$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: Yrb29edGHECK/Nyu95mBbhm/PTN2GjD/g+rc+aE3clE= Subject key identifier: 36:B8:22:3B:D8:A1:AA:64:C4:AF:4C:C3:50:0F:CF:11:F1:8A:24:53 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584AEE2688A3A6F6FB971494D100 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:88:a3:a6:f6:fb:97:14:94:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6f75f88a-bae6-4ab6-87b4-71641a74f9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:5d:61:cb:7a:af:e1:25:f7:68:01:0b:f0: 34:48:3a:a5:85:0b:04:98:44:54:b4:45:1b:28:c5: c8:1c:99:7a:49:11:39:fe:36:e7:44:b0:2e:55:c0: 9e:2f:78:e8:38:1a:e3:ba:f4:59:8b:65:bb:b2:30: 19:99:5e:bc:34:d7:ca:b0:f7:3d:8a:d6:f9:65:9b: 30:e9:ae:b6:6c:33:0b:aa:39:0e:8d:ed:23:79:27: 06:a1:65:7f:6d:1b:27:e2:8a:d9:8c:19:34:4f:e8: 1a:2e:23:23:aa:fa:1f:2b:31:4b:2d:7c:13:5c:24: 28:e5:63:2c:d7:13:94:49:fc:f3:8c:f1:8c:b0:da: f0:73:9f:67:98:75:59:03:3d:39:c2:6d:5a:c9:94: 08:26:b3:0c:cb:5d:19:bd:a5:25:74:ca:44:81:19: c1:27:48:1a:e5:7f:21:8e:0e:75:19:e7:ca:31:f3: 72:ef:85:69:4f:fb:8a:e7:01:5b:c1:12:5a:90:a1: 85:58:d0:d5:0f:6d:cd:24:e9:14:80:1f:25:14:45: 9a:9a:3e:e0:10:1b:2b:a6:fd:a7:3b:6b:7a:16:49: 8a:c5:54:ff:c3:52:4a:2f:60:78:00:b3:d5:af:44: a3:33:fc:93:b9:22:63:2d:f6:4c:5d:cb:37:8a:be: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:22:3B:D8:A1:AA:64:C4:AF:4C:C3:50:0F:CF:11:F1:8A:24:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:53:cc:0a:6d:b3:66:a3:5c:cd:fe:d7:1a:64:66:46:cb:ca: 53:20:e6:b3:ba:3b:a7:7f:cd:e0:8b:24:3d:72:e6:ea:2a:6e: c7:e8:1f:4e:01:52:90:82:5e:c7:1a:59:82:bf:7b:ea:99:bd: c3:12:20:ef:8c:1d:c9:71:52:ac:15:94:c6:a2:a4:44:d8:80: 67:06:09:3a:ac:67:9d:89:0f:57:e3:1c:92:8f:97:ce:ad:37: 07:cf:de:02:19:c0:0f:42:c1:73:3c:96:f1:1b:59:ba:d0:3f: 12:79:f3:63:df:b2:0b:f8:33:a1:42:8f:dd:e6:57:76:e0:e3: 57:92:6c:5f:26:a8:57:35:ab:d7:98:fe:d5:42:c8:9c:23:bc: 01:ca:5b:d7:25:2f:d6:e7:88:02:5b:aa:3a:c9:b4:62:59:25: 59:2f:29:34:16:95:b2:27:54:ea:c9:82:8f:0d:05:a3:ab:99: ec:26:d2:b2:82:67:a2:fb:6d:96:04:da:ec:52:36:81:a3:1b: 8c:d5:72:d7:24:98:bf:83:d9:f6:60:fd:e7:5f:3d:85:88:c7: f8:88:5b:17:2f:b5:f7:12:59:cf:a8:c2:62:7c:f4:c6:c5:94: c4:0e:59:12:d6:7d:73:6b:3b:23:58:9d:f9:46:26:99:fd:83: 3c:4c:ed:a1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEruJoijpvb7lxSU0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmY3NWY4OGEtYmFlNi00YWI2LTg3YjQtNzE2NDFhNzRmOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZFdYct6r+El92gBC/A0SDqlhQsEmERUtEUb KMXIHJl6SRE5/jbnRLAuVcCeL3joOBrjuvRZi2W7sjAZmV68NNfKsPc9itb5ZZsw 6a62bDMLqjkOje0jeScGoWV/bRsn4orZjBk0T+gaLiMjqvofKzFLLXwTXCQo5WMs 1xOUSfzzjPGMsNrwc59nmHVZAz05wm1ayZQIJrMMy10ZvaUldMpEgRnBJ0ga5X8h jg51GefKMfNy74VpT/uK5wFbwRJakKGFWNDVD23NJOkUgB8lFEWamj7gEBsrpv2n O2t6FkmKxVT/w1JKL2B4ALPVr0SjM/yTuSJjLfZMXcs3ir5KiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDa4IjvYoapkxK9Mw1APzxHxiiRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRU8wKbbNmo1zN/tcaZGZGy8pTIOazujun f83giyQ9cubqKm7H6B9OAVKQgl7HGlmCv3vqmb3DEiDvjB3JcVKsFZTGoqRE2IBn Bgk6rGediQ9X4xySj5fOrTcHz94CGcAPQsFzPJbxG1m60D8SefNj37IL+DOhQo/d 5ld24ONXkmxfJqhXNavXmP7VQsicI7wBylvXJS/W54gCW6o6ybRiWSVZLyk0FpWy J1TqyYKPDQWjq5nsJtKygmei+22WBNrsUjaBoxuM1XLXJJi/g9n2YP3nXz2FiMf4 iFsXL7X3ElnPqMJifPTGxZTEDlkS1n1zazsjWJ35RiaZ/YM8TO2h -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:20 2025 by rpki-client