$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa File: 24ff722b-c003-304d-b442-42fbe741037b.roa (raw, json) Hash identifier: YcXpkfyW+i3alODpSvAPbmwcUhXl1bPJ2cW2/ax6GWo= Subject key identifier: 32:81:5C:28:E9:08:AD:76:2C:63:AB:4D:86:18:AF:30:BF:0A:A0:9A Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584AC8764AF537C5E1CD2A42E8C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 394432 IP address blocks: 104.233.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4a:f5:37:c5:e1:cd:2a:42:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=faf45835-e0eb-44c5-96f0-ecaefa2239c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:d9:81:cf:4d:8c:d4:01:85:6b:1b:f2:95: f8:98:ef:bb:23:0b:e2:90:b4:88:74:c2:a7:35:0a: 65:99:5b:ec:58:14:26:06:62:5a:c7:67:c0:58:80: 01:eb:4c:32:ca:dc:33:db:b7:41:aa:68:60:0c:16: 1b:02:e3:95:61:a2:a9:94:ba:6b:94:94:c6:44:b3: be:e8:8b:82:ca:50:33:c5:d1:73:ca:ab:86:4d:92: ea:1f:f4:9e:b2:83:99:97:a3:29:57:dc:b8:df:c6: 03:e7:d8:a2:aa:22:00:2e:81:9d:cc:28:78:48:3d: c8:93:9f:ef:7c:80:de:89:9d:02:2c:87:1c:a1:db: 08:ea:b8:c0:78:47:21:f4:79:89:df:dc:64:0d:2f: cb:c4:26:5a:c1:74:f8:67:4c:b2:37:1a:6a:78:22: 47:f8:b9:e4:6d:f1:e6:6f:cd:89:74:be:aa:9d:83: e6:59:cc:55:89:8c:a8:5d:13:4d:15:39:49:78:59: 97:d4:91:8a:92:4d:ed:42:9e:5c:ad:3b:67:1b:04: 1f:b1:00:c4:ed:c9:59:87:c9:4f:be:54:d9:5c:44: 31:d6:a2:16:1a:f8:d6:15:5d:cd:39:4b:c7:75:9c: 79:58:12:92:1f:e0:68:c5:46:e0:d7:06:18:8b:10: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:5C:28:E9:08:AD:76:2C:63:AB:4D:86:18:AF:30:BF:0A:A0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/24ff722b-c003-304d-b442-42fbe741037b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1a:5d:be:7a:32:7f:a8:93:76:33:c0:17:af:2a:b2:77:6f: af:3c:fa:70:7b:ff:a1:b0:e5:4d:12:ed:d8:96:df:3f:76:57: 9d:db:c0:82:9b:b7:70:a1:48:4d:af:05:dc:89:42:16:d4:3f: 57:58:2a:5b:c4:fa:33:62:14:7e:b6:6c:cd:ca:2c:c0:60:58: 53:16:41:3a:55:3f:1b:27:d3:6d:25:e6:82:5d:aa:e6:34:d0: 04:94:0d:44:65:6c:e4:90:f8:a7:ce:07:75:74:24:ab:30:94: 23:3d:98:19:6d:a1:e1:aa:38:26:4c:df:0f:16:3e:54:c3:f7: c1:0a:4b:3c:0c:08:49:a3:5c:c2:7c:ff:79:c6:26:e2:2c:b2: e9:76:89:0c:ca:2e:8c:0b:f7:32:9b:bb:5b:06:aa:2e:b7:d5: d4:ff:58:85:ef:f1:1f:90:e4:36:0f:ee:a8:fe:91:20:bd:22: ff:32:3e:a6:a7:cf:9e:2a:eb:c1:2d:1b:8e:c5:e5:18:66:3a: 43:9d:42:e4:ae:89:20:2b:9c:ca:d3:58:9d:20:d6:db:99:ba: 54:42:cb:71:a9:49:dc:d9:ab:5c:77:22:0b:49:87:2d:c5:53: eb:da:08:58:8c:3c:23:de:0e:bb:89:24:7b:4f:ee:bd:c4:30: 6d:2f:05:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdkr1N8XhzSpC6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmFmNDU4MzUtZTBlYi00NGM1LTk2ZjAtZWNhZWZhMjIzOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFHZgc9NjNQBhWsb8pX4mO+7IwvikLSIdMKn NQplmVvsWBQmBmJax2fAWIAB60wyytwz27dBqmhgDBYbAuOVYaKplLprlJTGRLO+ 6IuCylAzxdFzyquGTZLqH/SesoOZl6MpV9y438YD59iiqiIALoGdzCh4SD3Ik5/v fIDeiZ0CLIccodsI6rjAeEch9HmJ39xkDS/LxCZawXT4Z0yyNxpqeCJH+LnkbfHm b82JdL6qnYPmWcxViYyoXRNNFTlJeFmX1JGKkk3tQp5crTtnGwQfsQDE7clZh8lP vlTZXEQx1qIWGvjWFV3NOUvHdZx5WBKSH+BoxUbg1wYYixC2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKBXCjpCK12LGOrTYYYrzC/CqCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjRmZjcyMmItYzAwMy0z MDRkLWI0NDItNDJmYmU3NDEwMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYaXb56Mn+ok3YzwBevKrJ3b688+nB7/6Gw5U0S7diW3z92V53bwIKb t3ChSE2vBdyJQhbUP1dYKlvE+jNiFH62bM3KLMBgWFMWQTpVPxsn020l5oJdquY0 0ASUDURlbOSQ+KfOB3V0JKswlCM9mBltoeGqOCZM3w8WPlTD98EKSzwMCEmjXMJ8 /3nGJuIssul2iQzKLowL9zKbu1sGqi631dT/WIXv8R+Q5DYP7qj+kSC9Iv8yPqan z54q68EtG47F5RhmOkOdQuSuiSArnMrTWJ0g1tuZulRCy3GpSdzZq1x3IgtJhy3F U+vaCFiMPCPeDruJJHtP7r3EMG0vBaA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:06 2025 by rpki-client