$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa File: ac7f10c1-158d-39f2-bc54-d256515d1677.roa (raw, json) Hash identifier: ERapG+5jb432X+v9/5/+sLmDbRtjpZc0dNVYA59iR+A= Subject key identifier: 92:C4:AF:A0:9A:AC:AD:29:33:45:37:75:1E:09:F4:68:CB:B3:00:BE Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F4328584B0E41674864EA5C54D0AB65E0 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 401720 IP address blocks: 23.191.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:67:48:64:ea:5c:54:d0:ab:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=3132fcea-cd4d-411c-8a7f-1bf25115dc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:b6:4f:ff:d2:f7:71:5c:30:5c:bf:0b:55: 7f:04:36:12:96:64:b8:c1:f8:55:75:ab:f3:6f:fc: c7:89:b5:42:1c:1b:e9:0f:f6:c4:dc:63:e3:45:f9: 42:31:94:13:ce:54:b9:9e:d6:50:70:07:8c:a9:2a: 14:e2:2d:5e:a0:2e:7e:08:26:63:23:02:b8:fe:8c: 9d:8d:a2:ba:e7:39:15:dc:db:9e:f1:a9:9d:ad:63: 20:72:d3:38:37:94:b2:f4:e5:fb:61:3b:56:1d:f8: 0c:95:0e:0b:78:78:54:a2:80:3a:48:eb:a8:0f:8c: 92:3f:a6:83:66:ae:fd:3e:1d:ca:7c:56:12:bf:84: 65:44:1b:a8:ed:a2:18:d3:e2:dd:3a:ab:cd:48:73: 7e:43:a4:ad:04:7c:6b:62:b2:24:06:b6:9e:96:f5: f0:ff:03:2a:57:a0:56:65:d9:a6:aa:85:4d:32:b0: cc:7e:a0:84:e7:29:99:d4:07:bf:ae:2c:ee:a4:7e: 8e:1b:65:68:7f:9d:88:07:49:13:cc:5f:de:7c:bb: 18:53:ac:54:82:0c:2f:da:2f:e3:74:41:d0:9a:5e: 6b:7f:42:b3:8c:0a:8a:8e:57:85:7a:d6:e5:e3:2a: 0c:c8:33:41:07:88:93:6c:40:ae:1b:e8:e5:30:f7: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:AF:A0:9A:AC:AD:29:33:45:37:75:1E:09:F4:68:CB:B3:00:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/ac7f10c1-158d-39f2-bc54-d256515d1677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv4: 23.191.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cd:ca:9b:18:f1:f9:93:90:84:f6:f2:ff:35:11:bb:0e:0f: ac:e2:9e:35:84:e6:76:1e:f5:2e:dc:90:d1:02:3b:65:7a:72: 29:f1:57:14:bf:85:57:64:02:2f:9d:39:ab:c9:6a:29:f5:de: bb:db:a3:71:a4:e1:93:2d:91:c1:55:f0:10:d3:5f:da:75:c9: 9d:dd:3d:e2:ed:0b:be:53:52:67:05:2a:c3:f2:bd:56:43:d6: b3:a6:67:73:27:ba:56:9e:04:df:45:5d:f9:a6:b2:19:58:c0: 72:b4:ed:3e:19:61:ed:a1:96:db:dc:19:05:a9:46:ae:80:fe: 82:b5:6c:b1:c3:0e:29:89:53:0c:61:e1:06:79:01:e5:37:ce: a0:cf:2e:44:9e:55:18:85:6e:a0:db:d0:91:af:84:19:bc:8d: 40:52:d8:72:8e:d0:26:70:88:a0:11:6e:28:fe:43:5a:2d:0f: 01:63:c6:b4:e2:dd:a6:4e:7c:88:4e:ca:f7:65:b9:cd:e9:7e: c5:50:e8:91:3e:72:52:7a:e8:b3:6b:9b:3f:bb:aa:c8:37:23: ec:28:ab:e8:32:04:ba:3a:ee:b6:e8:fd:24:7d:f2:a3:d1:fa: 22:24:72:10:3b:c6:c2:a8:e2:ac:8e:c2:ac:36:99:83:6b:18: bb:f6:8b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWdIZOpcVNCrZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzEzMmZjZWEtY2Q0ZC00MTFjLThhN2YtMWJmMjUxMTVkYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcS2T//S93FcMFy/C1V/BDYSlmS4wfhVdavz b/zHibVCHBvpD/bE3GPjRflCMZQTzlS5ntZQcAeMqSoU4i1eoC5+CCZjIwK4/oyd jaK65zkV3Nue8amdrWMgctM4N5Sy9OX7YTtWHfgMlQ4LeHhUooA6SOuoD4ySP6aD Zq79Ph3KfFYSv4RlRBuo7aIY0+LdOqvNSHN+Q6StBHxrYrIkBraelvXw/wMqV6BW ZdmmqoVNMrDMfqCE5ymZ1Ae/rizupH6OG2Vof52IB0kTzF/efLsYU6xUggwv2i/j dEHQml5rf0KzjAqKjleFetbl4yoMyDNBB4iTbECuG+jlMPfdbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLEr6CarK0pM0U3dR4J9GjLswC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvYWM3ZjEwYzEtMTU4ZC0z OWYyLWJjNTQtZDI1NjUxNWQxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7NypsY8fmTkIT28v81EbsOD6zinjWE5nYe9S7ckNECO2V6cinxVxS/ hVdkAi+dOavJain13rvbo3Gk4ZMtkcFV8BDTX9p1yZ3dPeLtC75TUmcFKsPyvVZD 1rOmZ3MnulaeBN9FXfmmshlYwHK07T4ZYe2hltvcGQWpRq6A/oK1bLHDDimJUwxh 4QZ5AeU3zqDPLkSeVRiFbqDb0JGvhBm8jUBS2HKO0CZwiKARbij+Q1otDwFjxrTi 3aZOfIhOyvdluc3pfsVQ6JE+clJ66LNrmz+7qsg3I+woq+gyBLo67rbo/SR98qPR +iIkchA7xsKo4qyOwqw2mYNrGLv2iz4= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:32 2025 by rpki-client