$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa File: d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa (raw, json) Hash identifier: R1WsMxrMPJW73hjwChV5rNdcTpsvuxKxEtNreE2do4E= Subject key identifier: 80:12:C4:A0:4D:48:6B:4B:AA:C1:AC:9A:D8:11:D5:7D:CC:08:30:47 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BACA1E864D6DFC53354C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19437 IP address blocks: 23.235.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ac:a1:e8:64:d6:df:c5:33:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=42f0e1b4-fc70-4b24-a0a1-34bf2a20f84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:7d:51:75:43:cc:a8:35:cf:fd:8a:3c:96: b6:40:99:d6:a3:af:59:85:d0:bb:34:3d:a5:87:b5: ae:66:f8:b5:aa:d9:ce:92:02:53:c7:b0:49:91:99: 3d:6b:15:74:8e:3b:47:6d:da:b4:34:03:3b:a3:ec: 5b:8c:be:c0:bb:a6:0a:d3:26:c1:06:c1:77:84:b4: 41:46:7f:92:35:13:83:1b:9b:ff:91:cb:57:82:8a: b6:85:b8:d1:57:a4:74:3b:dc:82:da:27:51:d1:61: 7d:a2:c9:dd:f1:5d:fa:2b:dc:43:34:ea:a2:30:38: 40:f1:c9:94:c8:ad:0a:3a:2a:ee:a8:8a:62:1b:27: bd:19:63:4a:36:e6:e8:9c:2b:f3:2b:35:a4:98:7a: 31:66:44:ca:cb:62:dd:28:a9:20:3d:3f:94:c1:f2: 55:73:32:96:f4:9d:02:0c:6e:5f:6a:ed:27:92:f3: 8e:bf:b5:ef:9f:06:87:28:c5:c7:00:97:0e:ea:5b: b9:f4:7a:3c:12:6b:15:88:e9:ec:99:ed:f3:f8:85: 2f:00:56:c4:a1:b2:4d:ad:1e:b4:b5:fe:78:b3:ec: af:74:24:7e:22:85:44:1b:e8:89:62:12:54:dc:0e: 99:fa:97:d3:d8:cf:cd:8e:6c:28:a5:2f:c4:ee:16: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:C4:A0:4D:48:6B:4B:AA:C1:AC:9A:D8:11:D5:7D:CC:08:30:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5b:9e:94:df:32:10:3d:60:e5:a8:d3:e7:43:2d:3f:56:2d: 3b:19:59:a8:28:40:63:1b:1a:6f:fb:4b:ea:22:fa:70:9b:5a: 56:82:81:79:9e:7b:74:0e:a1:96:b3:f8:00:f0:de:17:bc:97: 12:4a:dc:f7:c8:35:84:bf:76:52:38:63:38:fe:85:41:0e:00: 39:f0:21:17:57:25:81:ef:51:24:f5:bd:f4:88:f6:03:19:da: 00:f0:19:86:3d:eb:40:1f:d7:f4:a6:a9:3e:cb:46:7d:3d:0d: db:e9:d7:cd:80:2d:26:bb:a8:13:ff:f8:95:05:5e:3b:c8:e8: 7c:94:4c:00:32:86:05:98:62:2b:1d:b1:6b:26:fe:a7:90:00: 2b:49:de:5c:5e:09:19:25:16:e7:1b:65:13:1f:ba:5a:e3:7d: 0f:24:3d:ad:fe:1e:99:d3:a8:0a:42:ac:a5:ad:da:fb:20:82: e2:8f:68:9f:ef:ad:59:2f:31:cc:0a:ad:7a:63:f1:e1:3d:54: 52:c2:e7:97:43:c5:47:1d:ae:32:de:70:82:da:75:34:56:6f: 32:6c:8f:3f:8e:a4:13:a5:9b:07:7a:2f:e5:f2:58:2b:d4:88: 5e:db:97:71:1c:09:54:a5:6f:dd:6e:dc:2d:8a:3a:9b:b0:27: 18:c4:04:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6yh6GTW38UzVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDJmMGUxYjQtZmM3MC00YjI0LWEwYTEtMzRiZjJhMjBmODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04p9UXVDzKg1z/2KPJa2QJnWo69ZhdC7ND2l h7WuZvi1qtnOkgJTx7BJkZk9axV0jjtHbdq0NAM7o+xbjL7Au6YK0ybBBsF3hLRB Rn+SNRODG5v/kctXgoq2hbjRV6R0O9yC2idR0WF9osnd8V36K9xDNOqiMDhA8cmU yK0KOiruqIpiGye9GWNKNubonCvzKzWkmHoxZkTKy2LdKKkgPT+UwfJVczKW9J0C DG5fau0nkvOOv7XvnwaHKMXHAJcO6lu59Ho8EmsViOnsme3z+IUvAFbEobJNrR60 tf54s+yvdCR+IoVEG+iJYhJU3A6Z+pfT2M/NjmwopS/E7hayEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIASxKBNSGtLqsGsmtgR1X3MCDBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDdmYzQxMWItNjZiOS0z NWYyLTliYWMtMWE5MWIxOGVlMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpbnpTfMhA9YOWo0+dDLT9WLTsZWagoQGMbGm/7S+oi+nCbWlaCgXme e3QOoZaz+ADw3he8lxJK3PfINYS/dlI4Yzj+hUEOADnwIRdXJYHvUST1vfSI9gMZ 2gDwGYY960Af1/SmqT7LRn09Ddvp182ALSa7qBP/+JUFXjvI6HyUTAAyhgWYYisd sWsm/qeQACtJ3lxeCRklFucbZRMfulrjfQ8kPa3+HpnTqApCrKWt2vsgguKPaJ/v rVkvMcwKrXpj8eE9VFLC55dDxUcdrjLecILadTRWbzJsjz+OpBOlmwd6L+XyWCvU iF7bl3EcCVSlb91u3C2KOpuwJxjEBE4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:08 2025 by rpki-client