$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa File: 4c688d32-0fde-330d-94c8-0cad4282e0dd.roa (raw, json) Hash identifier: ZCsbupTJ9XaUWXP63yiv19Ivfn37T4I5ugETFdnfsDI= Subject key identifier: C6:4D:50:46:00:ED:C2:A2:17:59:0F:77:45:01:92:58:7C:10:10:46 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BB3233F746F88DBEE2500 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 20454 IP address blocks: 23.235.240.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b3:23:3f:74:6f:88:db:ee:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5dad3d72-8e0d-406b-b0ad-ef36b0243f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:8c:09:08:d8:4b:5f:97:a7:23:f3:76:cd: 0e:02:ce:43:42:52:41:ae:73:5b:61:0c:14:91:08: 27:81:f6:89:b1:4f:15:c8:89:d3:f4:a2:ef:1a:c2: d3:fb:52:a3:ee:37:51:f2:a5:cf:bf:d3:75:2d:8e: 08:3f:98:77:83:4e:f7:15:5b:11:64:fe:9d:2a:c4: f9:fb:f9:ae:8a:50:09:b5:1a:83:1a:40:54:4a:3e: aa:42:94:7d:f9:ae:88:e4:fb:6c:94:5a:96:ac:70: f0:d7:ea:4d:72:61:f0:d2:fb:67:b7:19:66:bb:6a: 2e:07:18:ff:0a:f6:3d:13:d2:47:31:19:8f:c9:bd: 7f:5c:48:1d:1f:c8:48:47:0b:8c:cf:1f:e7:d2:6e: e1:84:9f:a4:8e:64:25:3a:25:11:b5:7d:31:ca:41: 40:cd:89:46:8d:06:30:99:fb:82:3a:87:06:13:fd: 6e:fb:4c:17:ce:b1:3a:f0:8c:c2:36:c2:a4:a3:a0: 80:ac:0b:0f:76:58:80:bd:7d:ff:3c:5a:bf:14:14: a1:97:28:f1:84:25:73:7d:a0:ad:8e:93:1c:ed:98: 80:2c:1d:88:1e:92:68:94:51:fe:d6:64:af:54:0b: 34:1c:31:9e:b7:11:69:35:9b:70:ea:11:85:af:30: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:50:46:00:ED:C2:A2:17:59:0F:77:45:01:92:58:7C:10:10:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4c688d32-0fde-330d-94c8-0cad4282e0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:03:b9:14:1e:fd:32:1a:4a:25:4b:c4:c3:9d:4a:0f:42:f2: 1f:6d:b0:c8:fb:ed:f2:4d:fa:8c:11:87:53:d9:c9:5b:74:1e: b0:22:4e:7d:54:68:99:59:6d:a5:94:27:ff:2b:50:b0:70:a8: 97:f2:13:b7:cb:51:06:31:00:fe:44:d3:a6:e2:ed:35:65:cf: d4:5f:ed:a9:74:eb:5e:ae:23:3c:f4:8e:86:3f:32:fe:69:dc: 4e:c1:b8:77:77:da:46:c9:d6:ed:85:fc:19:1a:eb:48:2f:d4: 30:84:95:0a:a6:39:c5:22:22:37:2b:e8:43:9c:b0:c3:bd:c2: e9:43:fb:a6:39:c6:56:6c:14:53:41:78:72:bd:42:1f:84:05: cd:47:40:5b:f0:46:7b:ed:97:3f:39:8b:7a:e2:b5:78:9e:e3: 43:11:47:c6:b2:58:3e:db:ca:34:1d:05:97:fc:ce:4d:f7:07: fb:bb:26:cf:f5:4f:62:d6:d1:79:13:b5:df:31:59:2a:8f:e3: 13:ea:04:96:7b:54:66:2e:28:56:d1:87:d2:83:ca:7c:90:77: 2a:b2:10:d9:89:0d:1e:6b:57:49:2d:ae:08:a7:1d:65:f1:8a: 54:23:6b:95:4f:3a:13:76:69:21:f3:ff:21:d1:a9:72:8a:c4: a9:bb:40:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7MjP3RviNvuJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWRhZDNkNzItOGUwZC00MDZiLWIwYWQtZWYzNmIwMjQzZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOyMCQjYS1+XpyPzds0OAs5DQlJBrnNbYQwU kQgngfaJsU8VyInT9KLvGsLT+1Kj7jdR8qXPv9N1LY4IP5h3g073FVsRZP6dKsT5 +/muilAJtRqDGkBUSj6qQpR9+a6I5PtslFqWrHDw1+pNcmHw0vtntxlmu2ouBxj/ CvY9E9JHMRmPyb1/XEgdH8hIRwuMzx/n0m7hhJ+kjmQlOiURtX0xykFAzYlGjQYw mfuCOocGE/1u+0wXzrE68IzCNsKko6CArAsPdliAvX3/PFq/FBShlyjxhCVzfaCt jpMc7ZiALB2IHpJolFH+1mSvVAs0HDGetxFpNZtw6hGFrzD8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZNUEYA7cKiF1kPd0UBklh8EBBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGM2ODhkMzItMGZkZS0z MzBkLTk0YzgtMGNhZDQyODJlMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkDuRQe/TIaSiVLxMOdSg9C8h9tsMj77fJN+owRh1PZyVt0HrAiTn1U aJlZbaWUJ/8rULBwqJfyE7fLUQYxAP5E06bi7TVlz9Rf7al0616uIzz0joY/Mv5p 3E7BuHd32kbJ1u2F/Bka60gv1DCElQqmOcUiIjcr6EOcsMO9wulD+6Y5xlZsFFNB eHK9Qh+EBc1HQFvwRnvtlz85i3ritXie40MRR8ayWD7byjQdBZf8zk33B/u7Js/1 T2LW0XkTtd8xWSqP4xPqBJZ7VGYuKFbRh9KDynyQdyqyENmJDR5rV0ktrginHWXx ilQja5VPOhN2aSHz/yHRqXKKxKm7QJM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:35 2025 by rpki-client