$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa File: 1c619daa-16a4-38fb-850d-9cd5873b1468.roa (raw, json) Hash identifier: xq0hHzM7TNMBE2G8bWpx2XgwYxdIX+NNs9EcgSrUbtA= Subject key identifier: 2A:FE:6D:39:F0:11:73:25:74:ED:EC:2C:05:AB:7A:BC:77:F0:34:DE Certificate issuer: /CN=25d202df-6bec-4085-8c1b-d1f141557cfe Certificate serial: 010D0C9F4328584AF0F13EA1B2F98500E7732440 Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 61317 IP address blocks: 23.144.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3e:a1:b2:f9:85:00:e7:73:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=380a4501-ea55-464d-8332-ce626f3eccf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:be:0b:7f:87:b3:8a:7f:b5:41:46:46:ee: be:52:0c:d8:42:f0:fa:81:bf:8f:a1:d2:1f:57:73: 3f:f6:86:63:61:45:27:28:70:6b:53:80:31:7a:1b: cd:31:fb:79:13:7e:b5:95:3d:37:f4:2b:8e:80:99: 65:64:dd:f8:78:a1:f3:a0:cf:d3:1e:12:24:1e:cf: ac:89:bd:50:d9:6e:ea:9b:33:0c:35:82:af:9d:cd: 5c:cd:53:fc:e1:1b:30:ae:7b:06:82:af:7c:53:fd: 1d:a3:cf:d0:5c:fc:3b:1a:3d:96:d2:2c:ea:b4:54: 85:5c:d3:ff:c4:1f:ff:22:fa:27:63:dd:51:5e:1e: 34:9f:8b:3e:cc:8f:2b:74:a1:00:cd:21:96:59:c5: cf:9e:89:e7:c3:fd:35:d5:23:7d:99:d1:d2:c4:91: fc:bc:7a:3c:7d:dc:61:f1:e7:94:a2:d0:b5:ab:15: c5:4e:e2:c4:6a:9c:62:f6:31:cd:8b:64:ef:b7:65: cd:d3:20:dd:06:9f:c8:69:61:44:8e:4b:15:05:12: d4:ec:e0:b0:84:3f:79:f3:dd:60:8f:f9:e4:df:a2: 6d:39:2c:13:f3:8e:83:b1:29:6b:5b:e3:87:ed:ae: 1b:57:79:a3:5c:4f:b3:00:80:ce:8c:b6:8b:c3:38: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FE:6D:39:F0:11:73:25:74:ED:EC:2C:05:AB:7A:BC:77:F0:34:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl X509v3 Authority Key Identifier: keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ad:6a:f0:26:b1:a2:34:a9:f5:2d:eb:b3:2d:43:88:3a:52: 74:8d:0a:d5:c5:c9:c6:fa:bf:f4:f9:f2:f3:54:76:04:70:95: f3:6a:f3:e0:6a:2c:0f:77:e9:a0:64:a9:cf:49:41:14:e2:82: a6:8f:eb:20:62:0f:ad:1c:f9:ea:e4:70:11:bc:22:f4:6b:52: 94:2f:20:0c:ee:19:a7:c2:27:ae:6e:38:87:56:6c:3a:1d:d7: bf:1e:d0:8f:11:5c:84:da:14:65:b2:f1:fb:69:6f:4b:99:7c: cf:32:74:a8:ff:8f:63:e1:56:5f:57:21:b3:9e:e4:20:58:68: 40:83:6c:6b:01:00:46:2b:a6:bb:b8:b1:72:83:35:46:96:a0: d8:ab:a8:90:40:a6:0a:40:82:5f:fb:39:1a:ec:c6:ee:8f:5f: a6:e6:9b:2e:0f:c1:84:92:cc:26:62:60:c8:44:68:23:0a:dc: ad:b0:50:b3:6a:61:c6:13:06:c5:75:d0:40:14:b6:32:2d:8b: f6:6f:6b:a0:bb:40:65:2b:92:c1:62:64:c9:d0:96:e0:18:76: b8:00:89:dc:11:81:f8:03:59:0a:d7:24:05:47:6d:78:33:b0: 2f:97:f4:06:f1:38:09:f3:ad:4b:3a:3c:90:de:8e:b6:16:c3: d1:ce:27:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8T6hsvmFAOdzJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3 Y2ZlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzgwYTQ1MDEtZWE1NS00NjRkLTgzMzItY2U2MjZmM2VjY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g++C3+Hs4p/tUFGRu6+UgzYQvD6gb+PodIf V3M/9oZjYUUnKHBrU4AxehvNMft5E361lT039CuOgJllZN34eKHzoM/THhIkHs+s ib1Q2W7qmzMMNYKvnc1czVP84RswrnsGgq98U/0do8/QXPw7Gj2W0izqtFSFXNP/ xB//IvonY91RXh40n4s+zI8rdKEAzSGWWcXPnonnw/011SN9mdHSxJH8vHo8fdxh 8eeUotC1qxXFTuLEapxi9jHNi2Tvt2XN0yDdBp/IaWFEjksVBRLU7OCwhD95891g j/nk36JtOSwT846DsSlrW+OH7a4bV3mjXE+zAIDOjLaLwzg0VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr+bTnwEXMldO3sLAWrerx38DTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvMWM2MTlkYWEtMTZhNC0z OGZiLTg1MGQtOWNkNTg3M2IxNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1 N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAStavAmsaI0qfUt67MtQ4g6UnSNCtXFycb6v/T58vNUdgRwlfNq8+Bq LA936aBkqc9JQRTigqaP6yBiD60c+erkcBG8IvRrUpQvIAzuGafCJ65uOIdWbDod 178e0I8RXITaFGWy8ftpb0uZfM8ydKj/j2PhVl9XIbOe5CBYaECDbGsBAEYrpru4 sXKDNUaWoNirqJBApgpAgl/7ORrsxu6PX6bmmy4PwYSSzCZiYMhEaCMK3K2wULNq YcYTBsV10EAUtjIti/Zva6C7QGUrksFiZMnQluAYdrgAidwRgfgDWQrXJAVHbXgz sC+X9AbxOAnzrUs6PJDejrYWw9HOJ10= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:03 2025 by rpki-client