$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/f0092439-63d5-384f-bbda-d0bd831f7a06.roa File: f0092439-63d5-384f-bbda-d0bd831f7a06.roa (raw, json) Hash identifier: mBjP2nQXcvJcdHddW/u1WY9s0WfvnczRp3evQZG90a0= Subject key identifier: 24:F2:DA:DD:85:1E:4B:B0:73:64:3A:63:85:B9:86:FA:74:0C:72:9E Certificate issuer: /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Certificate serial: 010D0C9F4328584AD3A0F268CBEAC57EB629E3C0 Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/f0092439-63d5-384f-bbda-d0bd831f7a06.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 23.247.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f2:68:cb:ea:c5:7e:b6:29:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=757943ce-cec5-4bc8-9213-65c6ac0646ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:ea:63:a4:64:6b:6e:3a:ec:d1:84:2b:a9: 45:24:9c:a8:07:af:37:81:25:16:0d:64:53:c8:2f: fc:65:bc:cf:44:73:3c:66:08:68:11:15:e4:eb:ab: 27:8e:44:a9:b5:d2:da:26:c1:64:2c:23:cb:84:f3: 8c:3c:f0:d3:62:10:49:8b:98:b3:46:ae:5f:54:6b: 62:ce:fe:6c:61:e8:b8:71:18:6e:c8:69:aa:70:8a: f8:eb:fe:79:46:0d:d5:4f:4e:ef:68:61:73:2e:eb: 25:d4:35:25:54:64:23:4a:e9:65:b9:fd:ce:1e:41: 13:ce:0f:e5:7a:9f:97:0a:77:a9:6d:44:b0:17:7d: cd:63:12:e1:8d:1b:71:4d:bd:1e:90:29:7f:f0:b7: f3:58:1e:e9:e6:74:5c:54:e2:0f:13:39:9b:01:50: 53:23:c1:f3:2a:fe:d5:3f:33:36:99:53:42:2e:3d: f3:80:45:07:fd:e2:fd:f7:3f:cc:05:9a:dc:5a:6c: 9a:4c:31:17:0a:45:40:d8:6b:55:65:6a:4e:3e:7c: 01:8e:1c:2b:17:38:71:85:17:ca:98:e2:77:99:9a: 00:b9:00:b3:f6:6f:23:9b:88:07:9d:0f:3d:78:d4: 90:ba:ea:31:98:6c:19:cc:05:e8:c2:48:6f:20:29: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:DA:DD:85:1E:4B:B0:73:64:3A:63:85:B9:86:FA:74:0C:72:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/f0092439-63d5-384f-bbda-d0bd831f7a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl X509v3 Authority Key Identifier: keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ca:dc:9b:15:0f:b7:69:bc:c4:15:48:8c:7b:2a:a9:1c:ac: f5:ad:10:25:71:8b:e1:fe:3b:a0:31:8b:ce:22:83:fa:ed:39: f7:3f:e0:5c:7f:e7:10:a0:83:33:fc:2e:a4:92:45:4a:b2:7e: 55:6b:51:2b:88:98:76:f9:76:5c:4e:3f:58:bd:2a:e2:35:6f: 00:17:86:01:43:41:f0:91:5b:d4:e0:32:bd:1f:a2:f0:c7:eb: 6b:66:06:e9:e1:32:06:95:ed:13:c7:11:6d:61:27:a6:01:50: 05:ed:fb:87:d5:ea:66:d2:84:51:2e:35:ad:a1:06:77:f7:cc: d9:71:d6:c7:0b:42:ab:d6:06:06:a3:be:4c:7c:61:d1:38:11: 69:b8:31:7b:47:e1:77:89:91:1e:9f:5f:12:3e:79:35:d9:73: b0:f3:e7:26:60:b5:44:09:82:86:e1:47:23:48:f7:9c:50:d5: 3c:ff:38:c2:f5:02:2b:13:78:84:26:81:a2:32:59:4e:da:4b: 03:53:b2:25:9b:74:3c:ea:1f:a1:45:92:44:85:26:b5:0c:db: 34:52:e9:04:d4:3d:e6:90:1d:83:60:a3:79:30:c6:50:1e:bb: 9d:31:aa:7e:8e:6d:5a:aa:de:73:00:1a:5d:37:d6:30:69:ee: b5:9d:17:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPJoy+rFfrYp48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2 OGY3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NzU3OTQzY2UtY2VjNS00YmM4LTkyMTMtNjVjNmFjMDY0NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43PqY6Rka2467NGEK6lFJJyoB683gSUWDWRT yC/8ZbzPRHM8ZghoERXk66snjkSptdLaJsFkLCPLhPOMPPDTYhBJi5izRq5fVGti zv5sYei4cRhuyGmqcIr46/55Rg3VT07vaGFzLusl1DUlVGQjSulluf3OHkETzg/l ep+XCnepbUSwF33NYxLhjRtxTb0ekCl/8LfzWB7p5nRcVOIPEzmbAVBTI8HzKv7V PzM2mVNCLj3zgEUH/eL99z/MBZrcWmyaTDEXCkVA2GtVZWpOPnwBjhwrFzhxhRfK mOJ3mZoAuQCz9m8jm4gHnQ89eNSQuuoxmGwZzAXowkhvICk0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTy2t2FHkuwc2Q6Y4W5hvp0DHKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3 ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvZjAwOTI0MzktNjNkNS0z ODRmLWJiZGEtZDBiZDgzMWY3YTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRjN2YzMGUtNzBiZS00ZjhjLWJj OGYtNjBiODVkMWI2OGY3Lzc0YzdmMzBlLTcwYmUtNGY4Yy1iYzhmLTYwYjg1ZDFi NjhmNy5jcmwwHwYDVR0jBBgwFoAUvT8d3y7wTu8fXjVGgXxUE+Gl7UMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4 NWQxYjY4ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/K3JsVD7dpvMQVSIx7KqkcrPWtECVxi+H+O6Axi84ig/rtOfc/4Fx/ 5xCggzP8LqSSRUqyflVrUSuImHb5dlxOP1i9KuI1bwAXhgFDQfCRW9TgMr0fovDH 62tmBunhMgaV7RPHEW1hJ6YBUAXt+4fV6mbShFEuNa2hBnf3zNlx1scLQqvWBgaj vkx8YdE4EWm4MXtH4XeJkR6fXxI+eTXZc7Dz5yZgtUQJgobhRyNI95xQ1Tz/OML1 AisTeIQmgaIyWU7aSwNTsiWbdDzqH6FFkkSFJrUM2zRS6QTUPeaQHYNgo3kwxlAe u50xqn6ObVqq3nMAGl031jBp7rWdF/8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:41 2025 by rpki-client