$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa File: cdaea958-113c-3933-89d1-eadb786eec06.roa (raw, json) Hash identifier: ip8hdi2C2aJC/3nRsEYJe6sEzG+HP7hVxl09KX1OORE= Subject key identifier: 3A:96:0B:39:49:FB:46:01:65:44:FF:47:E4:A5:C0:EF:CD:89:7E:73 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584AD7D117A8765EF7D5C0670000 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 266820 IP address blocks: 23.227.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:17:a8:76:5e:f7:d5:c0:67:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=9ece0835-e61b-48d6-a6b7-6f1fe9c18b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:c7:46:7c:ba:30:0b:63:2e:97:7d:7d:77: be:5a:fd:ca:80:a3:fc:0f:d4:4b:d8:2a:6c:96:3c: cf:81:2c:72:36:e6:c3:c9:89:dc:d4:d3:4e:33:03: a8:84:cb:30:2c:07:85:9e:83:d9:fa:89:c5:43:4d: ff:d7:68:c8:44:4c:8d:05:40:74:fe:eb:24:ef:9b: b9:08:44:b3:c6:b8:c4:d3:82:8b:56:d2:4e:50:a7: a0:59:0c:c2:2a:ec:17:d6:79:90:f8:45:95:28:85: 43:6e:6f:e5:de:f2:3b:a1:70:17:4b:dc:f6:46:45: 46:9f:aa:c6:13:0c:4e:99:7a:ac:7b:24:a6:e0:7f: 7e:42:19:78:80:fe:45:08:25:bb:58:a9:ba:e8:99: 4f:3d:f8:e3:65:0a:13:76:c6:e0:e4:09:37:2e:38: 20:99:3a:cb:fd:6a:f4:30:1d:97:3d:bb:66:dc:a7: 08:de:60:ff:b6:05:86:b7:14:70:4b:07:3c:43:ff: be:d2:61:0b:b5:cd:6b:76:11:32:b4:52:c4:0c:7f: a9:40:61:d0:eb:ba:77:dd:1c:6c:9c:3c:81:07:59: f6:81:6a:ff:a3:5a:34:90:0d:02:25:be:e0:92:49: 6f:eb:3c:99:43:b3:39:be:4f:2e:06:ed:2d:9b:c5: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:0B:39:49:FB:46:01:65:44:FF:47:E4:A5:C0:EF:CD:89:7E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a9:26:79:a8:06:7c:30:18:87:75:f3:3e:0c:e9:c1:02:5a: eb:8b:3f:c9:34:18:a5:b7:ca:01:a7:e4:cd:e1:46:1d:f7:41: 70:df:fb:7f:ab:a3:ad:56:2d:4e:c9:07:9e:44:03:be:67:85: 3b:7e:04:57:73:ee:36:52:97:e3:7b:97:95:d5:7e:40:5e:6a: c6:eb:84:16:41:22:bc:7a:f2:72:5f:04:d8:32:1e:53:cc:0c: c2:f4:a9:83:c6:bf:ed:7c:23:30:4f:68:1f:1b:73:ec:a2:f9: 82:09:16:f7:1d:ac:8e:2c:1f:1f:2e:63:43:f7:10:88:e8:c9: 76:33:82:f7:46:87:31:c6:5c:6b:0d:ff:b2:db:62:0f:12:9d: 0b:43:15:4c:84:d6:a9:e9:e3:e6:54:89:e2:68:c2:57:22:50: fb:be:62:9a:2b:d4:12:4f:8d:37:4f:04:d5:24:84:ff:bc:9e: 5b:45:9a:23:6c:f7:f6:81:fb:78:10:ab:76:8c:77:93:5f:0d: 2d:5f:f2:a7:79:dc:69:7d:ad:f3:36:f4:fa:5a:3f:48:a0:84: 28:01:c4:6b:e8:6f:67:37:ab:76:1f:de:55:ec:b2:2c:af:dd: 34:62:a4:32:8e:72:6d:1e:01:53:05:43:1c:2b:0b:d0:37:29: 9e:a6:d4:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Reodl731cBnAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OWVjZTA4MzUtZTYxYi00OGQ2LWE2YjctNmYxZmU5YzE4YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYDHRny6MAtjLpd9fXe+Wv3KgKP8D9RL2Cps ljzPgSxyNubDyYnc1NNOMwOohMswLAeFnoPZ+onFQ03/12jIREyNBUB0/usk75u5 CESzxrjE04KLVtJOUKegWQzCKuwX1nmQ+EWVKIVDbm/l3vI7oXAXS9z2RkVGn6rG EwxOmXqseySm4H9+Qhl4gP5FCCW7WKm66JlPPfjjZQoTdsbg5Ak3LjggmTrL/Wr0 MB2XPbtm3KcI3mD/tgWGtxRwSwc8Q/++0mELtc1rdhEytFLEDH+pQGHQ67p33Rxs nDyBB1n2gWr/o1o0kA0CJb7gkklv6zyZQ7M5vk8uBu0tm8VZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqWCzlJ+0YBZUT/R+SlwO/NiX5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvY2RhZWE5NTgtMTEzYy0z OTMzLTg5ZDEtZWFkYjc4NmVlYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSpJnmoBnwwGId18z4M6cECWuuLP8k0GKW3ygGn5M3hRh33QXDf+3+r o61WLU7JB55EA75nhTt+BFdz7jZSl+N7l5XVfkBeasbrhBZBIrx68nJfBNgyHlPM DML0qYPGv+18IzBPaB8bc+yi+YIJFvcdrI4sHx8uY0P3EIjoyXYzgvdGhzHGXGsN /7LbYg8SnQtDFUyE1qnp4+ZUieJowlciUPu+Ypor1BJPjTdPBNUkhP+8nltFmiNs 9/aB+3gQq3aMd5NfDS1f8qd53Gl9rfM29PpaP0ighCgBxGvob2c3q3Yf3lXssiyv 3TRipDKOcm0eAVMFQxwrC9A3KZ6m1P4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:38:00 2025 by rpki-client