$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa File: 2ae97979-16d5-393c-a787-3ce400c70ade.roa (raw, json) Hash identifier: 6o/KnuywfQFT7BvIzbGKXoOF+3bgzHqY3NU34H5X0D8= Subject key identifier: 8D:2B:98:43:6E:84:2A:24:73:98:30:5E:9E:45:10:DA:9B:90:D1:7F Certificate issuer: /CN=143dcb45-9a31-4d19-a1e6-f07027b13219 Certificate serial: 010D0C9F4328584B25FC2F2B9160A550C2244D68 Authority key identifier: 1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 32281 IP address blocks: 23.140.184.0/24 maxlen: 24 2602:fb22::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:2f:2b:91:60:a5:50:c2:24:4d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143dcb45-9a31-4d19-a1e6-f07027b13219 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6566abc3-3c47-4d9d-ad99-1d106c9ab308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:68:0a:d6:eb:96:1f:62:1e:bf:be:d9:a0: 69:be:f7:1e:d3:7c:79:77:c5:8b:00:a4:be:9c:bc: 60:d6:ac:d1:9a:b6:33:53:47:a8:9a:e2:d4:15:ce: 20:93:a7:24:01:55:2a:79:b6:1f:37:eb:4b:90:a3: 80:a8:ed:36:34:98:51:17:ad:9f:f6:09:3c:52:23: 27:97:03:8a:4d:65:cc:c7:1e:4c:16:bf:2c:00:50: d0:92:45:65:d2:ec:b5:c8:d7:18:70:77:e6:08:fd: 41:f2:6c:9d:71:fd:99:9d:76:d1:e7:b9:0e:ea:2d: 42:23:7a:28:c5:ca:79:b2:a1:0d:28:6d:39:2a:37: 2f:c8:80:fb:2f:0b:a9:e3:b2:29:f0:59:0d:6f:e8: 2e:05:ca:b8:06:6c:70:85:49:ef:65:0f:7c:df:1f: 29:28:28:51:e7:69:eb:89:48:ad:c6:ee:56:3b:80: eb:61:15:47:58:f7:65:0b:1c:2b:af:2e:9d:36:26: 3d:d1:61:c1:d6:7c:dc:11:57:0a:5f:b3:f7:ec:44: ba:21:08:d6:24:36:01:d1:fa:a8:ee:a2:98:41:5f: 36:05:a0:52:6c:eb:aa:99:cd:00:63:dc:6d:c2:73: c8:7c:94:e7:58:4e:3e:1e:d9:49:03:f8:38:51:8c: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:98:43:6E:84:2A:24:73:98:30:5E:9E:45:10:DA:9B:90:D1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl X509v3 Authority Key Identifier: keyid:1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer sbgp-ipAddrBlock: critical IPv4: 23.140.184.0/24 IPv6: 2602:fb22::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1b:aa:1d:c7:ea:d2:87:36:f5:0c:ca:ce:1a:f0:d2:4e:25: 3a:bb:7f:bd:29:3e:88:3a:95:7b:11:e9:f9:a2:d0:0c:7c:a2: 3a:85:1d:ab:2d:80:24:70:20:78:a2:97:98:04:ce:e6:c2:23: 09:81:b9:ce:5a:3b:14:e9:bd:a6:d1:0d:f3:bd:71:bf:b9:db: cf:c1:8f:2d:43:bc:85:99:58:b3:4c:8c:c3:57:9d:af:21:dd: d3:45:e7:9a:89:85:12:94:4e:b8:53:55:4a:d6:f2:fa:d1:63: 80:ba:b3:ee:57:f2:cf:ac:d1:5e:a5:95:3f:ec:2a:86:bb:82: 70:f3:54:af:6d:a2:13:ad:02:e4:d5:6a:58:c9:54:17:9b:a1: f3:0e:4e:09:aa:27:7f:b4:40:e5:69:90:7e:44:8d:8d:b5:60: 7e:bb:c4:a9:4d:63:f9:19:67:d7:57:40:9c:92:3a:8c:bf:54: 20:68:f5:a1:4b:e4:79:db:5e:db:40:c1:85:7d:fb:5d:6b:af: d3:d0:b1:d6:e0:d6:79:cf:2e:c1:b8:5a:5b:29:e3:89:34:50: 6d:be:23:46:59:ca:80:bb:be:b9:e4:8f:b4:34:c2:47:69:4b: a9:8a:e3:ce:91:2c:8b:ca:c5:4a:c2:39:0b:ff:5e:22:68:6b: f4:04:d2:9d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsl/C8rkWClUMIkTWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZGNiNDUtOWEzMS00ZDE5LWExZTYtZjA3MDI3YjEz MjE5MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NjU2NmFiYzMtM2M0Ny00ZDlkLWFkOTktMWQxMDZjOWFiMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth1oCtbrlh9iHr++2aBpvvce03x5d8WLAKS+ nLxg1qzRmrYzU0eomuLUFc4gk6ckAVUqebYfN+tLkKOAqO02NJhRF62f9gk8UiMn lwOKTWXMxx5MFr8sAFDQkkVl0uy1yNcYcHfmCP1B8mydcf2ZnXbR57kO6i1CI3oo xcp5sqENKG05KjcvyID7Lwup47Ip8FkNb+guBcq4BmxwhUnvZQ983x8pKChR52nr iUitxu5WO4DrYRVHWPdlCxwrry6dNiY90WHB1nzcEVcKX7P37ES6IQjWJDYB0fqo 7qKYQV82BaBSbOuqmc0AY9xtwnPIfJTnWE4+HtlJA/g4UYxKjQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI0rmENuhCokc5gwXp5FENqbkNF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDNk Y2I0NS05YTMxLTRkMTktYTFlNi1mMDcwMjdiMTMyMTkvMmFlOTc5NzktMTZkNS0z OTNjLWE3ODctM2NlNDAwYzcwYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTQzZGNiNDUtOWEzMS00ZDE5LWEx ZTYtZjA3MDI3YjEzMjE5LzE0M2RjYjQ1LTlhMzEtNGQxOS1hMWU2LWYwNzAyN2Ix MzIxOS5jcmwwHwYDVR0jBBgwFoAUHQIbrUlZK6KtKjddTmJHKEozwh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNDNkY2I0NS05YTMxLTRkMTktYTFlNi1mMDcw MjdiMTMyMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4y4MA4E AgACMAgDBgQmAvsiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1G6odx+rShzb1DMrOGvDSTiU6u3+9KT6I OpV7Een5otAMfKI6hR2rLYAkcCB4opeYBM7mwiMJgbnOWjsU6b2m0Q3zvXG/udvP wY8tQ7yFmVizTIzDV52vId3TReeaiYUSlE64U1VK1vL60WOAurPuV/LPrNFepZU/ 7CqGu4Jw81SvbaITrQLk1WpYyVQXm6HzDk4Jqid/tEDlaZB+RI2NtWB+u8SpTWP5 GWfXV0CckjqMv1QgaPWhS+R5217bQMGFfftda6/T0LHW4NZ5zy7BuFpbKeOJNFBt viNGWcqAu7655I+0NMJHaUupiuPOkSyLysVKwjkL/14iaGv0BNKd -----END CERTIFICATE-----Generated at Fri Oct 10 14:12:06 2025 by rpki-client