$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa File: 32e02635-8cd2-3775-81c9-ed30a8a029d4.roa (raw, json) Hash identifier: j2PWUgM3LdaT0w5VOBn7LCenDQYDdue0/ogQp47Swak= Subject key identifier: D1:26:0A:1C:B7:E4:F9:4F:9E:3E:1E:BA:55:3E:8D:A2:1E:BD:39:DB Certificate issuer: /CN=e3587642-0817-4894-845b-fb11599b2f03 Certificate serial: 010D0C9F4328584AEE268BE3CFB81DB02E6F9680 Authority key identifier: 79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 401222 IP address blocks: 23.183.248.0/24 maxlen: 32 2602:f87d::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:8b:e3:cf:b8:1d:b0:2e:6f:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3587642-0817-4894-845b-fb11599b2f03 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=007b6be1-a070-4f06-a5e2-e4aef4388da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:05:69:ad:12:1e:35:49:36:ce:9a:cb:b4: 5e:5a:eb:c8:e9:95:96:e0:1b:b8:0c:70:a6:25:c9: f9:d2:f7:a9:3d:fa:9b:cb:58:a2:36:c3:e4:42:88: 34:55:ad:53:56:2b:2f:f2:50:b0:a1:e2:2c:d4:cd: 51:a7:0a:43:46:c8:0c:5a:b4:48:80:5f:d7:d7:14: e5:8b:d1:eb:d8:1f:c0:ea:59:03:23:d5:67:c3:b3: 79:dd:47:9d:4b:4d:61:99:69:66:c3:54:58:c6:16: 0b:83:d4:d5:52:d5:7f:cf:8f:a2:e6:32:7b:80:e1: 89:12:b8:54:b9:e4:ff:0c:55:64:bc:2d:0e:dd:70: c5:8a:ca:4b:e3:4c:10:f0:cb:1b:be:72:f3:e5:a4: c3:78:b9:1c:af:9c:55:0b:0e:f9:c1:2e:45:18:91: 6b:e0:65:5f:ee:65:83:23:dd:7d:50:83:b8:1e:fa: 75:56:eb:1a:43:da:fd:5a:96:b9:a6:56:9c:df:1f: aa:ab:a6:b7:e3:20:06:ec:6f:9a:f1:a2:f9:d2:4a: c1:b1:83:15:71:34:b1:66:90:4d:3a:ad:24:ea:30: 10:f8:78:a4:2d:12:bd:90:8b:7e:ff:1f:85:dd:a9: 58:65:8f:b1:b4:98:c9:40:84:22:8b:10:70:cc:7b: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:0A:1C:B7:E4:F9:4F:9E:3E:1E:BA:55:3E:8D:A2:1E:BD:39:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.crl X509v3 Authority Key Identifier: keyid:79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer sbgp-ipAddrBlock: critical IPv4: 23.183.248.0/24 IPv6: 2602:f87d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b1:85:22:f5:16:91:cc:b0:48:50:65:76:f1:c2:88:f7:d8: b4:ca:66:3d:64:7d:ff:ba:ea:1f:d8:24:d5:c3:d9:4b:6b:6a: 94:d8:b2:0f:29:d7:fa:2c:b2:11:90:84:e1:22:fd:c3:dc:79: 24:38:c8:7b:d4:c0:9f:41:c0:19:ea:d3:e5:81:aa:65:43:30: c7:8e:3b:0c:75:17:2e:61:d1:42:5d:9e:b7:e9:b1:7e:7c:1e: ce:98:a7:21:91:6e:a3:a4:4d:48:16:89:b9:e0:11:e3:96:53: c0:fa:d6:c0:62:a8:3c:e2:1d:ac:55:4f:f6:fc:78:98:74:48: d1:73:9a:4d:3a:53:c1:7f:8a:79:ae:10:60:a3:bf:e7:6e:cb: af:5e:c8:44:cd:b1:dc:d6:30:00:2e:70:e1:5e:f7:93:1b:7a: a8:e8:8d:4f:bd:ac:de:09:f5:87:47:e9:b5:8c:76:a0:b1:3f: 27:4e:af:93:62:a5:41:65:c8:b5:25:21:16:0c:8c:49:46:5c: 5d:05:4e:98:6e:a6:f5:c8:f7:29:fd:dd:1c:3d:c8:de:de:02: 99:04:3f:13:76:13:34:da:21:9f:29:e7:24:f8:db:4a:30:01: a2:bc:a6:0f:bf:14:82:ee:bb:78:12:16:9e:d0:57:ae:b8:40: 92:1f:f5:a2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEruJovjz7gdsC5vloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1ODc2NDItMDgxNy00ODk0LTg0NWItZmIxMTU5OWIy ZjAzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk MDA3YjZiZTEtYTA3MC00ZjA2LWE1ZTItZTRhZWY0Mzg4ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PgFaa0SHjVJNs6ay7ReWuvI6ZWW4Bu4DHCm Jcn50vepPfqby1iiNsPkQog0Va1TVisv8lCwoeIs1M1RpwpDRsgMWrRIgF/X1xTl i9Hr2B/A6lkDI9Vnw7N53UedS01hmWlmw1RYxhYLg9TVUtV/z4+i5jJ7gOGJErhU ueT/DFVkvC0O3XDFispL40wQ8MsbvnLz5aTDeLkcr5xVCw75wS5FGJFr4GVf7mWD I919UIO4Hvp1VusaQ9r9Wpa5plac3x+qq6a34yAG7G+a8aL50krBsYMVcTSxZpBN Oq0k6jAQ+HikLRK9kIt+/x+F3alYZY+xtJjJQIQiixBwzHuO/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNEmChy35PlPnj4eulU+jaIevTnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMzU4 NzY0Mi0wODE3LTQ4OTQtODQ1Yi1mYjExNTk5YjJmMDMvMzJlMDI2MzUtOGNkMi0z Nzc1LTgxYzktZWQzMGE4YTAyOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTM1ODc2NDItMDgxNy00ODk0LTg0 NWItZmIxMTU5OWIyZjAzL2UzNTg3NjQyLTA4MTctNDg5NC04NDViLWZiMTE1OTli MmYwMy5jcmwwHwYDVR0jBBgwFoAUeYSMoApAIQJGKCNsVxepL5SPvrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lMzU4NzY0Mi0wODE3LTQ4OTQtODQ1Yi1mYjEx NTk5YjJmMDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7f4MA4E AgACMAgDBgQmAvh9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpsYUi9RaRzLBIUGV28cKI99i0ymY9ZH3/ uuof2CTVw9lLa2qU2LIPKdf6LLIRkIThIv3D3HkkOMh71MCfQcAZ6tPlgaplQzDH jjsMdRcuYdFCXZ636bF+fB7OmKchkW6jpE1IFom54BHjllPA+tbAYqg84h2sVU/2 /HiYdEjRc5pNOlPBf4p5rhBgo7/nbsuvXshEzbHc1jAALnDhXveTG3qo6I1Pvaze CfWHR+m1jHagsT8nTq+TYqVBZci1JSEWDIxJRlxdBU6Ybqb1yPcp/d0cPcje3gKZ BD8TdhM02iGfKeck+NtKMAGivKYPvxSC7rt4Ehae0FeuuECSH/Wi -----END CERTIFICATE-----Generated at Sun Aug 24 03:31:56 2025 by rpki-client