$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: 6vnb4v82V4YGOmF8sDgIz9bJaqbs7W3hRPBZCcCHkzU= Subject key identifier: 2E:22:0F:57:DE:83:F0:DD:B6:5B:79:C8:63:6A:99:AC:24:EC:73:A3 Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F4328584AA42B83E53C40F86243DC5DC0 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:83:e5:3c:40:f8:62:43:dc:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=a938fe97-bdc8-4bdb-8886-5a449e69c1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:d9:25:7f:60:12:54:5a:87:17:c4:5c:b3: 43:a8:63:0f:57:b6:c3:01:26:52:7c:c4:9b:11:47: 12:bc:76:73:08:32:94:99:a4:cd:fe:25:19:32:bb: 1e:8e:25:6b:ed:7f:a4:43:d7:c8:0a:b1:0f:d9:df: 2e:b7:cf:00:c3:78:bd:9c:66:8e:5c:43:3e:c4:62: b6:83:e6:10:fe:c4:a6:8c:34:ce:da:b4:66:1e:8c: 5a:45:57:0a:b9:44:f3:cb:a5:bb:60:9f:d5:c9:f9: df:41:2a:34:66:54:b9:27:5c:c9:61:cc:8f:45:06: 25:84:98:17:96:79:20:7f:69:82:49:cc:e3:b0:ae: aa:2f:bb:a9:88:d7:80:d3:d9:d7:35:fe:b4:b2:3f: a7:98:2e:65:3c:82:fd:37:d9:20:7b:83:9b:9d:36: d2:d0:29:20:f4:82:2b:09:5f:67:93:32:69:02:61: 02:69:53:84:68:f1:c0:5a:85:35:09:59:72:6e:ad: 85:88:a2:e7:2a:47:dc:cf:d7:2b:9f:48:ae:62:46: 51:cf:fd:de:87:96:e6:4e:ca:e8:c9:17:41:52:a4: c1:f7:88:74:80:50:33:cd:92:51:3a:7b:38:b8:78: 00:fa:1f:7f:31:11:23:d3:c7:60:a6:0b:b2:56:8c: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:22:0F:57:DE:83:F0:DD:B6:5B:79:C8:63:6A:99:AC:24:EC:73:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8c:03:76:d8:e2:6a:e0:6e:3c:f5:e0:98:14:a0:a8:43:2b: a1:21:0b:17:8d:d4:e1:6a:60:ec:da:0b:75:57:e5:13:bf:1b: 4d:3c:e1:7a:67:0a:26:13:c0:78:ff:d8:9a:56:cd:76:bc:c1: e1:d6:7f:9d:fe:c5:6c:97:b8:8e:8d:09:d4:5b:0d:bb:df:c6: 80:48:2e:28:9a:1f:9c:d8:f4:a8:96:45:26:4b:a3:f2:4c:03: 81:88:8f:b7:6f:b3:4b:9e:3f:1b:e7:f6:29:3f:da:65:ef:ed: 88:16:6e:4f:29:1b:ad:ba:e6:60:e9:16:7a:d9:6f:12:fa:d1: 77:b3:89:b2:34:d6:84:d2:98:86:92:be:89:23:35:da:7c:43: ef:9f:27:52:2e:4f:48:17:49:7d:3d:d8:e1:9f:1c:f1:fd:41: 1b:01:0c:58:58:52:63:ac:7c:c1:79:6d:6d:6e:65:80:50:23: ef:79:cf:98:b8:97:70:6c:3c:10:5f:2b:09:1e:65:a0:d8:1b: 98:ef:c7:75:36:ea:93:4a:1a:ca:52:51:c1:d4:3b:b4:b5:d6: b2:98:db:73:c2:ac:6f:49:29:2c:60:98:4f:7c:53:47:2d:25: f7:ef:08:6a:b4:8f:c4:d9:00:78:2c:d0:17:52:0a:48:92:f4: 60:58:b3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4PlPED4YkPcXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YTkzOGZlOTctYmRjOC00YmRiLTg4ODYtNWE0NDllNjljMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLXZJX9gElRahxfEXLNDqGMPV7bDASZSfMSb EUcSvHZzCDKUmaTN/iUZMrsejiVr7X+kQ9fICrEP2d8ut88Aw3i9nGaOXEM+xGK2 g+YQ/sSmjDTO2rRmHoxaRVcKuUTzy6W7YJ/VyfnfQSo0ZlS5J1zJYcyPRQYlhJgX lnkgf2mCSczjsK6qL7upiNeA09nXNf60sj+nmC5lPIL9N9kge4ObnTbS0Ckg9IIr CV9nkzJpAmECaVOEaPHAWoU1CVlybq2FiKLnKkfcz9crn0iuYkZRz/3eh5bmTsro yRdBUqTB94h0gFAzzZJROns4uHgA+h9/MREj08dgpguyVoxdcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4iD1feg/Ddtlt5yGNqmawk7HOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+MA3bY4mrgbjz14JgUoKhDK6EhCxeN1OFqYOzaC3VX5RO/G0084Xpn CiYTwHj/2JpWzXa8weHWf53+xWyXuI6NCdRbDbvfxoBILiiaH5zY9KiWRSZLo/JM A4GIj7dvs0uePxvn9ik/2mXv7YgWbk8pG6265mDpFnrZbxL60XezibI01oTSmIaS vokjNdp8Q++fJ1IuT0gXSX092OGfHPH9QRsBDFhYUmOsfMF5bW1uZYBQI+95z5i4 l3BsPBBfKwkeZaDYG5jvx3U26pNKGspSUcHUO7S11rKY23PCrG9JKSxgmE98U0ct JffvCGq0j8TZAHgs0BdSCkiS9GBYsy0= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:39 2025 by rpki-client