$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa File: 12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json) Hash identifier: 8jWUQeMzmFQTnnfGQN/biZAfrPPqL7IZT8opHxF6vgY= Subject key identifier: 31:DA:B2:17:B8:0B:CF:42:54:C1:7F:36:62:6F:72:49:EE:93:7B:AA Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Certificate serial: 010D0C9F4328584B0746C79F41C44D0875B8DC10 Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 30006 IP address blocks: 23.191.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c7:9f:41:c4:4d:08:75:b8:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=77d1e041-4403-4934-8781-37cbe31bca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:a4:0c:3c:a7:8b:64:6a:16:0b:1d:fe:f6: cc:5c:ac:f5:12:d3:86:82:fa:05:ef:c7:c6:4e:dc: 1c:8d:7d:32:67:b9:65:9e:17:2a:97:76:3f:8c:2d: a1:08:fe:6b:a5:17:ba:14:3b:66:4b:dd:02:51:91: 0f:ff:8f:c7:c8:f8:8f:0e:57:f6:13:91:f3:35:2d: 3b:e8:19:af:e9:c4:34:c6:6a:44:e0:88:ee:a3:dd: 91:fc:d5:3d:33:8b:b1:9e:12:14:ea:aa:08:5f:8a: de:62:78:d0:fb:0f:f7:a4:90:f9:06:fd:cd:e1:97: a8:e5:44:86:cb:b4:ae:fc:15:ce:85:e4:68:df:34: f6:3a:4c:51:47:1c:ab:57:78:7e:16:be:ba:b5:79: 2b:1c:5c:a2:a1:07:ca:6c:c3:17:b9:f8:2d:30:91: 43:56:dd:2d:86:4f:dd:4e:0e:33:55:6c:32:12:09: 0b:22:9b:80:fa:2a:8b:a7:8e:06:bc:54:fe:8a:f3: 1a:6a:87:44:47:a8:41:2d:83:36:e8:3d:5f:eb:e4: 66:2f:77:6e:66:96:ee:27:b2:c6:c7:04:5f:a6:9b: 6e:29:f4:dd:62:be:6e:dd:58:8f:3e:bd:ea:f1:9e: 9a:25:02:59:90:2b:5e:b5:19:d6:36:70:dc:09:18: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:B2:17:B8:0B:CF:42:54:C1:7F:36:62:6F:72:49:EE:93:7B:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl X509v3 Authority Key Identifier: keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer sbgp-ipAddrBlock: critical IPv4: 23.191.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5d:98:ee:eb:8d:28:8b:72:56:7d:28:3b:d4:2a:07:5f:2c: 06:35:ed:d5:7b:13:9e:e7:6b:63:59:0f:bc:6e:2f:76:41:ed: 87:e4:0c:a4:71:f1:b9:c4:6b:b8:79:e9:7a:f4:6a:02:fe:91: f5:ff:ae:a8:c9:38:09:a4:7d:45:d3:29:61:35:30:a6:67:cc: 56:bf:23:54:91:20:49:bc:6e:ac:49:a2:e9:b7:c1:a4:6c:a2: 38:e6:a5:da:a7:a5:b1:76:f9:7c:40:79:e7:8c:ef:f3:2e:71: af:01:8e:cc:71:ae:12:ff:f6:f3:28:be:9f:c7:d9:3e:2c:13: 29:2a:ce:8a:56:2b:61:24:88:66:5a:ad:e3:78:63:01:e1:04: c1:ef:d9:3d:0a:bb:c0:ae:68:7d:84:ea:4d:1a:ba:d9:f4:86: d7:65:a5:46:65:70:fa:b2:21:06:38:32:08:6d:74:06:0f:4a: 7d:82:23:17:f8:af:68:69:1e:d7:d4:bd:5e:0c:68:25:4f:35: 87:1e:4a:24:3b:ab:34:b6:dc:3a:bf:d7:ee:8c:b5:b9:70:31: 0a:95:ed:d7:91:50:c3:a6:74:79:de:ce:21:fc:68:ec:09:2b: 71:aa:9f:e2:de:14:7d:20:fc:f5:2d:9b:a1:f7:ce:2c:3e:8f: 04:d4:a7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsefQcRNCHW43BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MTljZDMtZjk2OS00OWFkLWFjMDktM2ZiNDAzOTJj ZGM1MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NzdkMWUwNDEtNDQwMy00OTM0LTg3ODEtMzdjYmUzMWJjYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9SkDDyni2RqFgsd/vbMXKz1EtOGgvoF78fG TtwcjX0yZ7llnhcql3Y/jC2hCP5rpRe6FDtmS90CUZEP/4/HyPiPDlf2E5HzNS07 6Bmv6cQ0xmpE4Ijuo92R/NU9M4uxnhIU6qoIX4reYnjQ+w/3pJD5Bv3N4Zeo5USG y7Su/BXOheRo3zT2OkxRRxyrV3h+Fr66tXkrHFyioQfKbMMXufgtMJFDVt0thk/d Tg4zVWwyEgkLIpuA+iqLp44GvFT+ivMaaodER6hBLYM26D1f6+RmL3duZpbuJ7LG xwRfpptuKfTdYr5u3ViPPr3q8Z6aJQJZkCtetRnWNnDcCRiSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHashe4C89CVMF/NmJvcknuk3uqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYx OWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0MDM5MmNkYzUvMTJlMWQyMzYtYjdmOC0z N2RiLThkNWQtZjYwNDIyNWY4Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MTljZDMtZjk2OS00OWFkLWFj MDktM2ZiNDAzOTJjZGM1LzhkNjE5Y2QzLWY5NjktNDlhZC1hYzA5LTNmYjQwMzky Y2RjNS5jcmwwHwYDVR0jBBgwFoAUj3lBQpaZ4ZColVZ3VzDV06kJgAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYxOWNkMy1mOTY5LTQ5YWQtYWMwOS0zZmI0 MDM5MmNkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtdmO7rjSiLclZ9KDvUKgdfLAY17dV7E57na2NZD7xuL3ZB7YfkDKRx 8bnEa7h56Xr0agL+kfX/rqjJOAmkfUXTKWE1MKZnzFa/I1SRIEm8bqxJoum3waRs ojjmpdqnpbF2+XxAeeeM7/Muca8BjsxxrhL/9vMovp/H2T4sEykqzopWK2EkiGZa reN4YwHhBMHv2T0Ku8CuaH2E6k0autn0htdlpUZlcPqyIQY4MghtdAYPSn2CIxf4 r2hpHtfUvV4MaCVPNYceSiQ7qzS23Dq/1+6MtblwMQqV7deRUMOmdHneziH8aOwJ K3Gqn+LeFH0g/PUtm6H3ziw+jwTUp1I= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:27 2025 by rpki-client