$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa File: d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa (raw, json) Hash identifier: RQ2wPNXBpi+48WoFd/1gZoguJVG43f7oklEbQBAb3Z8= Subject key identifier: 5C:5D:16:72:B7:1E:54:FB:3F:84:B1:A5:1B:96:B5:0C:E6:1E:F3:78 Certificate issuer: /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8 Certificate serial: 010D0C9F4328584AECC58F8A9F48852209AFEF00 Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 23061 IP address blocks: 23.163.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8f:8a:9f:48:85:22:09:af:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=078afd5b-e518-43f2-b05b-69908f39280b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:ab:79:13:f5:6f:ef:3b:2f:a5:72:90:fb: 69:43:d6:dc:9e:cc:8f:ff:25:b4:13:ee:0c:15:cc: 40:4f:5e:94:d1:4a:3b:21:3a:78:50:0f:65:27:ae: 1d:de:b0:c9:8f:e3:4f:01:6b:c9:3b:59:ac:7e:44: 59:3d:47:9e:c5:39:f4:a7:35:27:23:7c:7d:f0:e6: 43:97:aa:ec:dc:7b:08:1a:61:cc:a1:41:30:4f:93: 5b:d1:87:99:86:75:d4:3d:6c:cf:da:74:fb:6e:d4: 28:af:dc:96:73:29:64:84:7f:ed:1d:f9:7e:c1:2e: aa:42:c6:14:52:32:6a:6d:ca:30:d7:04:a0:2f:db: 20:c6:52:8a:ba:96:d6:56:ac:0c:47:ce:17:be:b7: 2a:ed:56:ed:f9:87:bf:b8:42:28:b7:11:d6:59:02: 0a:60:3b:92:5e:21:f7:e0:21:e9:86:4b:4a:ef:2e: 13:04:51:41:a6:ac:b3:cf:7e:6a:d0:3b:fb:ca:77: 68:4c:a3:cf:d8:b6:4a:a7:a8:22:09:75:9e:6b:d7: 75:74:b6:7a:d3:65:41:32:d5:6f:fa:5e:e8:56:a7: d2:06:57:64:b2:11:54:c2:b7:45:b2:52:89:00:a3: 3e:26:d9:6a:0d:0d:93:3c:07:8f:ce:b6:ed:2c:80: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5D:16:72:B7:1E:54:FB:3F:84:B1:A5:1B:96:B5:0C:E6:1E:F3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d4c47704-52f2-3a15-b7a4-f4675a4668ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl X509v3 Authority Key Identifier: keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer sbgp-ipAddrBlock: critical IPv4: 23.163.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:98:20:55:f0:35:aa:62:a2:bd:5f:5b:b6:94:59:e8:f8:8e: 44:a2:3b:48:a7:a9:03:1c:62:28:3d:ed:2c:7b:04:0f:5e:b2: a3:d3:0f:cb:fc:eb:c6:2e:47:b4:64:49:a9:57:a0:85:aa:12: 82:6d:70:a0:01:f7:3e:75:63:64:fc:1a:d6:b9:70:e5:f7:00: 78:95:ea:b9:91:71:ef:3b:52:c0:d2:e1:d7:51:46:dd:e3:35: ce:c8:1d:6b:b8:bc:cb:9b:b5:a6:2b:f9:ec:bb:b4:ff:ca:d0: 91:c6:85:6c:fe:bd:eb:29:7b:8d:8a:ff:c7:79:cf:b8:2d:bd: 3a:08:4b:a1:f5:0c:52:bb:52:e9:ce:88:e3:b9:0b:2d:c3:bb: 18:b2:5f:c4:4f:58:f8:d8:1c:07:2b:f4:00:db:c1:d6:73:fb: 07:7e:c7:7b:9a:57:f6:5a:10:f7:72:f2:33:6c:1a:b9:52:28: 61:e7:41:3a:01:21:5e:b6:1d:8f:0e:e4:30:bc:8d:31:f1:d5: 19:77:79:06:de:bc:fa:00:c5:5e:6a:90:77:57:e3:c2:e9:9b: 07:ff:e4:b3:2d:f8:48:e0:f0:54:cc:99:20:ae:7d:bd:c9:47: ce:43:33:2f:da:16:73:95:6b:a0:8f:b4:6f:d9:08:9e:44:a4: 96:2b:bf:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxY+Kn0iFIgmv7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1YjEzYjAtYTk5NC00ODVmLWFkY2EtYTJlYTI3ZmM5 ZGU4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDc4YWZkNWItZTUxOC00M2YyLWIwNWItNjk5MDhmMzkyODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qereRP1b+87L6VykPtpQ9bcnsyP/yW0E+4M FcxAT16U0Uo7ITp4UA9lJ64d3rDJj+NPAWvJO1msfkRZPUeexTn0pzUnI3x98OZD l6rs3HsIGmHMoUEwT5Nb0YeZhnXUPWzP2nT7btQor9yWcylkhH/tHfl+wS6qQsYU UjJqbcow1wSgL9sgxlKKupbWVqwMR84Xvrcq7Vbt+Ye/uEIotxHWWQIKYDuSXiH3 4CHphktK7y4TBFFBpqyzz35q0Dv7yndoTKPP2LZKp6giCXWea9d1dLZ602VBMtVv +l7oVqfSBldkshFUwrdFslKJAKM+JtlqDQ2TPAePzrbtLICdCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxdFnK3HlT7P4SxpRuWtQzmHvN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTVi MTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVhMjdmYzlkZTgvZDRjNDc3MDQtNTJmMi0z YTE1LWI3YTQtZjQ2NzVhNDY2OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWU1YjEzYjAtYTk5NC00ODVmLWFk Y2EtYTJlYTI3ZmM5ZGU4LzllNWIxM2IwLWE5OTQtNDg1Zi1hZGNhLWEyZWEyN2Zj OWRlOC5jcmwwHwYDVR0jBBgwFoAUhDSp8l1Fz4TB6iFuF+Mg2Er7APswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZTViMTNiMC1hOTk0LTQ4NWYtYWRjYS1hMmVh MjdmYzlkZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6NoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGYIFXwNapior1fW7aUWej4jkSiO0inqQMcYig97Sx7BA9esqPTD8v8 68YuR7RkSalXoIWqEoJtcKAB9z51Y2T8Gta5cOX3AHiV6rmRce87UsDS4ddRRt3j Nc7IHWu4vMubtaYr+ey7tP/K0JHGhWz+vespe42K/8d5z7gtvToIS6H1DFK7UunO iOO5Cy3DuxiyX8RPWPjYHAcr9ADbwdZz+wd+x3uaV/ZaEPdy8jNsGrlSKGHnQToB IV62HY8O5DC8jTHx1Rl3eQbevPoAxV5qkHdX48Lpmwf/5LMt+Ejg8FTMmSCufb3J R85DMy/aFnOVa6CPtG/ZCJ5EpJYrv64= -----END CERTIFICATE-----Generated at Sun Aug 24 09:12:02 2025 by rpki-client