$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa File: 66807622-f529-3717-a7e3-9e3f1a257327.roa (raw, json) Hash identifier: ZzEJ5YhxWGsFlCpDcqPr2ZObBpI90F/IUABujvtQgIE= Subject key identifier: 00:8A:86:8A:40:D7:79:FE:EB:B2:C9:0D:9E:85:0C:D5:52:2D:75:B1 Certificate issuer: /CN=f2eccad3-9416-4755-b75e-5a77a272beb3 Certificate serial: 010D0C9F4328584AE4610CF0877A6449A824F9D0 Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 19625 IP address blocks: 23.188.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0c:f0:87:7a:64:49:a8:24:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=55c37c5a-1c84-435f-9619-a099115af77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:10:99:97:67:69:0e:a2:9d:7d:66:25:2c: 82:92:cd:5c:f9:ff:d6:29:d6:46:88:2f:5b:86:b7: c8:37:ed:e1:b1:04:53:86:0a:3f:08:ef:2e:b6:f5: bf:5c:ad:08:7c:10:39:b8:1e:dd:4b:50:42:53:46: 0b:84:54:ac:a3:69:cc:8f:d4:58:bb:e1:eb:14:cd: 5a:f0:e4:4f:11:ae:ec:f9:3b:29:bc:d1:70:75:a2: 61:c6:e4:1d:96:14:ab:35:09:7c:7a:ed:31:7a:2f: b7:f6:92:13:13:b1:0b:6d:d3:02:bd:46:64:85:28: e8:21:62:cf:4d:41:50:3e:e1:e0:b8:20:87:39:93: af:ec:13:7b:ce:06:e9:9b:7b:0f:e5:c5:3f:cf:62: 32:d0:fe:6c:fc:e0:17:5e:85:c3:4f:29:b1:80:1b: cd:33:f2:5b:fd:cc:cc:97:e0:e4:b9:fc:8c:45:9e: 26:b6:7e:dc:87:6a:5f:5a:71:a6:d6:f3:b7:83:b5: e5:ac:d1:57:a3:ff:49:a4:b4:49:2a:6f:91:2e:f7: 7a:e0:df:8c:8b:9c:98:95:54:1c:b9:a2:cc:c2:8d: 58:28:1e:9b:f7:9a:88:73:42:dc:07:73:f7:41:7c: 46:dc:61:fd:97:b5:82:70:b5:89:cb:4a:bb:fa:03: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8A:86:8A:40:D7:79:FE:EB:B2:C9:0D:9E:85:0C:D5:52:2D:75:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl X509v3 Authority Key Identifier: keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer sbgp-ipAddrBlock: critical IPv4: 23.188.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:34:9f:2c:20:f8:88:bb:75:a7:b4:d9:63:2a:50:49:95:e3: 54:60:7f:10:ea:1f:ef:0c:1d:fe:50:66:73:c3:de:e8:3c:8d: 77:09:b9:fe:ac:3d:e7:f9:b9:6e:21:6a:19:c7:30:79:cc:9f: 66:bf:87:f4:b4:ab:4f:35:1a:f3:e9:fa:63:6a:44:3f:45:15: b2:25:12:07:2e:4d:1a:38:0c:19:f3:3a:1f:0d:87:56:a8:0a: 5d:fe:68:d0:f9:9b:85:31:17:99:96:14:16:d2:22:2e:4e:d0: 7f:3c:6f:0d:6b:ce:ab:e1:e1:8b:89:5b:de:f0:e2:26:39:4e: 5b:b9:38:46:62:53:cb:e4:f1:fc:10:25:37:f9:21:a0:ec:ce: 3b:b9:3d:e0:49:7e:c3:fe:13:84:14:df:fd:13:51:7c:a8:16: f1:e8:44:ba:a4:45:ac:0d:9c:c7:e2:69:a6:84:cc:71:c0:16: 13:49:ad:b2:1a:5b:c7:d1:36:06:72:b8:3f:78:50:4c:b7:d1: 70:af:ab:06:1e:a7:65:87:e7:3a:d5:b7:d5:e0:96:8c:31:10: 34:31:d2:ab:f5:10:e5:7d:56:48:7d:a9:f6:b7:86:83:e6:53: 3a:df:92:cb:49:c1:ab:77:59:fd:ef:a0:44:aa:1a:c8:da:14: b4:ba:3d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQzwh3pkSagk+dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJlY2NhZDMtOTQxNi00NzU1LWI3NWUtNWE3N2EyNzJi ZWIzMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NTVjMzdjNWEtMWM4NC00MzVmLTk2MTktYTA5OTExNWFmNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1QQmZdnaQ6inX1mJSyCks1c+f/WKdZGiC9b hrfIN+3hsQRThgo/CO8utvW/XK0IfBA5uB7dS1BCU0YLhFSso2nMj9RYu+HrFM1a 8ORPEa7s+TspvNFwdaJhxuQdlhSrNQl8eu0xei+39pITE7ELbdMCvUZkhSjoIWLP TUFQPuHguCCHOZOv7BN7zgbpm3sP5cU/z2Iy0P5s/OAXXoXDTymxgBvNM/Jb/czM l+DkufyMRZ4mtn7ch2pfWnGm1vO3g7XlrNFXo/9JpLRJKm+RLvd64N+Mi5yYlVQc uaLMwo1YKB6b95qIc0LcB3P3QXxG3GH9l7WCcLWJy0q7+gMT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACKhopA13n+67LJDZ6FDNVSLXWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVj Y2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3YTI3MmJlYjMvNjY4MDc2MjItZjUyOS0z NzE3LWE3ZTMtOWUzZjFhMjU3MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjJlY2NhZDMtOTQxNi00NzU1LWI3 NWUtNWE3N2EyNzJiZWIzL2YyZWNjYWQzLTk0MTYtNDc1NS1iNzVlLTVhNzdhMjcy YmViMy5jcmwwHwYDVR0jBBgwFoAUTyvg/2IL6iEkTNbimcBC2Ks65g4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVjY2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3 YTI3MmJlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc0nywg+Ii7dae02WMqUEmV41RgfxDqH+8MHf5QZnPD3ug8jXcJuf6s Pef5uW4hahnHMHnMn2a/h/S0q081GvPp+mNqRD9FFbIlEgcuTRo4DBnzOh8Nh1ao Cl3+aND5m4UxF5mWFBbSIi5O0H88bw1rzqvh4YuJW97w4iY5Tlu5OEZiU8vk8fwQ JTf5IaDszju5PeBJfsP+E4QU3/0TUXyoFvHoRLqkRawNnMfiaaaEzHHAFhNJrbIa W8fRNgZyuD94UEy30XCvqwYep2WH5zrVt9XglowxEDQx0qv1EOV9Vkh9qfa3hoPm UzrfkstJwat3Wf3voESqGsjaFLS6PWE= -----END CERTIFICATE-----Generated at Sun Aug 24 09:13:59 2025 by rpki-client