$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa File: 84f02f2f-ae84-308f-a582-83b183cb9f88.roa (raw, json) Hash identifier: oD+kEWXShvosYU2e3kWQ2XjVd0Ux4kdRL3b23xs/Qnk= Subject key identifier: DB:90:E4:5E:40:AD:76:47:07:16:4A:53:92:67:2D:28:38:B6:31:10 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584ACB40EAEAB9AB0E9BB70D2700 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 23467 IP address blocks: 162.247.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ea:ea:b9:ab:0e:9b:b7:0d:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=0d14b5e8-8cc3-4fa4-b41f-24a11c99eb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:5a:15:43:1c:55:18:dc:03:cb:7f:62:75: c9:07:c9:8d:b8:04:50:15:24:28:b4:ec:20:bc:72: ab:77:1f:9a:6e:dc:57:c4:be:47:b9:94:8f:45:0b: df:d8:43:e2:b3:76:c7:41:24:3d:22:4b:f5:05:80: ce:17:56:db:b6:5a:e3:f6:e7:10:11:6a:4e:bd:b0: 6e:d9:38:3e:78:4a:27:67:f2:9a:77:a8:19:b3:55: 9f:10:da:a4:f0:19:22:1b:6e:50:d8:a7:e1:ca:69: 8b:73:a3:25:27:b3:2a:b7:48:37:e4:eb:74:91:2b: fb:10:19:8d:7e:ce:29:90:db:6b:a3:9b:1b:02:62: db:ca:2c:3a:7e:69:11:c2:0e:70:8f:74:ae:3d:c8: d9:3b:cd:f0:37:b2:67:4c:8d:63:d9:04:f1:d6:c5: a0:1a:18:df:8a:3c:d6:04:8e:a6:5d:8e:46:7e:20: b4:9b:c8:ea:ea:04:77:cc:92:56:fc:8b:bc:c5:66: 62:53:56:7d:2f:af:f0:30:80:3c:ab:4f:2f:07:67: ba:6e:79:26:fd:8d:27:a8:45:b4:b3:43:5e:16:30: 35:a3:85:d9:e6:ce:be:d6:3b:47:24:fa:ef:91:d8: 1a:91:dd:79:29:f7:1a:e5:8a:c7:57:f5:93:77:38: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:90:E4:5E:40:AD:76:47:07:16:4A:53:92:67:2D:28:38:B6:31:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d9:e9:f7:13:78:b6:19:3d:10:fd:6c:0d:37:58:5e:59:0a: 73:d7:77:b1:67:0e:0d:eb:2b:b8:94:04:de:90:ed:ac:a8:7f: 43:6b:b5:81:52:42:56:4e:a5:13:54:39:16:d9:c9:d0:68:f7: aa:5c:e6:e2:d8:8d:90:3d:29:bf:19:44:9b:05:05:03:45:d9: 56:bc:46:42:4b:2a:16:96:55:e1:ef:f3:52:1d:48:3d:2a:8f: d3:bb:d6:9c:82:48:0b:5d:c4:ee:61:4d:06:80:5d:ed:95:d6: 6b:7a:0a:a3:a0:5e:bf:99:3e:38:a9:bd:d5:88:19:f0:ac:86: bb:ee:be:08:05:42:9f:90:47:aa:cd:4c:5c:9b:81:17:83:9d: 49:d7:b6:c5:2d:24:5b:07:8a:a3:c3:22:95:40:c6:d6:6a:1b: 5b:e3:fd:2b:cb:2c:6a:94:c4:42:22:66:28:8a:fb:bc:b8:3d: 95:e5:be:0e:0d:b4:b6:f5:4e:c2:cf:f3:f9:98:40:ef:64:34: fb:76:89:86:9e:d9:a6:80:2b:2f:73:d9:53:55:aa:44:94:20: 92:47:c9:d5:54:93:5b:1c:94:2f:ff:88:9d:13:21:fe:5e:78: c6:16:d3:60:0a:6e:cc:a5:fb:00:eb:d9:d1:9a:25:3c:26:7e: 0f:1b:5f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOrquasOm7cNJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGQxNGI1ZTgtOGNjMy00ZmE0LWI0MWYtMjRhMTFjOTllYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxaFUMcVRjcA8t/YnXJB8mNuARQFSQotOwg vHKrdx+abtxXxL5HuZSPRQvf2EPis3bHQSQ9Ikv1BYDOF1bbtlrj9ucQEWpOvbBu 2Tg+eEonZ/Kad6gZs1WfENqk8BkiG25Q2KfhymmLc6MlJ7Mqt0g35Ot0kSv7EBmN fs4pkNtro5sbAmLbyiw6fmkRwg5wj3SuPcjZO83wN7JnTI1j2QTx1sWgGhjfijzW BI6mXY5GfiC0m8jq6gR3zJJW/Iu8xWZiU1Z9L6/wMIA8q08vB2e6bnkm/Y0nqEW0 s0NeFjA1o4XZ5s6+1jtHJPrvkdgakd15Kfca5YrHV/WTdzgpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuQ5F5ArXZHBxZKU5JnLSg4tjEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvODRmMDJmMmYtYWU4NC0z MDhmLWE1ODItODNiMTgzY2I5Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Z6fcTeLYZPRD9bA03WF5ZCnPXd7FnDg3rK7iUBN6Q7ayof0NrtYFS QlZOpRNUORbZydBo96pc5uLYjZA9Kb8ZRJsFBQNF2Va8RkJLKhaWVeHv81IdSD0q j9O71pyCSAtdxO5hTQaAXe2V1mt6CqOgXr+ZPjipvdWIGfCshrvuvggFQp+QR6rN TFybgReDnUnXtsUtJFsHiqPDIpVAxtZqG1vj/SvLLGqUxEIiZiiK+7y4PZXlvg4N tLb1TsLP8/mYQO9kNPt2iYae2aaAKy9z2VNVqkSUIJJHydVUk1sclC//iJ0TIf5e eMYW02AKbsyl+wDr2dGaJTwmfg8bX7g= -----END CERTIFICATE-----Generated at Sat Aug 23 19:54:32 2025 by rpki-client