$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/32a9a0df-b21a-3216-b89a-19ae46992198.roa File: 32a9a0df-b21a-3216-b89a-19ae46992198.roa (raw, json) Hash identifier: jkH2+GJ85MVJwgbBdGCKG+W/2X61Tw+GwZBka1PPIqs= Subject key identifier: 8D:A9:06:B1:0B:BB:94:74:7D:86:CB:69:8E:17:EC:15:82:9A:17:F9 Certificate issuer: /CN=a0ac972f-89d5-4709-bd00-5907e762ff2b Certificate serial: 010D0C9F4328584B1D9C217DFEB841306FF58480 Authority key identifier: 0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/32a9a0df-b21a-3216-b89a-19ae46992198.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 401264 IP address blocks: 23.185.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:21:7d:fe:b8:41:30:6f:f5:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ac972f-89d5-4709-bd00-5907e762ff2b Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=7477f6da-ad3d-4ef5-ac15-79a9264818c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:4e:5d:4a:dd:95:33:82:86:f7:24:06:d0: e7:6e:b3:37:92:f1:dc:1c:df:b3:16:98:a3:31:c0: fa:10:25:ab:fc:9d:fb:a8:6f:ed:b6:ef:32:e5:6a: 9d:1c:0d:b0:3e:e7:81:85:37:21:51:1e:a0:9c:fe: 1b:e1:02:16:d0:75:f9:fc:d2:e2:60:bf:39:47:06: 26:56:f5:4b:12:98:d2:2a:2b:77:ca:79:92:cc:a2: ef:e5:3d:11:92:c9:cd:5b:2f:95:f8:f6:78:b0:dd: 7c:c2:ec:a3:d3:30:aa:58:82:1c:10:73:e6:5e:e6: 92:49:19:b1:43:ee:39:99:f4:a0:f0:5e:90:12:69: 54:25:d5:73:92:77:f9:52:f7:2f:c2:c3:b7:09:1e: 80:55:1f:9f:32:79:6c:fe:34:0a:59:47:a6:2a:11: 53:6f:86:50:02:3e:06:6b:da:ad:52:4c:34:e3:a5: 3f:48:ab:51:d7:01:71:e0:34:f6:21:10:ce:c5:98: b1:80:da:72:ec:48:20:23:05:c9:ff:07:df:1d:67: 19:fa:40:f1:6f:5a:84:ee:82:73:c9:28:d0:79:0b: 70:aa:13:6d:9d:9f:90:cd:28:41:6a:f7:a6:22:ff: 16:23:9a:ee:d4:cb:d0:1f:99:2d:c7:8d:78:41:2c: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A9:06:B1:0B:BB:94:74:7D:86:CB:69:8E:17:EC:15:82:9A:17:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/32a9a0df-b21a-3216-b89a-19ae46992198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl X509v3 Authority Key Identifier: keyid:0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer sbgp-ipAddrBlock: critical IPv4: 23.185.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:60:34:9c:36:af:fe:e8:88:22:b1:1d:1a:5b:af:e5:e9:f0: 41:64:d5:34:71:aa:32:e3:5c:1a:57:67:17:49:f9:fc:e0:6f: 42:87:b6:16:cd:cb:19:33:c0:ba:f3:bb:37:26:23:89:0b:71: 8c:e9:0e:46:6e:a5:3b:a5:f4:5a:58:46:5d:96:90:92:88:f8: 26:c3:bf:36:20:9e:3e:f8:cf:6b:6b:66:73:65:7c:da:32:f0: ca:9e:66:43:4f:a3:2e:38:a0:55:05:37:c1:68:44:9c:26:a4: 84:62:1b:2d:62:16:d4:7d:6b:16:32:a2:2e:e1:72:3c:0c:82: 27:41:71:59:df:0b:45:02:75:ed:5e:7e:0c:c2:24:f5:e9:f7: bb:65:69:36:f1:bf:11:a2:00:ff:be:f8:23:c8:18:98:1f:38: 1b:6a:6b:0f:bc:02:5f:1a:93:28:dc:75:4b:9e:f4:19:91:4b: c8:db:7e:c4:f5:17:5e:f3:0d:1a:24:0b:6e:c5:47:3b:fd:f0: a5:eb:78:9a:39:ce:5b:8c:49:e4:4f:3b:1b:df:28:23:53:9b: cb:9d:2b:24:97:ef:3f:64:13:1f:e8:d5:6a:1a:f5:46:da:2c: 12:7f:0b:2e:c3:a8:fc:2b:87:e7:c3:fe:fe:90:1a:24:dc:b8: 96:e0:a2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCF9/rhBMG/1hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBhYzk3MmYtODlkNS00NzA5LWJkMDAtNTkwN2U3NjJm ZjJiMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NzQ3N2Y2ZGEtYWQzZC00ZWY1LWFjMTUtNzlhOTI2NDgxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYZOXUrdlTOChvckBtDnbrM3kvHcHN+zFpij McD6ECWr/J37qG/ttu8y5WqdHA2wPueBhTchUR6gnP4b4QIW0HX5/NLiYL85RwYm VvVLEpjSKit3ynmSzKLv5T0RksnNWy+V+PZ4sN18wuyj0zCqWIIcEHPmXuaSSRmx Q+45mfSg8F6QEmlUJdVzknf5UvcvwsO3CR6AVR+fMnls/jQKWUemKhFTb4ZQAj4G a9qtUkw046U/SKtR1wFx4DT2IRDOxZixgNpy7EggIwXJ/wffHWcZ+kDxb1qE7oJz ySjQeQtwqhNtnZ+QzShBavemIv8WI5ru1MvQH5ktx414QSxnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2pBrELu5R0fYbLaY4X7BWCmhf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMGFj OTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3ZTc2MmZmMmIvMzJhOWEwZGYtYjIxYS0z MjE2LWI4OWEtMTlhZTQ2OTkyMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTBhYzk3MmYtODlkNS00NzA5LWJk MDAtNTkwN2U3NjJmZjJiL2EwYWM5NzJmLTg5ZDUtNDcwOS1iZDAwLTU5MDdlNzYy ZmYyYi5jcmwwHwYDVR0jBBgwFoAUDAsbcArdo62IQKJGB7aHD8IVofowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMGFjOTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3 ZTc2MmZmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFgNJw2r/7oiCKxHRpbr+Xp8EFk1TRxqjLjXBpXZxdJ+fzgb0KHthbN yxkzwLrzuzcmI4kLcYzpDkZupTul9FpYRl2WkJKI+CbDvzYgnj74z2trZnNlfNoy 8MqeZkNPoy44oFUFN8FoRJwmpIRiGy1iFtR9axYyoi7hcjwMgidBcVnfC0UCde1e fgzCJPXp97tlaTbxvxGiAP+++CPIGJgfOBtqaw+8Al8akyjcdUue9BmRS8jbfsT1 F17zDRokC27FRzv98KXreJo5zluMSeRPOxvfKCNTm8udKySX7z9kEx/o1Woa9Uba LBJ/Cy7DqPwrh+fD/v6QGiTcuJbgoks= -----END CERTIFICATE-----Generated at Fri Oct 10 19:50:35 2025 by rpki-client