$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa File: 77efcf0c-d256-3988-b1d9-86cfee38f155.roa (raw, json) Hash identifier: /eKKQeeQzyF4RlV4x93FixU9bXbXBwXphhzb40mmI9k= Subject key identifier: C3:83:CB:02:86:DD:59:DF:8A:A7:25:3D:6A:AE:C9:06:3B:6F:A9:36 Certificate issuer: /CN=41fd7014-304a-4567-8e40-00c686067021 Certificate serial: 010D0C9F4328584B004BF6C3006FC444D772F200 Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 31788 IP address blocks: 23.191.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f6:c3:00:6f:c4:44:d7:72:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fd7014-304a-4567-8e40-00c686067021 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=db10905e-09d7-482b-835d-97b9cc086f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:5a:3e:17:2e:b8:a9:2b:63:02:ef:c0:ec: f3:e4:ea:67:fa:7e:5d:c8:55:dc:7f:0e:1e:8e:a8: d4:20:71:0e:5e:09:58:20:ad:ae:82:c4:4f:c7:5f: ce:ea:87:36:c1:6d:31:62:97:bf:0d:38:a9:1d:95: d9:34:b6:47:0d:fa:d7:a8:7d:96:8f:45:b6:f4:51: 81:3f:b0:bc:02:b2:44:df:52:09:cd:fa:4a:ce:ee: fa:1a:cf:f0:68:17:c9:15:41:1b:db:29:4a:c9:58: 05:3c:09:fd:f9:99:d3:54:1f:e7:23:6a:e6:fe:4d: c8:a9:7d:56:e8:88:4e:c8:4c:5d:b6:d6:58:a7:93: 8d:5a:40:a0:e2:79:d3:43:94:64:80:c1:c6:3b:f2: a5:c0:49:67:ad:ee:67:78:1e:23:23:6f:94:67:6b: 62:5a:c6:d5:ba:c9:13:7a:b2:15:a4:75:94:12:a8: 9b:74:d2:c6:93:b0:5f:9c:ec:b3:c8:74:4e:a5:34: 2d:66:27:b2:f0:84:df:90:38:da:fd:80:4f:c6:83: bf:44:cb:c8:f6:75:53:0d:b7:b1:0f:0d:e7:20:85: 7c:dd:bc:c5:c3:40:e3:f4:ae:c9:1a:88:af:43:58: 58:5d:bd:3b:60:46:c2:19:43:02:39:2d:66:f1:73: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:CB:02:86:DD:59:DF:8A:A7:25:3D:6A:AE:C9:06:3B:6F:A9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl X509v3 Authority Key Identifier: keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer sbgp-ipAddrBlock: critical IPv4: 23.191.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4e:05:72:15:6e:54:a0:c5:08:8d:83:85:c8:ec:dc:75:85: 15:3a:0a:4b:35:a3:13:b0:48:cd:02:18:ba:bd:65:51:4d:c3: 3e:87:6d:d1:aa:bd:80:bc:6c:75:70:7d:fa:3d:52:0f:c5:43: 2e:55:39:9b:08:39:49:d4:83:83:77:cd:b1:88:f4:9a:6b:dd: 16:af:19:05:24:04:a8:10:dc:b1:49:cc:f1:61:b1:9c:5c:18: 37:f6:dc:f7:f4:d0:eb:de:f3:44:40:fb:5e:30:7a:97:09:30: a4:ac:39:53:d8:7a:8a:18:47:f3:90:18:64:13:bd:10:a6:08: 03:fd:ca:bf:67:2d:30:1d:8f:8b:ed:b9:31:52:56:28:34:00: fb:be:b3:bb:90:a1:7e:f9:42:2b:29:5b:e1:49:eb:65:84:f6: 94:b5:ca:33:c8:3d:e7:41:0f:12:e9:4e:5a:e8:c6:60:20:5b: 5f:d9:2e:c6:88:77:83:22:09:1c:2a:e6:dd:47:91:69:69:a1: 53:4d:94:9d:05:78:e1:51:f6:71:27:e6:40:6c:1c:7f:20:47: ad:e1:91:31:03:77:2e:c0:11:e8:d0:92:e0:55:66:ac:af:2b: d7:cc:36:4e:50:63:79:ef:a6:f3:37:b0:39:ce:b7:c8:bc:30: 17:bd:60:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/bDAG/ERNdy8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFmZDcwMTQtMzA0YS00NTY3LThlNDAtMDBjNjg2MDY3 MDIxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGIxMDkwNWUtMDlkNy00ODJiLTgzNWQtOTdiOWNjMDg2ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CxaPhcuuKkrYwLvwOzz5Opn+n5dyFXcfw4e jqjUIHEOXglYIK2ugsRPx1/O6oc2wW0xYpe/DTipHZXZNLZHDfrXqH2Wj0W29FGB P7C8ArJE31IJzfpKzu76Gs/waBfJFUEb2ylKyVgFPAn9+ZnTVB/nI2rm/k3IqX1W 6IhOyExdttZYp5ONWkCg4nnTQ5RkgMHGO/KlwElnre5neB4jI2+UZ2tiWsbVuskT erIVpHWUEqibdNLGk7BfnOyzyHROpTQtZiey8ITfkDja/YBPxoO/RMvI9nVTDbex Dw3nIIV83bzFw0Dj9K7JGoivQ1hYXb07YEbCGUMCOS1m8XMdQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMODywKG3VnfiqclPWquyQY7b6k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MWZk NzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2ODYwNjcwMjEvNzdlZmNmMGMtZDI1Ni0z OTg4LWIxZDktODZjZmVlMzhmMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDFmZDcwMTQtMzA0YS00NTY3LThl NDAtMDBjNjg2MDY3MDIxLzQxZmQ3MDE0LTMwNGEtNDU2Ny04ZTQwLTAwYzY4NjA2 NzAyMS5jcmwwHwYDVR0jBBgwFoAUvwLbAMTMW4yEOJmhoTwhtBEm7D0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MWZkNzAxNC0zMDRhLTQ1NjctOGU0MC0wMGM2 ODYwNjcwMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdOBXIVblSgxQiNg4XI7Nx1hRU6Cks1oxOwSM0CGLq9ZVFNwz6HbdGq vYC8bHVwffo9Ug/FQy5VOZsIOUnUg4N3zbGI9Jpr3RavGQUkBKgQ3LFJzPFhsZxc GDf23Pf00Ove80RA+14wepcJMKSsOVPYeooYR/OQGGQTvRCmCAP9yr9nLTAdj4vt uTFSVig0APu+s7uQoX75QispW+FJ62WE9pS1yjPIPedBDxLpTlroxmAgW1/ZLsaI d4MiCRwq5t1HkWlpoVNNlJ0FeOFR9nEn5kBsHH8gR63hkTEDdy7AEejQkuBVZqyv K9fMNk5QY3nvpvM3sDnOt8i8MBe9YL0= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:10 2025 by rpki-client