$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ef896e6-4b03-3da5-aa0c-2973018d144e.roa File: 0ef896e6-4b03-3da5-aa0c-2973018d144e.roa (raw, json) Hash identifier: qDZqJKOhaf1ItKe/NHoSZAfTWKOMKvJOt9pcrTPpG6Y= Subject key identifier: A1:04:75:A0:E3:03:73:77:3B:5B:B9:4B:64:95:9F:F0:A8:4B:C4:C0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B3DB6F0BD1EBCF40138502730 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ef896e6-4b03-3da5-aa0c-2973018d144e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 23.230.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:f0:bd:1e:bc:f4:01:38:50:27:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f02a2934-d1b5-455a-ba47-607ae3e772fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:a8:88:fd:a1:bb:62:35:66:50:1a:cb:22: 21:4f:fc:4a:bb:f6:c2:96:7e:3c:8d:c3:04:54:45: 01:67:79:44:e9:0d:53:04:89:94:f6:f8:cf:9c:cc: b1:da:50:14:4e:c4:df:56:20:f1:1c:e7:0d:b3:b7: 93:2c:c9:a5:d2:52:df:56:1c:fb:a2:fe:7a:d9:5d: a9:4c:41:2a:45:e3:d2:cb:f4:c3:4f:e6:18:d7:6b: 24:66:5d:da:ca:6e:8e:f1:34:9c:bf:f1:b3:98:c3: 27:a3:76:87:3f:1d:da:94:05:b2:8f:9b:2f:19:45: 1e:98:9e:d6:83:2c:4e:34:56:b1:df:18:db:40:67: ce:5c:2c:47:9d:7b:f3:47:cc:45:00:fc:cf:0c:a4: b5:81:ce:47:d4:87:ce:dc:05:e7:94:7b:8d:be:2b: f5:c4:69:a1:ab:59:d8:7f:bb:e4:b9:dd:59:e5:b1: 60:82:0c:cd:72:95:e7:8d:49:07:67:dc:a7:09:e9: a1:db:6c:18:a3:cf:aa:cf:42:60:57:a6:cc:76:ff: 60:d3:6f:1a:2a:c9:b9:17:20:0f:6e:96:44:da:16: 3d:37:36:77:8c:c5:17:35:43:82:27:ea:ee:47:c0: 4a:5b:56:c1:cf:44:c3:e4:6a:49:a1:36:ce:d2:85: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:75:A0:E3:03:73:77:3B:5B:B9:4B:64:95:9F:F0:A8:4B:C4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ef896e6-4b03-3da5-aa0c-2973018d144e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:e1:13:43:21:a1:9b:5d:ee:c7:90:e3:d1:d0:eb:38:cb: a3:73:69:80:a9:0b:e2:4e:39:ab:d4:f2:6b:be:4a:dc:03:e6: a9:9b:9c:dd:e3:c5:69:f9:d1:8d:53:fa:ad:e8:3f:51:0f:6e: 20:5b:81:29:04:eb:87:e3:66:f6:97:ed:4c:98:51:2c:2e:29: ea:b9:e9:46:bd:73:c4:0f:ff:dc:d9:26:7d:c2:f9:ee:0f:55: 8a:25:51:45:f2:55:74:ab:1b:9c:da:d2:aa:c4:c3:da:02:7d: 11:ed:11:06:15:18:dd:e3:29:17:07:df:df:81:93:df:4f:2f: 6f:6a:34:b7:48:c7:a1:ad:7c:c8:54:0e:6b:49:a4:2b:96:48: 9f:a7:57:0e:64:b5:86:6f:a3:bd:3f:c0:84:a4:2d:48:8e:a5: 18:98:f4:d2:1f:ce:dd:f3:ba:dc:da:58:0b:f0:33:43:fb:9d: ae:89:46:cf:66:15:12:3e:f8:54:2c:92:8d:6c:a8:ea:bd:53: 42:2c:df:4b:dc:4a:36:74:8a:d2:6a:b9:54:8b:4f:d1:dc:75: 9a:9e:b9:e8:b9:d1:37:dc:cf:e4:04:47:6d:be:cc:4c:f9:5e: 86:4a:aa:a6:aa:b3:27:eb:81:29:d1:0b:e4:96:54:fa:01:d9: 1a:32:ac:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvC9Hrz0AThQJzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjAyYTI5MzQtZDFiNS00NTVhLWJhNDctNjA3YWUzZTc3MmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcOoiP2hu2I1ZlAayyIhT/xKu/bCln48jcME VEUBZ3lE6Q1TBImU9vjPnMyx2lAUTsTfViDxHOcNs7eTLMml0lLfVhz7ov562V2p TEEqRePSy/TDT+YY12skZl3aym6O8TScv/GzmMMno3aHPx3alAWyj5svGUUemJ7W gyxONFax3xjbQGfOXCxHnXvzR8xFAPzPDKS1gc5H1IfO3AXnlHuNviv1xGmhq1nY f7vkud1Z5bFgggzNcpXnjUkHZ9ynCemh22wYo8+qz0JgV6bMdv9g028aKsm5FyAP bpZE2hY9NzZ3jMUXNUOCJ+ruR8BKW1bBz0TD5GpJoTbO0oVvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEEdaDjA3N3O1u5S2SVn/CoS8TAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGVmODk2ZTYtNGIwMy0z ZGE1LWFhMGMtMjk3MzAxOGQxNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE04RNDIaGbXe7HkOPR0Os4y6NzaYCpC+JOOavU8mu+StwD5qmbnN3j xWn50Y1T+q3oP1EPbiBbgSkE64fjZvaX7UyYUSwuKeq56Ua9c8QP/9zZJn3C+e4P VYolUUXyVXSrG5za0qrEw9oCfRHtEQYVGN3jKRcH39+Bk99PL29qNLdIx6GtfMhU DmtJpCuWSJ+nVw5ktYZvo70/wISkLUiOpRiY9NIfzt3zutzaWAvwM0P7na6JRs9m FRI++FQsko1sqOq9U0Is30vcSjZ0itJquVSLT9HcdZqeuei50Tfcz+QER22+zEz5 XoZKqqaqsyfrgSnRC+SWVPoB2RoyrOA= -----END CERTIFICATE-----Generated at Sat Oct 11 13:01:52 2025 by rpki-client