$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa File: 6053494b-ad6e-3463-a4d4-78568350ab7f.roa (raw, json) Hash identifier: Fp8UcRt4rn7eAVyU5d+Sw8CFCtkWUm/J22L7HXmCNdI= Subject key identifier: 2A:A1:0E:28:85:DF:4E:44:22:02:1C:3B:08:A3:1A:AB:B8:AD:65:B2 Certificate issuer: /CN=ea962f40-5514-411b-b23b-2a5e787628d5 Certificate serial: 010D0C9F4328584AC2E102F6A1E34AC0C745B75D Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 401336 IP address blocks: 23.189.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:02:f6:a1:e3:4a:c0:c7:45:b7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=298ee11d-5cae-4a63-81a8-2f1cd7bf7b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:5f:cd:23:7b:39:69:d2:9f:c9:bc:44:03: 1e:1e:91:ea:2d:c4:10:15:7a:49:22:32:e7:e9:d9: e2:41:4f:e4:5a:94:ac:f0:41:d1:b7:67:f3:0c:47: dd:ca:a4:ad:19:57:9c:eb:4c:29:aa:7d:36:5d:cd: 39:c8:98:22:d3:bd:56:d5:f3:a8:bf:d3:7c:ae:68: 5c:d2:9b:c4:d8:69:ae:cf:78:b6:51:e2:ce:c0:be: 22:d5:d4:ed:67:38:b2:73:1c:b4:0b:d4:f5:80:59: dd:27:af:e1:a8:18:40:29:5f:e7:4e:fb:92:f7:1d: f5:61:90:55:b5:fe:d2:4a:14:24:b7:93:c5:6e:b0: a3:6a:ba:d7:18:ad:fc:91:72:83:ad:9e:52:9e:84: 8c:59:7b:26:42:ae:5e:48:00:68:f8:09:a6:72:fb: 59:b3:69:53:6a:41:d2:66:a4:bf:ce:29:33:03:8d: c4:4a:d9:27:eb:f9:eb:9b:87:9d:07:66:dd:84:dc: ec:eb:05:95:e2:67:5c:d8:f7:a2:92:ea:93:fd:89: b2:cf:1e:a3:b7:3d:ea:99:58:23:0f:c9:38:3b:ef: c2:2c:98:f4:2a:f3:39:4c:d3:94:86:98:34:29:93: dc:35:c0:9b:59:9e:31:4d:be:54:ea:c3:7d:5a:03: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A1:0E:28:85:DF:4E:44:22:02:1C:3B:08:A3:1A:AB:B8:AD:65:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl X509v3 Authority Key Identifier: keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer sbgp-ipAddrBlock: critical IPv4: 23.189.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:04:be:75:eb:db:05:10:69:c0:70:38:30:d9:74:97:50:1a: 0e:82:14:90:20:7c:32:41:8b:2c:a4:81:09:71:ff:42:2a:bd: 47:d7:0b:9b:18:06:19:c0:52:15:bb:43:fc:c8:16:d8:69:7c: f3:b8:99:67:86:d6:60:20:d7:2b:0e:52:63:f6:24:7d:be:71: 9e:75:53:12:5c:fc:7f:f5:e4:8b:9f:55:58:18:1b:0a:59:5d: ef:d9:c9:08:f9:df:48:a0:ae:0f:2f:43:e1:f9:80:4a:4f:54: 74:2e:b7:4c:ef:92:fe:b0:f0:f8:22:01:12:9a:81:4e:3d:69: d6:81:05:05:20:f6:54:8d:56:01:4f:a7:63:2e:74:cb:71:b4: c9:c5:80:ac:64:e7:84:b1:87:f6:e1:e3:d7:71:de:e7:d2:50: 09:ff:ef:0d:f7:34:b4:25:25:d3:02:9a:5a:cb:1c:1c:b0:15: 82:64:70:b3:38:3a:ae:5c:57:ea:c7:5c:29:78:63:a9:a8:3a: 6c:90:a9:00:12:1e:c5:99:6d:9d:8d:f2:6e:ac:46:80:1d:ce: c3:64:67:ec:34:53:8d:cf:28:15:78:08:52:fb:bb:cd:89:de: c8:25:17:d5:1b:e0:11:f6:b9:50:3f:5a:27:1a:74:94:11:ba: 16:7c:e5:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QL2oeNKwMdFt10wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5NjJmNDAtNTUxNC00MTFiLWIyM2ItMmE1ZTc4NzYy OGQ1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Mjk4ZWUxMWQtNWNhZS00YTYzLTgxYTgtMmYxY2Q3YmY3YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc5fzSN7OWnSn8m8RAMeHpHqLcQQFXpJIjLn 6dniQU/kWpSs8EHRt2fzDEfdyqStGVec60wpqn02Xc05yJgi071W1fOov9N8rmhc 0pvE2Gmuz3i2UeLOwL4i1dTtZziycxy0C9T1gFndJ6/hqBhAKV/nTvuS9x31YZBV tf7SShQkt5PFbrCjarrXGK38kXKDrZ5SnoSMWXsmQq5eSABo+AmmcvtZs2lTakHS ZqS/zikzA43EStkn6/nrm4edB2bdhNzs6wWV4mdc2PeikuqT/Ymyzx6jtz3qmVgj D8k4O+/CLJj0KvM5TNOUhpg0KZPcNcCbWZ4xTb5U6sN9WgNqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqhDiiF305EIgIcOwijGqu4rWWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2 MmY0MC01NTE0LTQxMWItYjIzYi0yYTVlNzg3NjI4ZDUvNjA1MzQ5NGItYWQ2ZS0z NDYzLWE0ZDQtNzg1NjgzNTBhYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5NjJmNDAtNTUxNC00MTFiLWIy M2ItMmE1ZTc4NzYyOGQ1L2VhOTYyZjQwLTU1MTQtNDExYi1iMjNiLTJhNWU3ODc2 MjhkNS5jcmwwHwYDVR0jBBgwFoAUlewonBG6R3Dlqv0OrkBPqn3B8iEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2MmY0MC01NTE0LTQxMWItYjIzYi0yYTVl Nzg3NjI4ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF70YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgEvnXr2wUQacBwODDZdJdQGg6CFJAgfDJBiyykgQlx/0IqvUfXC5sY BhnAUhW7Q/zIFthpfPO4mWeG1mAg1ysOUmP2JH2+cZ51UxJc/H/15IufVVgYGwpZ Xe/ZyQj530igrg8vQ+H5gEpPVHQut0zvkv6w8PgiARKagU49adaBBQUg9lSNVgFP p2MudMtxtMnFgKxk54Sxh/bh49dx3ufSUAn/7w33NLQlJdMCmlrLHBywFYJkcLM4 Oq5cV+rHXCl4Y6moOmyQqQASHsWZbZ2N8m6sRoAdzsNkZ+w0U43PKBV4CFL7u82J 3sglF9Ub4BH2uVA/WicadJQRuhZ85Uk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:52 2025 by rpki-client