$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/0dffa522-b9fd-3c0f-aaa4-ee95fc1e559c.roa File: 0dffa522-b9fd-3c0f-aaa4-ee95fc1e559c.roa (raw, json) Hash identifier: M75JG3b8Kjc5ocorrMyK2nS0DB3O+sMfIcdGuARqceA= Subject key identifier: 08:52:62:CB:F0:39:6C:76:23:0A:A7:41:4D:E5:D2:BF:8F:0F:DD:D7 Certificate issuer: /CN=fc019755-a466-4511-8e5f-83781d1aca46 Certificate serial: 010D0C9F4328584AEF8BC9020C0A43975CDA5E80 Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/0dffa522-b9fd-3c0f-aaa4-ee95fc1e559c.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 63356 IP address blocks: 23.170.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c9:02:0c:0a:43:97:5c:da:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=38bfc133-2e11-4879-ac63-00ecc3978e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:40:ea:8b:cf:eb:82:e0:d8:d0:14:f5:fd: 4b:32:39:66:99:e9:00:35:9c:33:21:64:48:be:98: be:3a:9d:a3:6d:32:7f:2b:90:60:a7:bf:e0:2d:ea: 0b:5a:17:9b:f0:8c:cb:76:65:68:d0:d8:cd:a6:48: 7b:66:03:3a:01:9e:e9:aa:0b:2b:6b:c6:bc:32:c7: 46:a5:ec:27:11:a6:c3:dc:77:5e:02:e6:ad:f9:4d: 76:87:35:d4:da:e3:a2:7e:b0:24:96:6e:7c:d7:6a: 83:60:14:27:63:01:21:98:18:ec:f7:ed:53:90:18: eb:b8:94:6a:9d:1f:b6:43:14:a0:9f:06:20:1c:d7: 71:3c:69:90:31:78:31:15:ae:13:d3:44:9b:78:ad: 86:33:5b:93:f6:69:fc:8e:75:7d:67:33:73:8b:c8: 24:68:1e:24:0c:ac:b2:9e:27:8c:3c:5f:46:8a:94: e0:9b:22:61:4b:3d:03:e4:d4:89:a0:27:85:d1:f4: 41:92:b0:59:d3:24:a4:4c:d1:eb:a8:66:3e:20:19: 25:2a:60:0d:d4:eb:04:fd:76:8e:9e:02:51:8b:83: e6:b3:4b:14:25:b1:51:56:fe:ee:57:76:30:56:40: e4:8d:83:c3:80:e1:5b:bb:44:38:77:46:b4:e7:64: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:62:CB:F0:39:6C:76:23:0A:A7:41:4D:E5:D2:BF:8F:0F:DD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/0dffa522-b9fd-3c0f-aaa4-ee95fc1e559c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl X509v3 Authority Key Identifier: keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer sbgp-ipAddrBlock: critical IPv4: 23.170.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:77:e6:31:58:eb:1f:8d:de:eb:cb:b0:60:c3:e0:84:d7:94: 81:1e:a4:c1:9d:a6:86:67:3a:69:c9:2c:fc:80:19:6b:93:45: 4d:95:64:dc:cd:af:50:2e:ca:9e:92:8a:c0:36:8b:c4:0e:18: 3b:7f:c8:f9:cc:d2:6c:9f:0d:5d:7f:c7:37:cb:2d:24:80:4f: c9:1c:93:89:6d:61:29:af:71:2f:e6:ed:a6:ba:9d:58:9a:a2: 5c:90:cb:89:d9:2e:bd:7e:2a:f0:cb:36:4a:fc:cf:58:fa:32: e9:cc:ff:a4:89:d3:b7:21:c8:35:c2:a7:8b:f9:ec:06:43:89: d2:f5:06:9c:68:4e:de:bf:68:ae:3b:e1:eb:38:9f:62:69:a9: e2:05:97:a6:fc:01:e2:6c:35:7e:bc:f6:ce:c5:a7:30:25:8f: 60:24:f9:91:32:8d:f4:5e:40:eb:1c:d3:39:13:51:2d:c7:9c: c4:7b:86:30:e5:9c:95:50:d9:07:af:20:97:50:a8:99:7d:3c: 96:f4:50:71:05:f3:97:0f:cd:83:d9:24:ec:eb:37:93:84:e1: 31:2a:fe:cb:2f:3a:21:d0:df:52:2f:fa:e6:5b:dc:81:a7:b4: fb:86:ee:6c:4f:e0:3c:7f:d6:7d:fc:43:09:4c:53:7d:b5:c9: 95:ca:68:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8kCDApDl1zaXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMTk3NTUtYTQ2Ni00NTExLThlNWYtODM3ODFkMWFj YTQ2MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MzhiZmMxMzMtMmUxMS00ODc5LWFjNjMtMDBlY2MzOTc4ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FxA6ovP64Lg2NAU9f1LMjlmmekANZwzIWRI vpi+Op2jbTJ/K5Bgp7/gLeoLWheb8IzLdmVo0NjNpkh7ZgM6AZ7pqgsra8a8MsdG pewnEabD3HdeAuat+U12hzXU2uOifrAklm5812qDYBQnYwEhmBjs9+1TkBjruJRq nR+2QxSgnwYgHNdxPGmQMXgxFa4T00SbeK2GM1uT9mn8jnV9ZzNzi8gkaB4kDKyy nieMPF9GipTgmyJhSz0D5NSJoCeF0fRBkrBZ0ySkTNHrqGY+IBklKmAN1OsE/XaO ngJRi4Pms0sUJbFRVv7uV3YwVkDkjYPDgOFbu0Q4d0a052S3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhSYsvwOWx2IwqnQU3l0r+PD93XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzAx OTc1NS1hNDY2LTQ1MTEtOGU1Zi04Mzc4MWQxYWNhNDYvMGRmZmE1MjItYjlmZC0z YzBmLWFhYTQtZWU5NWZjMWU1NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmMwMTk3NTUtYTQ2Ni00NTExLThl NWYtODM3ODFkMWFjYTQ2L2ZjMDE5NzU1LWE0NjYtNDUxMS04ZTVmLTgzNzgxZDFh Y2E0Ni5jcmwwHwYDVR0jBBgwFoAUhPrumqeOBTx4lOAJHwRHyv0tuXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzAxOTc1NS1hNDY2LTQ1MTEtOGU1Zi04Mzc4 MWQxYWNhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6q4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp35jFY6x+N3uvLsGDD4ITXlIEepMGdpoZnOmnJLPyAGWuTRU2VZNzN r1Auyp6SisA2i8QOGDt/yPnM0myfDV1/xzfLLSSAT8kck4ltYSmvcS/m7aa6nVia olyQy4nZLr1+KvDLNkr8z1j6MunM/6SJ07chyDXCp4v57AZDidL1BpxoTt6/aK47 4es4n2JpqeIFl6b8AeJsNX689s7FpzAlj2Ak+ZEyjfReQOsc0zkTUS3HnMR7hjDl nJVQ2QevIJdQqJl9PJb0UHEF85cPzYPZJOzrN5OE4TEq/ssvOiHQ31Iv+uZb3IGn tPuG7mxP4Dx/1n38QwlMU321yZXKaMA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:46 2025 by rpki-client