$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa File: 86e4edff-6e07-3702-ac55-43bc214c832b.roa (raw, json) Hash identifier: NQ1CIZKlKkDSjZIMP8660EJcTEnibNGnidFEkzH0SK8= Subject key identifier: BE:BA:BD:8A:D2:29:CB:8E:02:52:72:00:8D:58:DC:85:9E:33:9B:80 Certificate issuer: /CN=ae6aa33d-df94-457a-9298-bc765c153d31 Certificate serial: 010D0C9F4328584ACF711EE7E5EBAD13BA9FD840 Authority key identifier: 43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 63023 IP address blocks: 23.139.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:1e:e7:e5:eb:ad:13:ba:9f:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6aa33d-df94-457a-9298-bc765c153d31 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=c338241e-cde1-4bf0-8785-3aca0ff45ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:46:7d:5c:05:6c:2c:1c:8e:a1:ad:f6:ff: 81:1f:06:55:aa:3f:c6:43:fd:e3:36:d5:b8:4a:24: cf:07:c1:ce:56:81:d4:32:0f:80:8d:29:c9:08:e9: 98:9b:30:15:d5:bc:16:b1:c2:a9:09:c1:07:8c:b2: 72:84:dc:b9:87:b6:0e:65:8b:62:b4:de:7d:b6:bc: 58:7a:7f:2c:cd:96:03:db:93:74:ff:16:fb:18:c6: ef:74:e1:93:16:c5:f9:17:4d:4e:93:8d:35:64:ef: 89:d0:c2:2b:71:52:0e:4e:f6:2b:ca:18:02:61:47: 95:45:d9:12:80:b0:bd:19:23:20:d4:30:32:cd:17: 10:c4:14:8a:8e:4e:96:81:97:e9:08:81:cd:62:9d: d7:59:80:86:d5:a6:a5:fa:c8:49:3e:f2:2e:9f:c6: 49:e0:ca:34:cc:62:22:37:05:23:69:a4:5c:93:b0: 1f:16:f3:d6:09:ab:34:71:67:f3:e4:3a:75:3f:84: e4:e4:74:12:28:63:11:ec:d8:75:a6:d4:8d:65:37: 31:70:3a:2e:71:ce:2a:48:15:53:41:85:ca:b6:91: 8c:f6:84:54:cf:1c:ed:0b:e2:71:57:ac:3a:55:70: 41:ac:8a:2f:93:55:42:5b:7f:3e:7f:dd:ba:ad:b1: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BA:BD:8A:D2:29:CB:8E:02:52:72:00:8D:58:DC:85:9E:33:9B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/86e4edff-6e07-3702-ac55-43bc214c832b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31/ae6aa33d-df94-457a-9298-bc765c153d31.crl X509v3 Authority Key Identifier: keyid:43:B3:76:5F:D9:DC:39:C7:6A:D4:F9:BE:50:50:21:74:DC:E3:E5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ae6aa33d-df94-457a-9298-bc765c153d31.cer sbgp-ipAddrBlock: critical IPv4: 23.139.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e5:30:92:9c:5f:4f:64:a6:33:d7:54:3e:52:76:21:e9:07: d0:3d:87:de:0e:55:7c:13:66:46:f0:aa:0e:53:49:60:fc:ad: 64:d4:ef:33:ba:cf:94:65:c4:89:50:cb:16:d2:cf:75:09:ab: 84:86:74:8d:fd:50:81:10:ea:9f:db:1e:e7:6c:3c:60:c3:44: d3:53:44:2a:f9:72:49:c0:19:12:15:b7:be:17:c8:47:fc:5c: 2f:cc:19:26:94:20:24:cb:75:70:90:18:73:e6:9e:b2:71:cc: b2:80:00:2d:47:f1:35:ba:df:8c:d0:f5:4b:f7:13:6c:08:e2: 77:09:e0:99:ab:4a:6a:de:a1:b6:01:54:72:ab:f9:8d:93:a8: f2:e2:49:9e:13:91:0d:24:6b:56:d6:18:a0:62:1e:dd:75:b1: e5:d6:ac:f9:72:75:9f:65:88:e0:d9:4e:42:c1:60:0a:c1:0f: 5b:fd:80:9a:b6:c0:2d:3f:af:83:f9:a9:d1:62:31:92:57:95: 15:ba:76:4a:37:36:24:30:9d:12:34:c1:ac:b5:0e:f0:7c:07: 89:35:b4:a6:c4:0d:95:28:4a:2d:0d:e0:02:66:72:e4:dd:2c: 60:23:d3:66:11:06:d3:db:36:4a:89:18:3b:99:36:d6:c3:fe: 02:99:eb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcR7n5eutE7qf2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2YWEzM2QtZGY5NC00NTdhLTkyOTgtYmM3NjVjMTUz ZDMxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YzMzODI0MWUtY2RlMS00YmYwLTg3ODUtM2FjYTBmZjQ1ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9GfVwFbCwcjqGt9v+BHwZVqj/GQ/3jNtW4 SiTPB8HOVoHUMg+AjSnJCOmYmzAV1bwWscKpCcEHjLJyhNy5h7YOZYtitN59trxY en8szZYD25N0/xb7GMbvdOGTFsX5F01Ok401ZO+J0MIrcVIOTvYryhgCYUeVRdkS gLC9GSMg1DAyzRcQxBSKjk6WgZfpCIHNYp3XWYCG1aal+shJPvIun8ZJ4Mo0zGIi NwUjaaRck7AfFvPWCas0cWfz5Dp1P4Tk5HQSKGMR7Nh1ptSNZTcxcDoucc4qSBVT QYXKtpGM9oRUzxztC+JxV6w6VXBBrIovk1VCW38+f926rbEQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL66vYrSKcuOAlJyAI1Y3IWeM5uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZTZh YTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2NWMxNTNkMzEvODZlNGVkZmYtNmUwNy0z NzAyLWFjNTUtNDNiYzIxNGM4MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWU2YWEzM2QtZGY5NC00NTdhLTky OTgtYmM3NjVjMTUzZDMxL2FlNmFhMzNkLWRmOTQtNDU3YS05Mjk4LWJjNzY1YzE1 M2QzMS5jcmwwHwYDVR0jBBgwFoAUQ7N2X9ncOcdq1Pm+UFAhdNzj5aIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZTZhYTMzZC1kZjk0LTQ1N2EtOTI5OC1iYzc2 NWMxNTNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4skMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXlMJKcX09kpjPXVD5SdiHpB9A9h94OVXwTZkbwqg5TSWD8rWTU7zO6 z5RlxIlQyxbSz3UJq4SGdI39UIEQ6p/bHudsPGDDRNNTRCr5cknAGRIVt74XyEf8 XC/MGSaUICTLdXCQGHPmnrJxzLKAAC1H8TW634zQ9Uv3E2wI4ncJ4JmrSmreobYB VHKr+Y2TqPLiSZ4TkQ0ka1bWGKBiHt11seXWrPlydZ9liODZTkLBYArBD1v9gJq2 wC0/r4P5qdFiMZJXlRW6dko3NiQwnRI0way1DvB8B4k1tKbEDZUoSi0N4AJmcuTd LGAj02YRBtPbNkqJGDuZNtbD/gKZ60Q= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:58 2025 by rpki-client