$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa File: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (raw, json) Hash identifier: /tZyrSiPPOngjoI8bHMK1JIv1xDu7cQ4ULzj/rVppa8= Subject key identifier: A4:FC:2F:58:89:17:37:A3:48:12:8A:4F:CB:2F:C2:A4:82:73:C1:66 Certificate issuer: /CN=25a4f200-c007-4476-b7c6-b306830b991d Certificate serial: 010D0C9F4328584AE955E2F26AFF4E09168FAE80 Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa Signing time: Tue 19 Aug 2025 19:37:10 +0000 ROA not before: Tue 19 Aug 2025 19:37:10 +0000 ROA not after: Mon 17 Nov 2025 20:37:10 +0000 asID: 36303 IP address blocks: 23.169.104.0/24 maxlen: 24 167.253.29.0/24 maxlen: 24 2602:fabe::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:55:e2:f2:6a:ff:4e:09:16:8f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d Validity Not Before: Aug 19 19:37:10 2025 GMT Not After : Nov 17 20:37:10 2025 GMT Subject: CN=e61d201f-533b-4c36-b6bf-6bfb886e21eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:e3:c2:70:f2:3b:60:6b:76:42:ec:32:d0: 12:55:f7:7d:10:66:54:37:ee:da:4e:33:d9:63:42: 05:f4:8d:39:54:c1:ea:ff:dd:60:43:aa:cb:bf:02: 1b:2e:4c:bd:a5:60:3a:08:cf:00:64:db:ee:3f:ab: ce:b4:7c:f4:11:05:89:ff:1a:57:fc:7a:fa:8f:86: 2a:a1:82:4f:61:03:af:94:e1:a2:80:b9:ef:87:16: c9:d1:f8:8d:b3:07:d7:af:26:86:f1:f3:50:65:4e: f2:66:e8:00:d5:24:da:2b:a8:7a:60:e3:61:5c:c0: 05:f0:5e:81:e0:cc:f5:98:35:f4:0c:dc:10:7a:a1: 6d:b7:f5:68:f5:10:cf:5b:7d:2a:99:47:47:8f:f5: a9:75:8b:7d:ce:77:44:1a:c0:f9:52:0d:a5:6a:3c: 62:f2:cd:55:70:5a:98:c9:e1:fc:b7:a7:fc:5e:1a: 58:cc:88:40:79:45:2f:08:23:ed:ba:27:cd:81:2a: 40:53:88:e9:0d:15:be:c2:a0:d7:02:1d:b6:a1:dc: db:c2:05:ac:c5:56:78:7b:5a:9c:be:d5:1b:05:95: fe:8f:a0:84:4d:d4:10:c9:4b:83:f5:90:12:cf:7d: 1e:12:d6:59:18:0a:30:c0:7a:f4:10:45:32:7f:a6: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:2F:58:89:17:37:A3:48:12:8A:4F:CB:2F:C2:A4:82:73:C1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/087748f0-1dfe-3009-a1dc-390079e6b5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl X509v3 Authority Key Identifier: keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.104.0/24 167.253.29.0/24 IPv6: 2602:fabe::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d9:2f:64:4c:9f:ae:8f:69:da:61:40:05:e7:2e:f2:21:2d: 81:fa:4c:bc:28:c0:92:8c:da:d6:2b:e2:78:a3:0a:33:24:f5: 02:90:da:2c:25:db:23:97:43:d1:00:46:b0:3f:57:16:fb:f4: e2:1f:64:9d:95:ec:aa:f6:0d:75:2c:00:ff:85:40:d0:93:13: ba:9d:f7:8e:14:27:b3:3c:5c:7b:88:ba:43:43:18:ea:8a:11: 5b:07:b2:a6:84:89:c8:9c:55:a9:49:51:77:bf:ed:15:16:6e: 68:b7:33:17:79:7b:a5:15:60:e4:65:c0:26:fd:e6:5e:b9:f5: 98:d7:6d:7b:02:4d:ab:06:9b:3d:59:0b:5a:68:cc:a4:97:e9: 7b:51:e8:0d:da:05:2f:df:45:88:11:34:c4:8c:1a:21:0f:04: 74:91:fa:48:80:c0:5a:b9:4c:18:a5:2a:0f:1d:86:25:cc:fa: ad:ec:9c:6a:25:de:ad:25:3a:f5:ee:de:64:08:25:89:e9:6a: 01:6f:4e:59:8c:e4:30:74:c4:12:0b:bf:7c:45:83:3a:d3:65: 8f:85:25:74:f2:a1:f9:b3:59:7f:07:e6:de:59:6b:09:9c:02: ea:51:8f:7d:9e:ed:1e:4a:c1:20:3c:36:a1:31:fe:8e:98:90: 12:42:c2:f4 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWErpVeLyav9OCRaProAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5 OTFkMB4XDTI1MDgxOTE5MzcxMFoXDTI1MTExNzIwMzcxMFowLzEtMCsGA1UEAxMk ZTYxZDIwMWYtNTMzYi00YzM2LWI2YmYtNmJmYjg4NmUyMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HLjwnDyO2BrdkLsMtASVfd9EGZUN+7aTjPZ Y0IF9I05VMHq/91gQ6rLvwIbLky9pWA6CM8AZNvuP6vOtHz0EQWJ/xpX/Hr6j4Yq oYJPYQOvlOGigLnvhxbJ0fiNswfXryaG8fNQZU7yZugA1STaK6h6YONhXMAF8F6B 4Mz1mDX0DNwQeqFtt/Vo9RDPW30qmUdHj/WpdYt9zndEGsD5Ug2lajxi8s1VcFqY yeH8t6f8XhpYzIhAeUUvCCPtuifNgSpAU4jpDRW+wqDXAh22odzbwgWsxVZ4e1qc vtUbBZX+j6CETdQQyUuD9ZASz30eEtZZGAowwHr0EEUyf6ZD1wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFKT8L1iJFzejSBKKT8svwqSCc8FmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0 ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMDg3NzQ4ZjAtMWRmZS0z MDA5LWExZGMtMzkwMDc5ZTZiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjVhNGYyMDAtYzAwNy00NDc2LWI3 YzYtYjMwNjgzMGI5OTFkLzI1YTRmMjAwLWMwMDctNDQ3Ni1iN2M2LWIzMDY4MzBi OTkxZC5jcmwwHwYDVR0jBBgwFoAUoNkEWJPZ16jooHqyA7QWitgXIuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2 ODMwYjk5MWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6loAwQA p/0dMA4EAgACMAgDBgAmAvq+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO2S9kTJ+uj2naYUAF5y7yIS2B +ky8KMCSjNrWK+J4owozJPUCkNosJdsjl0PRAEawP1cW+/TiH2Sdleyq9g11LAD/ hUDQkxO6nfeOFCezPFx7iLpDQxjqihFbB7KmhInInFWpSVF3v+0VFm5otzMXeXul FWDkZcAm/eZeufWY1217Ak2rBps9WQtaaMykl+l7UegN2gUv30WIETTEjBohDwR0 kfpIgMBauUwYpSoPHYYlzPqt7JxqJd6tJTr17t5kCCWJ6WoBb05ZjOQwdMQSC798 RYM602WPhSV08qH5s1l/B+beWWsJnALqUY99nu0eSsEgPDahMf6OmJASQsL0 -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:44 2025 by rpki-client