$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: 0zqql3ueL4HPUo3VdZBgUfkjEjYb+OLPFxaPn6GJsNE= Subject key identifier: A4:7D:90:7F:A9:8A:AC:0A:C7:5A:8C:04:6B:98:E4:84:9C:3B:96:6D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BB2F7DBDBC4FF99976700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b2:f7:db:db:c4:ff:99:97:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d0c23920-e0c5-497e-8cc6-32b5dac97964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:08:3a:63:1b:11:e5:59:75:ca:d3:75:42: 27:c3:d8:59:d2:27:2d:ab:04:0a:6c:3d:ac:46:bd: b3:9e:ec:7d:e2:2e:60:fd:3c:5a:69:e9:5a:dd:1c: c8:e8:a4:38:cf:7f:dd:4b:c0:cd:b9:2f:79:1a:32: 06:c2:73:c3:b4:41:7a:4e:f1:10:4f:55:28:2d:56: c8:ed:f0:44:76:1d:b3:ff:8e:65:7e:92:e6:a7:95: 76:7c:8d:52:1b:5e:f7:9f:3a:e6:48:9a:ea:22:a0: a3:f8:df:28:08:79:d3:9e:13:da:90:9d:81:08:9c: aa:d9:03:65:a2:22:a8:ec:24:c3:b7:83:dc:15:4f: b1:d4:98:33:24:8f:35:49:82:03:0e:a0:91:c6:75: 24:32:d4:db:21:03:76:94:7b:6e:f5:a8:75:30:3f: a8:c6:d3:94:d7:7a:e3:09:5f:e8:3f:df:38:8c:88: fd:ca:d2:6e:de:93:70:5c:33:7a:e0:5e:df:0f:32: 5d:a8:02:0d:ea:0b:8d:98:8e:99:ac:98:aa:ff:16: b4:35:f8:b5:36:d0:05:d0:7d:1e:fe:97:c3:e1:ef: 92:e7:4e:91:92:44:c5:14:02:23:fb:c1:86:d2:d0: 52:0e:39:3b:9d:44:fd:f4:18:d2:ba:db:55:a2:3e: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:90:7F:A9:8A:AC:0A:C7:5A:8C:04:6B:98:E4:84:9C:3B:96:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7c:b9:93:cf:e0:75:21:b1:07:70:60:f6:6d:e2:84:0e:09: 0c:4e:e2:18:22:00:bc:31:5d:68:a3:0a:14:93:e7:dd:8b:89: 4d:05:25:ca:92:dc:3e:cd:3a:4a:09:2b:0f:da:e2:3d:66:cc: 02:f5:58:cd:01:ee:15:3f:73:b1:cc:b1:d3:56:d5:1d:9f:cb: 84:02:17:88:bc:68:ad:fc:1a:11:1e:1c:9e:fa:4d:ba:b3:46: 71:0b:00:ed:2c:4a:76:81:a5:a2:c7:10:8d:f0:93:8f:56:0d: af:17:55:24:8b:70:0c:11:aa:c4:7f:2f:4d:84:de:8f:29:27: 87:d7:a6:8f:68:ee:2f:a3:98:c0:69:43:4b:af:1a:a1:18:66: 68:7a:24:1c:da:de:9c:e6:01:2b:0d:18:6b:cd:b9:fb:50:bd: 27:0c:76:ac:60:73:3a:a7:3b:ec:d3:0b:16:11:b1:0f:88:d9: 22:b1:d9:c2:9e:27:08:b3:12:a8:6c:1f:1f:eb:17:6f:4f:41: 7b:09:8d:40:81:a9:a7:e5:bc:db:a1:ff:b5:d1:b6:b5:57:41: cd:4d:ae:eb:d4:0a:60:49:b2:de:e4:9f:44:4c:05:5a:bb:01: 04:b4:83:75:1e:1a:b2:7c:d3:ca:91:12:74:78:2a:ea:93:ac: 83:82:86:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7L329vE/5mXZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDBjMjM5MjAtZTBjNS00OTdlLThjYzYtMzJiNWRhYzk3OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4IOmMbEeVZdcrTdUInw9hZ0ictqwQKbD2s Rr2znux94i5g/Txaaela3RzI6KQ4z3/dS8DNuS95GjIGwnPDtEF6TvEQT1UoLVbI 7fBEdh2z/45lfpLmp5V2fI1SG173nzrmSJrqIqCj+N8oCHnTnhPakJ2BCJyq2QNl oiKo7CTDt4PcFU+x1JgzJI81SYIDDqCRxnUkMtTbIQN2lHtu9ah1MD+oxtOU13rj CV/oP984jIj9ytJu3pNwXDN64F7fDzJdqAIN6guNmI6ZrJiq/xa0Nfi1NtAF0H0e /pfD4e+S506RkkTFFAIj+8GG0tBSDjk7nUT99BjSuttVoj7r0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR9kH+piqwKx1qMBGuY5IScO5ZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp8uZPP4HUhsQdwYPZt4oQOCQxO4hgiALwxXWijChST592LiU0FJcqS 3D7NOkoJKw/a4j1mzAL1WM0B7hU/c7HMsdNW1R2fy4QCF4i8aK38GhEeHJ76Tbqz RnELAO0sSnaBpaLHEI3wk49WDa8XVSSLcAwRqsR/L02E3o8pJ4fXpo9o7i+jmMBp Q0uvGqEYZmh6JBza3pzmASsNGGvNuftQvScMdqxgczqnO+zTCxYRsQ+I2SKx2cKe JwizEqhsHx/rF29PQXsJjUCBqaflvNuh/7XRtrVXQc1NruvUCmBJst7kn0RMBVq7 AQS0g3UeGrJ808qREnR4KuqTrIOChhs= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:43 2025 by rpki-client