$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa File: f47c4505-8c43-385b-943b-712b48bd1cc9.roa (raw, json) Hash identifier: 9K5MwCsjzKtXwUtZNq5usQIW//UhIf5QH+lTahWkua0= Subject key identifier: D1:EC:9F:68:8C:FF:5E:84:99:78:81:D8:AD:5B:BD:1B:A3:F5:73:10 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AD7D10A2064F80AD6B00F0B30 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 6643 IP address blocks: 23.239.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0a:20:64:f8:0a:d6:b0:0f:0b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=3b871f7d-1c9a-4180-8872-b2e460253658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:21:17:a6:79:91:15:ee:c8:19:a7:92:b1: 30:06:79:e1:35:98:28:e9:a2:9b:a7:88:8c:ce:a6: 43:89:2c:18:0b:44:79:54:23:f4:d3:63:a9:da:d4: 4f:bb:a3:41:f4:7d:4c:3b:86:c2:fb:7c:a0:75:55: 20:12:f4:7f:10:e5:aa:5d:75:e6:75:4f:2a:46:bf: f9:87:77:79:c1:c3:2f:c6:bb:3b:d6:72:bf:d5:0c: 78:ba:ed:2e:3f:27:dc:23:03:79:09:b6:7b:c9:92: 19:f0:40:e7:93:f0:2f:b8:06:3a:d4:29:c6:23:e0: 41:bc:87:5b:8f:b3:dd:e0:30:19:f2:c1:f5:4d:4f: f0:5b:e3:8b:85:f2:f4:cf:7d:eb:26:49:65:ea:93: 28:b9:ce:fb:d2:f2:6b:e6:be:9b:8f:04:32:50:41: 12:94:fc:90:f4:cc:6d:55:b8:17:0c:95:1d:b2:20: f5:53:5c:89:11:e0:d7:ae:00:f2:91:89:97:47:4a: a5:a6:12:13:18:79:7a:e2:79:d0:69:be:2c:4a:05: f1:34:f5:51:19:be:3b:29:ba:2d:24:9e:e6:96:c9: 45:1d:70:39:12:57:ac:ba:e4:5f:79:c4:7a:b9:31: 65:91:ae:84:ce:48:7a:38:f5:39:47:b1:e7:e9:66: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EC:9F:68:8C:FF:5E:84:99:78:81:D8:AD:5B:BD:1B:A3:F5:73:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:07:57:79:95:27:32:a3:70:d8:8f:58:88:bb:03:25:77:43: 22:bb:a1:37:d7:28:5c:52:e1:04:01:fe:50:28:ef:b8:91:74: c5:a4:5d:fc:bc:b5:ce:97:b4:93:1b:ae:90:e7:db:0d:e1:09: 66:5e:d7:c5:9f:53:65:b9:db:e3:3e:97:7d:7b:c5:25:c4:b9: 91:f8:3a:0d:a8:49:da:e2:d7:e9:00:88:e5:89:e5:97:cc:04: da:09:a6:16:8b:37:08:49:fe:db:1b:79:9c:cb:4e:71:6a:58: 29:ff:ae:27:e0:04:e0:94:56:44:d2:ab:04:4b:d1:ed:8c:81: 4d:2f:1a:73:b4:70:1c:1b:6d:c1:55:46:f8:a0:e5:f8:98:23: 67:56:96:5c:25:c7:46:07:da:a5:fb:79:cb:9f:0c:69:e7:5d: 09:8c:ab:ed:75:a1:8e:75:8a:f2:48:2e:ba:dc:0f:6a:b4:86: d1:d9:55:f5:f3:6d:a1:4e:a8:55:ff:4f:94:26:1f:8e:fb:0e: 2a:a9:47:35:67:54:17:09:65:a0:18:77:7b:e4:8b:cc:ec:25: f8:c8:63:0b:a9:db:01:c3:3d:d3:34:5e:7d:df:17:96:07:66: f7:a5:1a:0a:4e:e8:cd:71:34:69:7f:0b:27:33:c7:07:78:0a: fd:82:fc:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QogZPgK1rAPCzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk M2I4NzFmN2QtMWM5YS00MTgwLTg4NzItYjJlNDYwMjUzNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH0hF6Z5kRXuyBmnkrEwBnnhNZgo6aKbp4iM zqZDiSwYC0R5VCP002Op2tRPu6NB9H1MO4bC+3ygdVUgEvR/EOWqXXXmdU8qRr/5 h3d5wcMvxrs71nK/1Qx4uu0uPyfcIwN5CbZ7yZIZ8EDnk/AvuAY61CnGI+BBvIdb j7Pd4DAZ8sH1TU/wW+OLhfL0z33rJkll6pMouc770vJr5r6bjwQyUEESlPyQ9Mxt VbgXDJUdsiD1U1yJEeDXrgDykYmXR0qlphITGHl64nnQab4sSgXxNPVRGb47Kbot JJ7mlslFHXA5ElesuuRfecR6uTFlka6Ezkh6OPU5R7Hn6Wb2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHsn2iM/16EmXiB2K1bvRuj9XMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjQ3YzQ1MDUtOGM0My0z ODViLTk0M2ItNzEyYjQ4YmQxY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwHV3mVJzKjcNiPWIi7AyV3QyK7oTfXKFxS4QQB/lAo77iRdMWkXfy8 tc6XtJMbrpDn2w3hCWZe18WfU2W52+M+l317xSXEuZH4Og2oSdri1+kAiOWJ5ZfM BNoJphaLNwhJ/tsbeZzLTnFqWCn/rifgBOCUVkTSqwRL0e2MgU0vGnO0cBwbbcFV Rvig5fiYI2dWllwlx0YH2qX7ecufDGnnXQmMq+11oY51ivJILrrcD2q0htHZVfXz baFOqFX/T5QmH477DiqpRzVnVBcJZaAYd3vki8zsJfjIYwup2wHDPdM0Xn3fF5YH ZvelGgpO6M1xNGl/Cyczxwd4Cv2C/GY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:55 2025 by rpki-client