$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa File: 8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json) Hash identifier: jlq27yvp/G7Xu40oQwArmYluA5DrszIrotMdqQESHZA= Subject key identifier: D5:D4:C4:4B:63:3F:48:21:FF:16:9C:BA:41:34:28:DA:0B:8B:B7:43 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AD7D109EF12DB93359E7B5340 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 21866 IP address blocks: 23.239.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:09:ef:12:db:93:35:9e:7b:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=37e37c98-8dc9-47d9-b1ad-915180d194d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:c1:33:35:66:48:b7:8a:ce:46:9d:e8:1e: 18:72:c3:dd:f8:9b:6d:b0:02:c6:43:66:50:9c:28: ed:12:14:96:1c:4f:59:6d:ab:d6:30:9e:72:fd:a7: cf:9b:02:12:d4:46:26:00:c3:97:16:07:c6:48:4e: 0b:97:54:e9:a0:e5:99:7a:93:e1:c4:72:89:c3:4c: 61:a4:5a:1f:20:f8:a7:de:98:44:54:37:bb:98:ab: 5c:42:3f:a8:15:be:fe:33:1e:ec:2e:06:7b:b1:7b: 4c:6a:f4:56:0f:72:ec:6c:f5:0e:4b:e5:d9:2c:7d: 97:ce:f4:5d:d8:29:1e:57:23:d6:1d:02:96:a0:14: dd:28:f0:ca:b2:39:86:7b:45:31:e4:0d:0a:c7:b6: 8b:13:64:66:85:0c:53:dd:d3:09:99:95:17:0f:81: 1a:ce:38:18:c0:63:0f:df:53:fe:15:a1:0f:6f:af: 87:8d:e9:f3:7c:9c:77:09:ca:52:5a:48:14:e5:c4: 8d:19:06:13:ce:af:bd:47:3e:20:51:31:1a:07:fb: 33:65:ee:08:e2:79:a5:79:fc:3a:62:ed:67:8a:ee: b5:df:bd:4a:be:be:60:7d:de:56:b7:15:13:d6:d6: 9b:bb:ce:09:bb:2c:c5:35:7c:e1:34:91:7f:a6:f6: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:C4:4B:63:3F:48:21:FF:16:9C:BA:41:34:28:DA:0B:8B:B7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e0:5e:c5:69:13:13:bc:67:b9:37:a1:6e:06:00:aa:80:95: f1:3d:ca:46:86:07:28:97:82:34:90:70:05:ce:66:3a:40:cc: d9:28:98:0b:3d:48:44:4e:c2:66:77:96:f9:99:27:5e:01:f0: c0:30:e4:4e:27:0e:4a:33:fe:15:e8:03:a3:aa:6c:4a:01:45: fd:c9:f6:3d:c6:ed:a5:30:24:23:3b:c5:71:66:07:ab:59:0b: ac:c2:c2:03:a8:a0:38:a5:b7:d9:bf:a7:e7:3c:f4:db:a5:3c: b5:33:82:f3:a7:c0:42:14:fc:d5:9d:f5:a4:b0:3b:bc:e9:21: 8d:31:e2:d9:e5:e7:30:cb:b5:37:52:61:f2:87:97:65:52:20: 7b:db:b1:f9:6e:b8:7f:f8:5f:40:6e:a7:4e:a5:83:f9:9c:44: 5e:61:5e:5e:56:cd:77:c7:7e:a4:d9:84:2f:56:7a:9b:f3:a2: db:74:05:a6:be:50:31:2e:f6:1c:7f:3d:fa:99:5f:ec:48:42: 3a:ea:d4:af:c2:25:2b:67:bd:1e:e1:f0:6f:4c:1f:f9:b2:a0: fa:4c:19:a9:dc:9e:f0:bb:6b:7c:43:43:b1:06:14:ae:4b:6e: d2:92:2b:ef:70:2a:f8:27:4f:39:2b:8b:2e:d2:a5:d0:fa:e1: e3:da:64:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QnvEtuTNZ57U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MzdlMzdjOTgtOGRjOS00N2Q5LWIxYWQtOTE1MTgwZDE5NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/BMzVmSLeKzkad6B4YcsPd+JttsALGQ2ZQ nCjtEhSWHE9ZbavWMJ5y/afPmwIS1EYmAMOXFgfGSE4Ll1TpoOWZepPhxHKJw0xh pFofIPin3phEVDe7mKtcQj+oFb7+Mx7sLgZ7sXtMavRWD3LsbPUOS+XZLH2XzvRd 2CkeVyPWHQKWoBTdKPDKsjmGe0Ux5A0Kx7aLE2RmhQxT3dMJmZUXD4EazjgYwGMP 31P+FaEPb6+HjenzfJx3CcpSWkgU5cSNGQYTzq+9Rz4gUTEaB/szZe4I4nmlefw6 Yu1niu61371Kvr5gfd5WtxUT1tabu84JuyzFNXzhNJF/pvbIowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXUxEtjP0gh/xacukE0KNoLi7dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGVjODE2NjYtYjI5ZS0z N2Y1LTkzZmEtZWMwODMxMmRkNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPgXsVpExO8Z7k3oW4GAKqAlfE9ykaGByiXgjSQcAXOZjpAzNkomAs9 SEROwmZ3lvmZJ14B8MAw5E4nDkoz/hXoA6OqbEoBRf3J9j3G7aUwJCM7xXFmB6tZ C6zCwgOooDilt9m/p+c89NulPLUzgvOnwEIU/NWd9aSwO7zpIY0x4tnl5zDLtTdS YfKHl2VSIHvbsfluuH/4X0Bup06lg/mcRF5hXl5WzXfHfqTZhC9Wepvzott0Baa+ UDEu9hx/PfqZX+xIQjrq1K/CJStnvR7h8G9MH/myoPpMGancnvC7a3xDQ7EGFK5L btKSK+9wKvgnTzkriy7SpdD64ePaZFY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:01:10 2025 by rpki-client