$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa File: d44967c2-66bc-333c-a074-0781737fb57c.roa (raw, json) Hash identifier: updrBT6ouASQd/Ce7n4MIGnh2Npq5/4JTu708v+tr5Q= Subject key identifier: 44:6D:27:F3:FA:DB:60:2A:8C:46:09:7F:11:01:8E:D2:D2:67:B9:88 Certificate issuer: /CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Certificate serial: 010D0C9F4328584AE1966E779DCEE5ADCDA33B80 Authority key identifier: 19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 398565 IP address blocks: 23.161.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6e:77:9d:ce:e5:ad:cd:a3:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=258b9597-d215-4418-9a6f-fcde5e4f563e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:3a:c3:3e:06:07:9e:4a:dd:da:55:7f:c6: ba:68:e9:f5:2a:4e:d0:bf:03:72:fc:5a:5a:2c:c1: a8:f4:b1:42:4c:f9:65:c7:8e:8d:b3:d0:8e:a5:c1: e2:2d:55:ec:eb:c8:78:04:68:a4:42:73:90:a0:b8: e3:9b:54:15:fd:bb:b8:81:fa:df:41:bc:de:38:3f: 34:a6:51:8a:9f:5a:2f:cb:dc:1d:85:79:b4:53:5c: ad:e4:00:4e:7b:83:52:69:fd:fe:65:1d:54:8b:13: b5:6f:80:62:2d:73:07:fe:5c:82:f3:7b:1a:64:5c: d7:68:0b:4b:01:79:31:b5:a4:25:e7:cb:ff:b1:de: 79:7b:e6:ae:41:4c:82:61:6c:a2:b8:77:ca:ae:a8: 45:37:42:5c:c2:8f:31:0c:48:97:f5:c2:77:6c:66: 29:28:be:d0:f7:db:79:5a:07:b3:dd:37:7d:aa:45: b6:0e:38:6f:d0:15:d0:22:e6:6e:c1:36:bc:de:1e: 77:8b:2e:50:27:81:94:e3:80:5c:12:22:28:de:a9: e4:f6:65:4b:d8:51:12:70:01:29:2f:54:ca:8e:ae: 04:61:d5:d3:67:a9:3d:fc:d6:41:c9:04:96:f7:72: b0:18:fe:c5:8d:2a:56:f4:4d:be:6f:c0:55:d1:4b: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:27:F3:FA:DB:60:2A:8C:46:09:7F:11:01:8E:D2:D2:67:B9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl X509v3 Authority Key Identifier: keyid:19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer sbgp-ipAddrBlock: critical IPv4: 23.161.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2e:5a:ef:41:b7:c0:e5:52:53:18:86:5d:33:ac:ae:25:39: 4f:87:69:a7:3e:c8:be:48:4f:38:83:29:79:b2:2a:db:a5:50: b1:3f:98:8a:77:84:de:38:86:c3:9a:f8:9c:6f:6b:81:fb:67: 01:a1:66:d4:18:2a:11:94:e5:77:1e:c7:e7:a5:3a:c8:3d:48: 05:df:51:fd:ea:4c:07:9d:60:9b:2e:42:68:5a:6b:df:18:66: de:8c:65:b1:fe:aa:76:cc:7a:ee:16:7e:07:33:97:10:5e:93: a6:b3:1c:d6:8a:d5:c4:ba:4c:73:81:3d:53:a2:6c:30:ef:b9: 0d:03:5c:bf:f7:a8:65:59:8c:ab:ba:2a:a2:f2:3f:ff:08:88: b5:6c:99:26:73:7b:1e:44:6d:64:99:06:85:81:2c:20:8d:98: ed:70:8a:f4:a3:90:42:c7:17:86:51:9d:16:ac:4c:98:7f:96: 7e:0a:ef:ba:68:ac:93:84:b4:7f:53:46:b8:8d:54:01:4e:0f: b7:7d:c6:14:df:17:18:3a:d9:bb:a8:32:a2:f7:a8:67:7c:59: 7b:26:0e:14:a4:ba:8f:79:e6:28:1e:e9:d0:a7:3e:6a:3d:4d: 1a:f9:cf:90:21:32:a7:44:94:bc:e4:d6:be:09:9a:8b:9d:89: 87:36:91:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlm53nc7lrc2jO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5ZmExNTgtNjE3NS00ZmU4LWJlOGUtYmNmY2NmYzI2 NTUzMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MjU4Yjk1OTctZDIxNS00NDE4LTlhNmYtZmNkZTVlNGY1NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgo6wz4GB55K3dpVf8a6aOn1Kk7QvwNy/Fpa LMGo9LFCTPllx46Ns9COpcHiLVXs68h4BGikQnOQoLjjm1QV/bu4gfrfQbzeOD80 plGKn1ovy9wdhXm0U1yt5ABOe4NSaf3+ZR1UixO1b4BiLXMH/lyC83saZFzXaAtL AXkxtaQl58v/sd55e+auQUyCYWyiuHfKrqhFN0Jcwo8xDEiX9cJ3bGYpKL7Q99t5 Wgez3Td9qkW2Djhv0BXQIuZuwTa83h53iy5QJ4GU44BcEiIo3qnk9mVL2FEScAEp L1TKjq4EYdXTZ6k9/NZByQSW93KwGP7FjSpW9E2+b8BV0Usy1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERtJ/P622AqjEYJfxEBjtLSZ7mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlm YTE1OC02MTc1LTRmZTgtYmU4ZS1iY2ZjY2ZjMjY1NTMvZDQ0OTY3YzItNjZiYy0z MzNjLWEwNzQtMDc4MTczN2ZiNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5ZmExNTgtNjE3NS00ZmU4LWJl OGUtYmNmY2NmYzI2NTUzLzBmOWZhMTU4LTYxNzUtNGZlOC1iZThlLWJjZmNjZmMy NjU1My5jcmwwHwYDVR0jBBgwFoAUGTZUDEjQQb0tOQUEW9xangWFEJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlmYTE1OC02MTc1LTRmZTgtYmU4ZS1iY2Zj Y2ZjMjY1NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABouWu9Bt8DlUlMYhl0zrK4lOU+Haac+yL5ITziDKXmyKtulULE/mIp3 hN44hsOa+Jxva4H7ZwGhZtQYKhGU5Xcex+elOsg9SAXfUf3qTAedYJsuQmhaa98Y Zt6MZbH+qnbMeu4WfgczlxBek6azHNaK1cS6THOBPVOibDDvuQ0DXL/3qGVZjKu6 KqLyP/8IiLVsmSZzex5EbWSZBoWBLCCNmO1wivSjkELHF4ZRnRasTJh/ln4K77po rJOEtH9TRriNVAFOD7d9xhTfFxg62buoMqL3qGd8WXsmDhSkuo955ige6dCnPmo9 TRr5z5AhMqdElLzk1r4JmoudiYc2kRA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:27 2025 by rpki-client