$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa File: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json) Hash identifier: 1CfbsZ3kAvkeJoXm7rel+xRUAAhcx0Niz3wUrKEgVFY= Subject key identifier: 8B:8B:FA:50:62:AB:FB:B2:A1:6F:F9:0B:2E:1D:CF:5B:26:DF:76:06 Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F4328584AECC14549FFA740F14FFBD880 Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 58061 IP address blocks: 23.247.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:45:49:ff:a7:40:f1:4f:fb:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8c0ad0e-5c5b-4030-84b9-2bc6698d35d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:81:b7:da:b8:53:e2:5e:59:66:b3:97:dd: 5d:78:b3:25:6c:8a:3b:ba:38:df:76:ba:a1:58:d3: 68:36:dd:88:0c:be:87:eb:e0:a6:ac:fb:24:ee:be: 60:81:86:fd:d0:0c:c6:cb:f8:f7:10:7f:d9:36:9f: fb:12:d9:1e:47:de:b2:58:c3:74:6a:27:88:1e:fe: d0:47:8d:45:26:18:a5:b4:ce:ef:80:f5:70:b9:b3: 16:38:a3:29:91:3f:89:1b:d9:96:99:dd:f4:9e:ad: 23:3c:0d:2d:d8:d5:7c:0f:ce:1f:48:32:4d:ef:de: 67:0a:b5:35:e4:e0:95:7a:e8:87:9b:f6:6d:c4:c0: 06:1e:0d:13:23:fa:d7:79:76:ec:47:50:27:80:81: 5b:e8:f1:10:b4:fc:cd:29:c7:85:b5:3e:19:e6:74: 74:46:ee:63:ae:70:a0:cd:53:84:5b:5d:7e:68:c8: 36:0c:5f:9a:81:86:cb:d1:3a:8d:01:10:c5:46:81: 5b:29:0a:1d:9a:9a:40:2c:a0:de:2f:50:f7:b6:60: 40:2d:ac:a4:48:d5:da:a6:d2:e2:35:ab:d4:28:2b: d6:d6:5f:a4:b0:90:8a:61:10:c2:7c:35:66:d3:9d: b0:d9:ec:66:e0:96:c6:42:55:bc:5a:08:46:1e:51: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:FA:50:62:AB:FB:B2:A1:6F:F9:0B:2E:1D:CF:5B:26:DF:76:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: 23.247.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:43:4f:ff:83:37:32:59:a6:59:fd:a2:5f:ad:cb:8b:d5:79: 64:67:12:79:dc:14:63:73:c1:16:74:a6:6d:71:80:40:b4:7b: dd:05:1d:80:77:e2:ab:bd:42:0c:e8:64:27:47:7a:3b:10:86: b6:68:5d:a4:02:ca:a8:97:72:ab:19:56:71:07:84:19:a1:79: 7a:bb:ed:c4:be:5d:3d:b5:03:e9:97:9d:91:46:fd:ad:42:d9: bd:77:31:a2:4c:40:cf:5f:50:ab:f5:b4:18:68:0f:ea:15:81: 0a:21:9d:ad:9f:8f:3c:94:bb:29:d1:0d:48:cf:da:6d:78:30: e2:70:00:0b:67:0b:6b:5c:83:7d:67:61:5f:a7:b9:7f:e7:98: 25:6f:a3:b5:d0:fa:f1:21:b8:96:60:7f:f8:38:2c:6f:94:5c: 13:c2:65:74:cf:c9:eb:8e:f6:2a:09:4d:a3:4d:59:0b:7a:32: 2c:41:35:06:c9:eb:3a:31:08:26:03:b6:99:5c:56:cc:c8:5d: 3a:a5:01:4b:02:af:d2:e4:39:6f:e3:e9:b6:a8:8d:33:70:a6: bd:90:6c:e5:8e:df:cb:88:b9:ff:2c:6d:33:d4:02:a8:c2:62: 31:3e:6a:09:e0:0e:a7:b9:b9:d3:03:cf:a5:26:42:b5:3c:ec: ec:54:8b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUVJ/6dA8U/72IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhjMGFkMGUtNWM1Yi00MDMwLTg0YjktMmJjNjY5OGQzNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1+Bt9q4U+JeWWazl91deLMlbIo7ujjfdrqh WNNoNt2IDL6H6+CmrPsk7r5ggYb90AzGy/j3EH/ZNp/7EtkeR96yWMN0aieIHv7Q R41FJhiltM7vgPVwubMWOKMpkT+JG9mWmd30nq0jPA0t2NV8D84fSDJN795nCrU1 5OCVeuiHm/ZtxMAGHg0TI/rXeXbsR1AngIFb6PEQtPzNKceFtT4Z5nR0Ru5jrnCg zVOEW11+aMg2DF+agYbL0TqNARDFRoFbKQodmppALKDeL1D3tmBALaykSNXaptLi NavUKCvW1l+ksJCKYRDCfDVm052w2exm4JbGQlW8WghGHlGFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuL+lBiq/uyoW/5Cy4dz1sm33YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvNjdjZDMzMWMtMGVlYS0z ZDQwLTk2ZDUtN2FjYzAwN2I4ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/f0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVDT/+DNzJZpln9ol+ty4vVeWRnEnncFGNzwRZ0pm1xgEC0e90FHYB3 4qu9QgzoZCdHejsQhrZoXaQCyqiXcqsZVnEHhBmheXq77cS+XT21A+mXnZFG/a1C 2b13MaJMQM9fUKv1tBhoD+oVgQohna2fjzyUuynRDUjP2m14MOJwAAtnC2tcg31n YV+nuX/nmCVvo7XQ+vEhuJZgf/g4LG+UXBPCZXTPyeuO9ioJTaNNWQt6MixBNQbJ 6zoxCCYDtplcVszIXTqlAUsCr9LkOW/j6baojTNwpr2QbOWO38uIuf8sbTPUAqjC YjE+agngDqe5udMDz6UmQrU87OxUi/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:22 2025 by rpki-client