$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa File: 1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa (raw, json) Hash identifier: M2bXpMt8cm9jtjOYWtDPEZN/WaND9HIKob3mPufnIIU= Subject key identifier: 98:F0:65:85:E4:DB:AA:42:C0:24:78:58:03:6C:52:28:F3:29:35:EE Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AE4614719614619D584589300 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 62904 IP address blocks: 23.231.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:47:19:61:46:19:d5:84:58:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=f1ba6018-6cc5-49bc-a4ab-e21ee9930cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:40:cb:3d:34:14:95:48:c5:17:45:39:89: 11:43:25:b5:97:c4:c6:a9:9d:3e:93:84:3e:8c:4c: bb:3f:12:f7:3a:14:98:24:63:ee:45:1b:3e:02:cc: 29:8e:98:63:cf:b2:2d:5a:53:14:c1:cc:e9:87:8d: f1:58:a4:74:84:0e:1d:da:f1:7b:01:bd:66:15:0a: 4f:9b:39:90:35:ae:8d:e0:c9:22:ff:34:d9:a5:e9: 8f:77:dc:5d:0e:a1:13:38:e0:91:c8:bc:80:5a:6a: a2:1b:42:86:b9:39:58:0a:67:2e:5c:c7:ec:1e:43: 6e:d3:32:af:91:57:14:62:ef:02:30:bc:4f:b8:53: 23:ea:61:7f:dd:b2:b5:31:67:c9:5a:ef:28:4c:d5: 59:b0:b8:ff:84:e3:51:9c:33:6b:4a:69:fd:1b:cf: 58:dd:8b:d3:e7:c6:25:d0:ec:9e:53:48:af:3a:aa: ba:8e:cb:35:ee:77:88:2f:f6:57:17:55:21:07:c7: b0:7c:6a:1c:ff:b7:5f:74:88:33:5a:c8:db:2d:16: d4:ca:67:e8:cb:ff:af:1f:83:07:6b:f0:4d:10:46: aa:d9:79:a6:2c:5b:57:15:a0:68:40:e2:80:b3:a9: 9a:26:f5:c2:9a:10:db:27:83:18:ca:cc:69:ab:59: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F0:65:85:E4:DB:AA:42:C0:24:78:58:03:6C:52:28:F3:29:35:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5f:39:90:0f:c3:dc:5a:e2:7b:bb:91:21:e4:11:6f:09:bb: 10:b7:bc:ed:41:37:ea:cc:c3:14:64:c8:f4:6d:d0:67:0d:6e: 0b:43:d0:e4:80:c0:a1:7d:52:72:a9:78:24:31:37:7a:51:b1: 97:de:c9:ae:54:6a:9c:15:74:73:dd:89:c3:40:5b:21:75:15: 2d:0f:7f:e3:8c:57:8d:3c:a9:ce:fa:18:10:bc:2b:9b:d9:b2: 35:04:27:87:ba:7b:7f:26:18:07:2a:25:05:fd:b7:b4:79:68: 47:c2:50:d9:f8:fb:67:f9:9c:bb:d1:ce:fa:1b:1b:e4:84:3e: a0:04:6a:71:68:80:8a:1b:30:4d:f4:52:40:47:1a:e8:e5:40: 85:57:6e:f5:db:a5:76:b2:cb:c3:25:6a:99:aa:0b:f4:af:5c: 34:13:f2:ef:7a:ca:85:6a:a4:8b:26:d0:05:5e:1f:59:77:9f: 14:af:f4:72:70:0a:df:bd:c7:d5:0e:6e:ca:b6:ec:d3:44:05: e5:cc:22:90:d6:37:98:37:9b:b4:56:b3:ca:fb:66:ff:ad:6e: 5e:90:88:e0:4b:f1:c5:66:16:25:c1:f3:42:c3:61:8b:7b:53: 51:91:b3:e2:83:e8:8f:1b:d1:6a:64:28:67:10:93:b2:a9:0c: 49:8c:b3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUcZYUYZ1YRYkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjFiYTYwMTgtNmNjNS00OWJjLWE0YWItZTIxZWU5OTMwY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolJAyz00FJVIxRdFOYkRQyW1l8TGqZ0+k4Q+ jEy7PxL3OhSYJGPuRRs+Aswpjphjz7ItWlMUwczph43xWKR0hA4d2vF7Ab1mFQpP mzmQNa6N4Mki/zTZpemPd9xdDqETOOCRyLyAWmqiG0KGuTlYCmcuXMfsHkNu0zKv kVcUYu8CMLxPuFMj6mF/3bK1MWfJWu8oTNVZsLj/hONRnDNrSmn9G89Y3YvT58Yl 0OyeU0ivOqq6jss17neIL/ZXF1UhB8ewfGoc/7dfdIgzWsjbLRbUymfoy/+vH4MH a/BNEEaq2XmmLFtXFaBoQOKAs6maJvXCmhDbJ4MYysxpq1maqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjwZYXk26pCwCR4WANsUijzKTXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMTg3MWEyMTUtYjY3Zi0z YjhkLWIwZjItNTMwNGJhODliMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+c0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9fOZAPw9xa4nu7kSHkEW8JuxC3vO1BN+rMwxRkyPRt0GcNbgtD0OSA wKF9UnKpeCQxN3pRsZfeya5UapwVdHPdicNAWyF1FS0Pf+OMV408qc76GBC8K5vZ sjUEJ4e6e38mGAcqJQX9t7R5aEfCUNn4+2f5nLvRzvobG+SEPqAEanFogIobME30 UkBHGujlQIVXbvXbpXayy8MlapmqC/SvXDQT8u96yoVqpIsm0AVeH1l3nxSv9HJw Ct+9x9UObsq27NNEBeXMIpDWN5g3m7RWs8r7Zv+tbl6QiOBL8cVmFiXB80LDYYt7 U1GRs+KD6I8b0WpkKGcQk7KpDEmMs2c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:30 2025 by rpki-client