$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/43fe636c-78d9-33b1-8808-b76a2f7df404.roa File: 43fe636c-78d9-33b1-8808-b76a2f7df404.roa (raw, json) Hash identifier: iVmKaS4RZMbEGHlQzPKGW3z0olnQNJjyAPrYkUiaKqs= Subject key identifier: 47:33:E6:BE:6B:89:06:91:59:55:8A:51:28:60:C6:89:77:53:9E:3D Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584AC2E0D8A293F86DBC971D58B0 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/43fe636c-78d9-33b1-8808-b76a2f7df404.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 11281 IP address blocks: 23.173.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d8:a2:93:f8:6d:bc:97:1d:58:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0ec49eec-f96f-43af-8390-f72da8764390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:7d:a1:e7:f7:32:be:b9:6f:dd:cd:6d:57: 80:eb:ca:b3:c7:e1:8b:4a:75:0a:3e:fb:af:1e:13: d4:9e:2a:ea:32:5f:ac:d1:26:d1:38:59:b0:ed:f9: 75:2d:74:cc:a9:f7:3f:54:a0:96:5e:76:71:70:e9: ed:6c:0e:87:ef:8f:e6:74:2a:4f:2e:85:52:39:e4: 51:a1:ab:54:be:98:3d:0a:19:e5:4e:22:07:bc:0c: c3:ee:a0:a9:54:74:77:c0:b1:f2:3e:90:7e:3d:ef: 8b:73:d7:41:fe:9e:73:8f:90:f4:d4:a6:39:7f:94: 08:69:68:a7:22:02:17:e0:67:be:07:60:90:ff:8b: 3a:86:55:14:96:32:e2:5a:51:37:03:c8:ad:37:33: 06:03:56:3c:76:a9:fb:ea:56:90:c2:ba:e8:a4:93: f6:21:1d:dd:42:94:2f:3b:9d:31:1c:35:f8:5c:14: 84:28:b7:77:d4:10:34:7b:36:1c:b9:21:3f:34:f9: 89:d0:65:02:d2:18:a8:f3:72:19:d6:dd:9f:e5:14: 35:fa:d2:8e:da:7c:a4:10:80:41:88:4e:c8:79:a1: 0d:c4:74:75:79:b0:6f:f3:e4:30:a8:8e:44:8c:23: 11:f6:e6:41:ca:1b:9d:0a:4f:27:a7:a2:67:ed:ab: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:33:E6:BE:6B:89:06:91:59:55:8A:51:28:60:C6:89:77:53:9E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/43fe636c-78d9-33b1-8808-b76a2f7df404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 23.173.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c7:73:5b:bf:17:7a:80:a2:0a:a4:93:74:20:74:bd:d3:2d: 96:88:b9:5f:54:2f:9d:35:29:21:53:e4:1f:91:11:de:62:83: 45:39:77:a6:eb:d0:22:2e:31:5c:74:fc:73:ad:f4:fa:ff:96: 0c:c6:7f:74:71:08:ea:05:f6:91:4c:62:5e:2a:6e:6c:19:41: 0d:7a:17:64:49:52:8e:04:ed:9b:89:be:76:93:ca:ee:c2:01: bd:c4:c3:1e:ab:ff:79:b8:86:12:e3:03:58:bc:12:f2:23:64: ec:60:99:6d:ef:a1:7f:7f:7c:00:51:11:cf:e3:fe:7f:48:9d: a7:97:63:27:dd:fe:1f:b8:d8:5e:9e:dc:98:8d:5a:b5:18:af: 5e:e0:32:62:72:ff:67:89:0d:b9:51:de:b2:94:ff:cc:5b:cc: b0:fa:74:b9:23:1c:1b:b8:ef:de:41:9d:b7:af:b4:1a:4e:9c: 88:99:27:e3:4b:3a:42:7a:ea:1d:5a:93:0b:6f:be:86:5c:de: 1c:9e:6a:2d:75:c3:9b:b3:ab:c2:0c:0a:f2:8d:7d:76:12:76: 3b:0e:40:9a:ce:13:13:e6:f5:3b:fa:3a:d8:c5:9c:83:8e:8b: ad:ef:84:5b:f1:a7:c3:34:f0:48:92:a3:1b:49:12:5c:81:60: 61:04:c1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Niik/htvJcdWLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGVjNDllZWMtZjk2Zi00M2FmLTgzOTAtZjcyZGE4NzY0MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa59oef3Mr65b93NbVeA68qzx+GLSnUKPvuv HhPUnirqMl+s0SbROFmw7fl1LXTMqfc/VKCWXnZxcOntbA6H74/mdCpPLoVSOeRR oatUvpg9ChnlTiIHvAzD7qCpVHR3wLHyPpB+Pe+Lc9dB/p5zj5D01KY5f5QIaWin IgIX4Ge+B2CQ/4s6hlUUljLiWlE3A8itNzMGA1Y8dqn76laQwrropJP2IR3dQpQv O50xHDX4XBSEKLd31BA0ezYcuSE/NPmJ0GUC0hio83IZ1t2f5RQ1+tKO2nykEIBB iE7IeaENxHR1ebBv8+QwqI5EjCMR9uZByhudCk8np6Jn7auUjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcz5r5riQaRWVWKUShgxol3U549MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvNDNmZTYzNmMtNzhkOS0z M2IxLTg4MDgtYjc2YTJmN2RmNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF63AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDHc1u/F3qAogqkk3QgdL3TLZaIuV9UL501KSFT5B+REd5ig0U5d6br 0CIuMVx0/HOt9Pr/lgzGf3RxCOoF9pFMYl4qbmwZQQ16F2RJUo4E7ZuJvnaTyu7C Ab3Ewx6r/3m4hhLjA1i8EvIjZOxgmW3voX9/fABREc/j/n9InaeXYyfd/h+42F6e 3JiNWrUYr17gMmJy/2eJDblR3rKU/8xbzLD6dLkjHBu4795BnbevtBpOnIiZJ+NL OkJ66h1akwtvvoZc3hyeai11w5uzq8IMCvKNfXYSdjsOQJrOExPm9Tv6OtjFnIOO i63vhFvxp8M08EiSoxtJElyBYGEEweU= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:07 2025 by rpki-client