifier: EE:D0:1B:CE:9F:8C:3B:A6:DE:CF:2B:CC:0B:97:4C:A8:B6:38:DF:A2 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584AE4610E5206388B1186498900 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:52:06:38:8b:11:86:49:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=742828d9-6973-4342-9267-70963e3b9e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:c5:e5:a5:18:d1:88:0f:c4:12:d2:0f:24: fa:4b:07:4b:f3:e8:e2:f8:4f:5f:f3:23:99:41:f5: b2:1b:38:a1:52:a6:93:e7:98:5a:90:08:d2:8c:16: 39:dc:c0:17:16:31:87:37:8e:4a:de:8c:84:f7:e5: 7d:88:4b:cc:93:69:0c:e7:60:da:cd:8f:d8:52:2a: 55:bc:20:09:d9:7c:6a:10:fc:a9:5e:3d:f9:e5:e7: 6e:7b:31:df:32:dd:f7:98:35:0a:66:72:c7:fd:f5: d2:f1:ed:67:e4:0a:12:09:5b:df:1a:d5:db:62:25: 9d:9b:fd:50:bd:d4:87:9c:3f:b1:7f:3f:ad:2f:f7: 6d:be:80:24:1b:14:a2:d2:78:28:5e:3f:4b:b0:f1: e5:eb:29:2e:6f:54:c9:51:31:e4:c6:5a:fa:e7:0f: b1:ba:bf:9e:f2:d5:f9:4a:6e:7c:1c:b7:94:06:a6: 14:94:c1:26:ce:36:2b:39:87:6d:76:a8:fc:cd:9b: 27:89:f6:92:67:db:a5:be:b1:f6:c7:96:ac:42:0d: 76:2c:98:9f:26:2b:e1:2b:2e:6a:6c:72:a8:b0:f5: 81:05:0b:ae:d5:d7:7e:20:7d:dc:0f:08:79:77:23: 95:38:f0:dc:ae:b2:63:0a:f1:e0:00:28:96:3d:bc: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:1B:CE:9F:8C:3B:A6:DE:CF:2B:CC:0B:97:4C:A8:B6:38:DF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:60:b2:38:73:fd:b4:8d:13:d1:24:7d:4d:4d:c9:6a:f9:ab: c2:c8:17:54:9e:29:96:4d:23:4a:7c:1f:85:5c:ca:ef:4a:81: a9:1d:de:10:6d:86:2e:eb:ea:3d:93:f2:2d:1a:17:20:35:14: 66:4b:cf:00:60:a5:0f:d2:1d:7e:93:87:0f:74:5e:ce:2f:e4: db:0f:93:6b:ef:66:65:3c:8f:62:d9:3e:5d:57:8c:01:00:f0: 94:35:fd:24:7c:4b:77:cd:7d:81:36:f1:e6:99:26:9a:d5:44: 44:92:e5:d9:df:de:b5:6c:a3:35:c6:e8:bb:d1:fb:ac:ce:c4: 83:7d:d8:20:be:0a:f7:48:74:8c:81:8e:c1:05:5b:0c:0e:9d: d3:e7:e7:50:89:b9:29:d1:77:5a:3d:4d:48:fa:81:a4:9d:8e: 5f:c7:b7:f7:4f:85:a0:16:33:cf:1e:21:c3:bd:94:cd:41:44: c0:98:58:96:b6:9e:2a:4c:bf:85:17:98:b9:66:87:bc:73:76: 4c:b3:46:ae:a8:e1:52:60:e0:69:d2:c6:5f:5b:f2:08:84:12: 81:a6:e6:34:23:82:a4:48:9b:d1:95:a1:b5:1c:86:57:43:a4: c7:7a:36:90:23:9c:17:6b:05:30:24:36:9d:73:16:51:f7:49: 5a:ca:aa:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ5SBjiLEYZJiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzQyODI4ZDktNjk3My00MzQyLTkyNjctNzA5NjNlM2I5ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr/F5aUY0YgPxBLSDyT6SwdL8+ji+E9f8yOZ QfWyGzihUqaT55hakAjSjBY53MAXFjGHN45K3oyE9+V9iEvMk2kM52DazY/YUipV vCAJ2XxqEPypXj355eduezHfMt33mDUKZnLH/fXS8e1n5AoSCVvfGtXbYiWdm/1Q vdSHnD+xfz+tL/dtvoAkGxSi0ngoXj9LsPHl6ykub1TJUTHkxlr65w+xur+e8tX5 Sm58HLeUBqYUlMEmzjYrOYdtdqj8zZsnifaSZ9ulvrH2x5asQg12LJifJivhKy5q bHKosPWBBQuu1dd+IH3cDwh5dyOVOPDcrrJjCvHgACiWPbzTUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7QG86fjDum3s8rzAuXTKi2ON+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvZGI2OGVmODYtOTQ3NS0z Y2IwLWI1NGUtZGU2N2M1MWExZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9gsjhz/bSNE9EkfU1NyWr5q8LIF1SeKZZNI0p8H4Vcyu9Kgakd3hBt hi7r6j2T8i0aFyA1FGZLzwBgpQ/SHX6Thw90Xs4v5NsPk2vvZmU8j2LZPl1XjAEA 8JQ1/SR8S3fNfYE28eaZJprVRESS5dnf3rVsozXG6LvR+6zOxIN92CC+CvdIdIyB jsEFWwwOndPn51CJuSnRd1o9TUj6gaSdjl/Ht/dPhaAWM88eIcO9lM1BRMCYWJa2 nipMv4UXmLlmh7xzdkyzRq6o4VJg4GnSxl9b8giEEoGm5jQjgqRIm9GVobUchldD pMd6NpAjnBdrBTAkNp1zFlH3SVrKqgI= -----END CERTIFICATE-----Generated at Sat Aug 23 06:51:38 2025 by rpki-client