$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa File: 50ec3321-1821-394a-b233-3c10916fd9ab.roa (raw, json) Hash identifier: LxXbkn/8iACzv2PdaJhF+9CQ678INkr1l97ihAuMe8c= Subject key identifier: D8:6A:24:2A:AD:9F:57:97:A8:15:40:07:D5:9F:0E:EB:56:C0:0A:C2 Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584AEE35618D252AAAD9D23EF860 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa Signing time: Thu 21 Aug 2025 13:30:42 +0000 ROA not before: Thu 21 Aug 2025 13:30:42 +0000 ROA not after: Wed 19 Nov 2025 14:30:42 +0000 asID: 399688 IP address blocks: 23.144.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:35:61:8d:25:2a:aa:d9:d2:3e:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Aug 21 13:30:42 2025 GMT Not After : Nov 19 14:30:42 2025 GMT Subject: CN=9b71ab1e-9119-4745-8dbf-77bf57d28187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:2a:a5:1e:3a:6c:5c:7c:f5:ec:31:5b:98: 91:5b:05:1c:5c:a2:53:c0:4b:7f:7a:8a:7a:33:04: 1e:95:9b:8a:fc:7b:82:e0:af:79:8c:5f:09:3e:29: 64:ee:f3:79:f9:5a:95:02:fd:1c:ae:9b:27:55:0f: 25:d4:cf:01:28:cb:18:6f:ff:91:61:8d:ec:fe:2c: 7c:2f:d0:ce:d3:63:10:c2:94:9f:1b:0c:0a:f6:96: 6f:64:70:fa:dc:dc:f8:79:ff:4b:65:8b:97:99:77: f6:c5:f3:4f:65:45:3a:b8:3a:a8:a9:74:c9:22:ff: 68:05:fc:36:10:17:05:c7:fa:c0:42:d5:32:73:05: 28:65:2b:d7:fa:eb:d5:09:9b:a1:58:d7:b8:8c:b5: 5e:a6:f7:c0:3e:7c:58:31:f2:9b:3c:91:b8:35:5c: 9a:e8:0f:32:dd:1f:44:90:90:f5:01:c9:82:b9:34: b3:81:8d:11:e6:a4:21:54:71:2e:15:b3:d8:a9:98: 4a:b6:85:a0:ad:26:45:8a:14:0d:06:94:76:82:5a: 48:ac:3e:af:c3:2d:b4:68:36:bc:b3:62:ec:4c:e4: 71:6f:fc:38:b1:4d:96:bd:71:86:90:2c:95:0c:f1: 60:c4:d2:85:fb:9a:b6:17:1c:db:0d:fe:89:c0:c8: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:24:2A:AD:9F:57:97:A8:15:40:07:D5:9F:0E:EB:56:C0:0A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv4: 23.144.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ae:6e:6f:5f:65:90:ef:61:74:5d:65:32:17:69:8c:6d:df: cc:1a:50:7c:ea:dc:98:5e:bf:7b:ac:a2:8d:15:0c:8e:be:db: de:b6:d0:a0:ae:00:90:b8:1c:27:3c:83:10:44:60:6a:dc:a4: 4b:a9:f9:69:53:31:ed:54:6e:3e:bb:77:51:46:ae:89:bd:6b: 9e:c2:a1:0d:62:b5:87:0f:19:d3:b8:b8:46:09:08:fb:ed:4e: b0:d8:f3:5c:c8:c9:c1:d5:3b:71:d0:2b:a0:af:88:74:8b:80: 1c:86:79:df:4d:c7:ad:28:17:76:bd:c6:a4:1e:8c:e4:33:7f: a7:48:09:e7:29:bd:f6:9b:7e:ee:04:df:2c:4d:9a:bc:9e:fa: 45:c2:a8:ba:ad:4d:d2:a0:91:ef:b6:c8:9f:24:1f:49:91:f7: ab:0f:88:a6:68:ce:d7:ac:e9:ab:57:01:1d:da:80:9b:a7:76: dd:50:f2:cc:89:6d:88:23:ea:aa:66:d5:c1:fd:53:90:12:fe: 48:2d:69:dc:fe:95:87:d9:c4:98:20:6b:e8:be:48:6c:8a:06: e1:c8:61:76:df:32:18:60:8c:d5:db:8e:a1:a4:e6:7d:d7:74: 39:66:b3:f1:ed:34:a2:2c:9a:62:01:89:76:6d:a9:f6:83:6e: bf:c4:49:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruNWGNJSqq2dI++GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI1MDgyMTEzMzA0MloXDTI1MTExOTE0MzA0MlowLzEtMCsGA1UEAxMk OWI3MWFiMWUtOTExOS00NzQ1LThkYmYtNzdiZjU3ZDI4MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWcqpR46bFx89ewxW5iRWwUcXKJTwEt/eop6 MwQelZuK/HuC4K95jF8JPilk7vN5+VqVAv0crpsnVQ8l1M8BKMsYb/+RYY3s/ix8 L9DO02MQwpSfGwwK9pZvZHD63Nz4ef9LZYuXmXf2xfNPZUU6uDqoqXTJIv9oBfw2 EBcFx/rAQtUycwUoZSvX+uvVCZuhWNe4jLVepvfAPnxYMfKbPJG4NVya6A8y3R9E kJD1AcmCuTSzgY0R5qQhVHEuFbPYqZhKtoWgrSZFihQNBpR2glpIrD6vwy20aDa8 s2LsTORxb/w4sU2WvXGGkCyVDPFgxNKF+5q2FxzbDf6JwMgY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhqJCqtn1eXqBVAB9WfDutWwArCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvNTBlYzMzMjEtMTgyMS0z OTRhLWIyMzMtM2MxMDkxNmZkOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqubm9fZZDvYXRdZTIXaYxt38waUHzq3Jhev3usoo0VDI6+29620KCu AJC4HCc8gxBEYGrcpEup+WlTMe1Ubj67d1FGrom9a57CoQ1itYcPGdO4uEYJCPvt TrDY81zIycHVO3HQK6CviHSLgByGed9Nx60oF3a9xqQejOQzf6dICecpvfabfu4E 3yxNmrye+kXCqLqtTdKgke+2yJ8kH0mR96sPiKZoztes6atXAR3agJundt1Q8syJ bYgj6qpm1cH9U5AS/kgtadz+lYfZxJgga+i+SGyKBuHIYXbfMhhgjNXbjqGk5n3X dDlms/HtNKIsmmIBiXZtqfaDbr/ESQU= -----END CERTIFICATE-----Generated at Sun Aug 24 04:34:36 2025 by rpki-client