$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/914f1b11-078b-3a1d-9a1d-f32c174b3ae8.roa File: 914f1b11-078b-3a1d-9a1d-f32c174b3ae8.roa (raw, json) Hash identifier: HUD2dJY4hgInZTgKHvtafgRXcQSBp0OOSjXrc/erZ7U= Subject key identifier: D3:0D:8E:CD:0D:54:A7:77:24:F5:06:72:F9:91:96:41:87:89:78:29 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584B3557097B711B71634AB6EEC0 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/914f1b11-078b-3a1d-9a1d-f32c174b3ae8.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 26879 IP address blocks: 23.140.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:09:7b:71:1b:71:63:4a:b6:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=2f49dcb8-c7e3-4a53-8048-76e3b813e6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:4c:d3:24:5d:eb:3c:d9:dd:47:a3:52:0b: 96:46:7b:fc:e1:be:90:89:c3:34:85:16:95:7d:2d: 0e:bd:15:4b:eb:0e:6f:7a:c1:12:e8:f5:90:7a:cf: 4c:2a:9b:9c:9f:fd:58:a6:33:dd:b5:7f:bc:12:eb: c8:6b:c7:40:2e:09:e4:88:65:ee:de:5c:4b:bc:0b: 24:5d:02:92:81:9f:e9:ed:28:62:70:ae:c8:5e:38: 13:4e:ac:54:ce:72:2f:2a:69:3b:0c:c2:16:ae:7f: c6:2f:4b:95:32:f7:3c:c8:17:18:21:bd:a3:a0:35: 35:0b:1d:23:f1:fb:84:b3:a0:97:85:ef:b7:c0:08: ba:fa:58:78:fb:aa:d0:e4:3c:89:d5:5c:5a:69:1e: 30:aa:41:08:34:7c:ec:7c:58:7c:85:45:a0:b6:7c: 74:f8:bf:30:68:d6:de:e7:d4:64:a7:9c:da:cc:1c: 92:54:4c:8a:15:09:06:88:16:81:a1:b7:5a:ba:46: 61:b6:ab:c1:f4:bb:65:98:60:a8:58:97:3f:06:f6: 8d:b3:8a:8e:3f:ef:7b:47:84:98:03:0e:82:c3:39: 0f:70:92:67:9d:08:a4:66:46:6a:c1:06:4b:0a:5e: a6:97:3d:74:bf:ad:63:a2:39:f0:39:eb:ca:ae:61: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:8E:CD:0D:54:A7:77:24:F5:06:72:F9:91:96:41:87:89:78:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/914f1b11-078b-3a1d-9a1d-f32c174b3ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 23.140.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c4:32:59:fb:2a:a1:45:98:5b:67:e5:fa:31:e5:2a:a5:b2: 07:d6:20:26:9e:a5:68:28:2f:79:f8:9b:da:93:1c:a5:2d:51: b9:e7:49:c9:92:c6:d5:f0:66:96:4f:a2:36:46:64:d1:91:10: f4:c9:04:79:b1:44:59:0b:99:c7:2c:99:b5:06:64:63:1c:e1: 87:4e:73:f9:23:14:89:d9:2c:8e:fa:76:f5:a5:e6:b6:64:70: 54:e6:5c:20:94:b8:5d:9f:2d:03:5a:95:09:f1:74:6d:c8:c4: de:3b:ee:6c:8d:a3:0a:b4:be:bd:75:f8:6c:2f:e6:87:c3:38: cc:b4:71:9b:2f:76:1f:bc:70:41:e7:e3:aa:1a:da:89:1d:1c: 76:1a:c2:31:d9:c1:85:15:2a:c0:8f:c7:fe:57:be:80:4b:bf: 56:46:49:7b:cd:bd:20:fb:ec:25:50:d3:d9:30:a1:b8:45:57: b6:1a:c7:83:9e:0e:99:ff:05:43:3d:d1:7b:c6:9b:05:f7:f8: 36:cb:b3:5f:c8:66:f6:c8:04:41:e9:38:d0:8b:9a:0b:88:36: 7f:ca:c5:d7:b9:d4:f2:e2:cd:bb:58:63:5a:66:02:11:6b:07: b2:83:a0:b8:6c:63:c4:28:e0:94:2c:f0:54:f9:6f:8b:0a:e2: bf:e2:bf:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vwl7cRtxY0q27sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MmY0OWRjYjgtYzdlMy00YTUzLTgwNDgtNzZlM2I4MTNlNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvapM0yRd6zzZ3UejUguWRnv84b6QicM0hRaV fS0OvRVL6w5vesES6PWQes9MKpucn/1YpjPdtX+8EuvIa8dALgnkiGXu3lxLvAsk XQKSgZ/p7ShicK7IXjgTTqxUznIvKmk7DMIWrn/GL0uVMvc8yBcYIb2joDU1Cx0j 8fuEs6CXhe+3wAi6+lh4+6rQ5DyJ1VxaaR4wqkEINHzsfFh8hUWgtnx0+L8waNbe 59Rkp5zazBySVEyKFQkGiBaBobdaukZhtqvB9LtlmGCoWJc/BvaNs4qOP+97R4SY Aw6CwzkPcJJnnQikZkZqwQZLCl6mlz10v61jojnwOevKrmF3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMNjs0NVKd3JPUGcvmRlkGHiXgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvOTE0ZjFiMTEtMDc4Yi0z YTFkLTlhMWQtZjMyYzE3NGIzYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTEMln7KqFFmFtn5fox5SqlsgfWICaepWgoL3n4m9qTHKUtUbnnScmS xtXwZpZPojZGZNGREPTJBHmxRFkLmccsmbUGZGMc4YdOc/kjFInZLI76dvWl5rZk cFTmXCCUuF2fLQNalQnxdG3IxN477myNowq0vr11+Gwv5ofDOMy0cZsvdh+8cEHn 46oa2okdHHYawjHZwYUVKsCPx/5XvoBLv1ZGSXvNvSD77CVQ09kwobhFV7Yax4Oe Dpn/BUM90XvGmwX3+DbLs1/IZvbIBEHpONCLmguINn/Kxde51PLizbtYY1pmAhFr B7KDoLhsY8Qo4JQs8FT5b4sK4r/ivyM= -----END CERTIFICATE-----Generated at Fri Oct 10 14:15:02 2025 by rpki-client