$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/4313f272-19da-3ece-8785-96fe34c6509d.roa File: 4313f272-19da-3ece-8785-96fe34c6509d.roa (raw, json) Hash identifier: N+/CdN0hbnMY6Jo6W/KIadflq9N+okaTG9UlL7Yp6ZM= Subject key identifier: 7A:FC:CC:13:97:7D:67:A1:84:52:B7:C8:D6:76:E2:F9:C2:5E:B0:32 Certificate issuer: /CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Certificate serial: 010D0C9F4328584B3556E591F75E744B03CEA180 Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/4313f272-19da-3ece-8785-96fe34c6509d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 23.144.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e5:91:f7:5e:74:4b:03:ce:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=91364ac4-3f2c-4097-90dd-1af69f31091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:75:65:36:a3:52:67:c6:36:b3:b8:14:17: 26:f5:b3:39:3f:92:a4:86:80:2d:43:5e:90:7a:2e: ba:3f:6b:e4:f3:2c:75:ae:b0:9e:eb:8f:c6:df:f3: b3:89:54:52:24:80:6a:5c:bb:3b:69:3c:5c:e0:a4: 34:70:74:f6:53:02:33:ad:77:42:46:32:82:47:7c: 9c:1a:91:19:15:84:b4:a0:7e:e6:79:ff:2a:9f:2f: 99:b3:a7:4a:99:3f:cc:9e:20:9e:ce:d7:28:62:34: ed:d8:05:8d:f4:e2:13:22:96:b5:7d:b6:21:d6:69: ed:f7:2c:ae:98:f6:ad:1e:99:7e:a5:ae:4a:cb:2d: 8f:f2:20:98:e0:8f:c6:d3:a6:14:df:f7:94:52:e0: d1:57:bf:e5:b4:86:dd:b5:4f:16:2e:c7:ac:06:38: 7b:75:74:4f:07:7b:5d:27:7d:a2:2f:14:95:44:0c: 44:2a:6f:21:0f:25:ae:f7:54:51:b2:7b:2f:e9:cf: a8:ad:dc:d3:1c:d4:e8:d8:7a:f4:d6:df:09:0c:63: a2:b6:80:9e:ae:36:10:ee:5c:16:9f:71:14:b2:a7: 5a:74:30:9c:4c:79:e7:81:99:62:53:d2:17:a7:07: 79:32:61:16:6f:cc:5d:ca:97:d6:ff:df:04:27:0b: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:CC:13:97:7D:67:A1:84:52:B7:C8:D6:76:E2:F9:C2:5E:B0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/4313f272-19da-3ece-8785-96fe34c6509d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl X509v3 Authority Key Identifier: keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer sbgp-ipAddrBlock: critical IPv4: 23.144.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e5:5d:6e:bf:0f:78:03:aa:54:bb:5f:7d:5d:02:12:52:98: 7e:b9:68:cb:9b:1f:ed:a4:f6:59:79:9b:1f:fc:3b:07:95:27: 65:f4:c9:42:ad:d1:9d:bb:42:ae:4d:e1:d1:d2:80:d9:1e:0e: ed:9b:e6:11:39:20:40:25:e8:ff:b5:26:d7:ad:e4:ac:ec:93: e4:d7:ec:72:a8:e5:cc:b8:74:dd:a8:d2:0e:ce:5a:fe:fc:b6: fd:41:e1:48:d4:29:f6:b2:b0:9d:9a:50:78:bb:c4:7a:24:0e: e4:ff:d0:9f:dc:24:57:48:c6:30:62:ae:be:40:03:30:45:22: 48:f0:41:9f:4e:5a:79:1d:7f:e7:44:4d:ba:48:3b:29:9c:ff: 27:36:4d:74:00:6c:9f:0a:6e:dc:aa:1c:ab:21:f6:e9:4c:46: 25:75:a5:f5:a8:a1:12:5d:32:2b:dd:56:19:dd:99:79:ea:89: e4:a2:74:a6:d9:10:dc:61:3c:0d:49:10:2d:b6:92:75:99:dd: 02:ae:6e:0a:2c:a7:0b:c1:01:d6:12:a2:19:78:f1:5c:24:6e: 76:4f:ff:fe:88:92:26:5b:00:7b:a9:c0:36:29:16:f9:89:01: c8:ab:87:1a:76:f3:5f:89:5c:45:d6:a7:16:ec:8b:8b:2b:b8: 66:92:d4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuWR9150SwPOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjYTdiNDUtODNlMS00YTFjLTg3MTMtMzE3YWRlYTBl MjcwMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTEzNjRhYzQtM2YyYy00MDk3LTkwZGQtMWFmNjlmMzEwOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk11ZTajUmfGNrO4FBcm9bM5P5KkhoAtQ16Q ei66P2vk8yx1rrCe64/G3/OziVRSJIBqXLs7aTxc4KQ0cHT2UwIzrXdCRjKCR3yc GpEZFYS0oH7mef8qny+Zs6dKmT/MniCeztcoYjTt2AWN9OITIpa1fbYh1mnt9yyu mPatHpl+pa5Kyy2P8iCY4I/G06YU3/eUUuDRV7/ltIbdtU8WLsesBjh7dXRPB3td J32iLxSVRAxEKm8hDyWu91RRsnsv6c+ordzTHNTo2Hr01t8JDGOitoCerjYQ7lwW n3EUsqdadDCcTHnngZliU9IXpwd5MmEWb8xdypfW/98EJwtejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr8zBOXfWehhFK3yNZ24vnCXrAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xN2Nh N2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVhMGUyNzAvNDMxM2YyNzItMTlkYS0z ZWNlLTg3ODUtOTZmZTM0YzY1MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTdjYTdiNDUtODNlMS00YTFjLTg3 MTMtMzE3YWRlYTBlMjcwLzE3Y2E3YjQ1LTgzZTEtNGExYy04NzEzLTMxN2FkZWEw ZTI3MC5jcmwwHwYDVR0jBBgwFoAUXaYc3mxg/ha1PG9fmN+RwddkQOUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xN2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdh ZGVhMGUyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFflXW6/D3gDqlS7X31dAhJSmH65aMubH+2k9ll5mx/8OweVJ2X0yUKt 0Z27Qq5N4dHSgNkeDu2b5hE5IEAl6P+1Jtet5Kzsk+TX7HKo5cy4dN2o0g7OWv78 tv1B4UjUKfaysJ2aUHi7xHokDuT/0J/cJFdIxjBirr5AAzBFIkjwQZ9OWnkdf+dE TbpIOymc/yc2TXQAbJ8KbtyqHKsh9ulMRiV1pfWooRJdMivdVhndmXnqieSidKbZ ENxhPA1JEC22knWZ3QKubgospwvBAdYSohl48VwkbnZP//6IkiZbAHupwDYpFvmJ Acirhxp281+JXEXWpxbsi4sruGaS1Ng= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:27 2025 by rpki-client