$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa File: 23449119-80cd-3377-8e2e-c365ff0bf70a.roa (raw, json) Hash identifier: IVLEQD48UGVfclTOOEe39eaoaRJq3l0dYWFcLk4FvhY= Subject key identifier: 3D:2B:6D:1A:F3:76:24:1C:D6:C3:F1:C4:09:50:A3:BD:4F:3F:70:8E Certificate issuer: /CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Certificate serial: 010D0C9F4328584AD2CED6F14EB5E9FE37BCD1A0 Authority key identifier: 45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa Signing time: Mon 11 Aug 2025 17:57:16 +0000 ROA not before: Mon 11 Aug 2025 17:57:16 +0000 ROA not after: Sun 09 Nov 2025 18:57:16 +0000 asID: 33091 IP address blocks: 136.159.0.0/16 maxlen: 16 198.161.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:ce:d6:f1:4e:b5:e9:fe:37:bc:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Validity Not Before: Aug 11 17:57:16 2025 GMT Not After : Nov 9 18:57:16 2025 GMT Subject: CN=a04c20c0-7c36-474a-aaa6-d8b5c3b007c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:7f:4a:5d:1c:ca:22:de:8c:63:c9:b3:43: aa:93:c7:40:3b:f1:83:90:7e:a2:64:fc:eb:8d:91: f6:85:d5:c2:dc:5c:f5:de:d8:6c:0a:31:36:17:3d: 9c:d2:f0:0c:ab:e4:01:91:b2:48:90:77:83:9d:97: 72:ab:11:16:75:4e:c5:0f:c6:87:b8:1f:fa:25:e5: 28:e8:94:48:c5:c4:25:8a:4f:d5:ab:e4:2f:33:25: 05:09:07:eb:8a:82:02:e5:3f:27:af:1e:e5:0f:d5: 24:0d:c8:05:43:40:26:e8:16:7b:b2:7a:74:56:41: ac:15:d7:a5:1c:1a:99:9e:ec:00:03:b8:f9:ab:dc: 61:81:ec:a6:86:91:d4:b6:9c:37:62:a4:1f:dd:6d: 48:7d:53:a8:ae:c1:cd:11:d6:c6:88:bc:7a:fa:ea: 29:7f:9d:3d:4a:af:3c:a3:5f:41:17:3d:27:1c:ee: 4e:b5:69:38:6b:92:70:aa:3b:18:34:53:be:39:4e: d5:af:19:18:3f:ed:57:5f:2f:bd:7d:e2:5b:af:50: a0:5b:9b:e4:d6:de:21:ac:20:c9:71:68:cc:5f:0c: 99:e9:7b:94:df:d9:e9:2a:5d:40:29:68:61:96:b1: 62:89:8f:cd:7a:77:65:1f:a7:40:85:15:72:51:1c: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:6D:1A:F3:76:24:1C:D6:C3:F1:C4:09:50:A3:BD:4F:3F:70:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl X509v3 Authority Key Identifier: keyid:45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer sbgp-ipAddrBlock: critical IPv4: 136.159.0.0/16 198.161.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:7b:eb:27:78:a9:4f:2a:9f:c4:d7:b8:58:c6:64:a0:cd: e0:88:db:fe:06:d1:8b:1e:0a:4c:87:34:fc:e9:22:58:64:e6: ae:4f:81:91:ce:08:bf:df:50:b1:4b:48:7e:b4:8b:3f:67:b1: 84:75:16:c6:14:da:57:5b:51:85:42:a8:d4:a3:5b:70:d8:30: 0b:4c:8d:3e:f7:77:df:72:06:24:4c:6d:58:24:a9:e5:41:b6: 81:ee:76:95:68:7d:7c:8f:7f:75:04:75:cb:b1:50:f0:49:cf: db:f4:fa:2f:85:05:0a:05:91:72:ef:62:0e:d1:b4:2f:14:37: 2a:51:08:07:9e:66:3b:1e:8d:59:2e:25:24:f2:3d:39:79:f9: c0:65:cf:b6:ac:dd:43:77:d9:69:ba:26:c3:4c:27:49:b1:20: 1d:85:29:40:15:31:b8:88:40:68:00:71:36:2b:d0:51:49:3b: 69:ba:51:9c:22:1e:36:fe:7f:5f:f4:99:90:ae:ba:4d:78:13: 33:50:1d:02:d7:6c:f0:10:2d:c4:72:01:a9:70:72:bf:10:cb: b3:cb:d3:e8:a5:a0:28:b8:2a:2a:fc:f4:8c:16:bd:76:8d:90: b9:55:25:d3:c9:9b:ff:21:a2:88:fc:9f:88:47:f9:9f:f3:e2: 41:c9:65:41 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErSztbxTrXp/je80aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdkMjQ3MTItNTZjMi00NTk3LTk1NzMtMGUyYjFiN2Mx MDI3MB4XDTI1MDgxMTE3NTcxNloXDTI1MTEwOTE4NTcxNlowLzEtMCsGA1UEAxMk YTA0YzIwYzAtN2MzNi00NzRhLWFhYTYtZDhiNWMzYjAwN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqR/Sl0cyiLejGPJs0Oqk8dAO/GDkH6iZPzr jZH2hdXC3Fz13thsCjE2Fz2c0vAMq+QBkbJIkHeDnZdyqxEWdU7FD8aHuB/6JeUo 6JRIxcQlik/Vq+QvMyUFCQfrioIC5T8nrx7lD9UkDcgFQ0Am6BZ7snp0VkGsFdel HBqZnuwAA7j5q9xhgeymhpHUtpw3YqQf3W1IfVOorsHNEdbGiLx6+uopf509Sq88 o19BFz0nHO5OtWk4a5JwqjsYNFO+OU7VrxkYP+1XXy+9feJbr1CgW5vk1t4hrCDJ cWjMXwyZ6XuU39npKl1AKWhhlrFiiY/NendlH6dAhRVyURy8HwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFD0rbRrzdiQc1sPxxAlQo71PP3COMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2Qy NDcxMi01NmMyLTQ1OTctOTU3My0wZTJiMWI3YzEwMjcvMjM0NDkxMTktODBjZC0z Mzc3LThlMmUtYzM2NWZmMGJmNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdkMjQ3MTItNTZjMi00NTk3LTk1 NzMtMGUyYjFiN2MxMDI3LzQ3ZDI0NzEyLTU2YzItNDU5Ny05NTczLTBlMmIxYjdj MTAyNy5jcmwwHwYDVR0jBBgwFoAURbh374TgN8iQhNUBsMpVqcOmAYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2QyNDcxMi01NmMyLTQ1OTctOTU3My0wZTJi MWI3YzEwMjcuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAiJ8DBADG oX8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXGV76yd4qU8qn8TXuFjGZKDN4Ijb/gbRix4KTIc0/OkiWGTm rk+Bkc4Iv99QsUtIfrSLP2exhHUWxhTaV1tRhUKo1KNbcNgwC0yNPvd333IGJExt WCSp5UG2ge52lWh9fI9/dQR1y7FQ8EnP2/T6L4UFCgWRcu9iDtG0LxQ3KlEIB55m Ox6NWS4lJPI9OXn5wGXPtqzdQ3fZabomw0wnSbEgHYUpQBUxuIhAaABxNivQUUk7 abpRnCIeNv5/X/SZkK66TXgTM1AdAtds8BAtxHIBqXByvxDLs8vT6KWgKLgqKvz0 jBa9do2QuVUl08mb/yGiiPyfiEf5n/PiQcllQQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:25:14 2025 by rpki-client