$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1390fea0-a5ff-3cc5-b806-a103600fc4e4.roa File: 1390fea0-a5ff-3cc5-b806-a103600fc4e4.roa (raw, json) Hash identifier: kMcMaW4Uw1IYAvyiaol6yNpz1T03T4cNkUMrGPPHmPw= Subject key identifier: D8:9B:69:1D:A3:07:19:E7:AD:77:A4:DD:C0:01:90:B7:43:31:BB:1D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B2E5C47C4C8AEFB15E5FBFF80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1390fea0-a5ff-3cc5-b806-a103600fc4e4.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 214238 IP address blocks: 23.230.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:47:c4:c8:ae:fb:15:e5:fb:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=d5201dd0-e737-4efa-bf72-a02e500f2859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:14:84:b2:8e:01:87:16:f4:3f:4e:de:95: 28:3e:f7:a6:17:35:4e:80:50:5e:34:10:51:d4:ba: 4c:ec:c7:71:97:07:58:eb:da:e6:08:0c:5f:c6:24: 6c:36:6a:df:57:d2:9a:e2:bd:fa:f3:53:18:78:d8: e3:e7:d3:0b:25:ba:0d:f6:85:a3:dd:8f:7b:16:6f: fe:1c:69:38:0a:da:d8:e9:0a:02:dd:db:6c:e9:fe: ed:ba:7e:04:01:cb:63:78:de:e5:35:ce:18:40:fb: 3b:a7:b9:c4:df:b0:43:1c:17:32:3a:b4:38:76:86: 87:5b:b9:91:10:c7:44:7c:d7:49:87:16:fd:d0:42: 5f:dd:6f:c1:65:f9:83:81:b0:90:6c:26:4d:51:be: 50:4e:f8:2e:e7:b0:7a:dd:62:47:1c:8c:25:23:41: ef:b4:e7:e5:b3:67:f7:7a:73:6d:f7:78:b6:28:3a: 71:d4:ab:f5:91:77:b8:26:34:bb:56:19:3e:75:32: 9f:b5:46:3a:43:26:c0:6a:2a:4e:4d:72:0b:f9:ec: 9f:67:90:94:ed:e0:bd:0a:33:46:ce:68:88:21:46: c4:37:d4:a5:67:06:0f:ba:6d:5a:5a:7b:e3:7c:55: a1:ef:15:06:52:8c:da:9a:5d:71:78:3e:8f:06:14: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:69:1D:A3:07:19:E7:AD:77:A4:DD:C0:01:90:B7:43:31:BB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1390fea0-a5ff-3cc5-b806-a103600fc4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ba:91:76:d8:28:0e:17:be:0a:c4:73:bf:d0:8f:3a:4f:73: 09:fb:c7:3a:75:04:75:91:e2:7d:55:24:11:13:7c:d1:56:2a: 9a:1c:b9:3c:01:8e:2e:48:d9:05:36:cf:82:f1:33:25:18:67: bd:ce:b4:b2:b9:be:c7:47:e8:b9:9b:fd:70:20:8a:a3:aa:25: ba:74:b1:84:58:84:e1:92:75:16:ef:76:56:ef:bb:4f:12:88: 82:01:4e:37:fe:96:6c:54:1c:aa:a4:12:4b:3d:5e:9f:8b:e5: 83:88:44:0f:dc:48:c9:a7:29:60:fa:c7:ef:f5:13:78:4d:a7: 32:ce:33:2b:4c:ac:97:86:88:3d:1d:e5:b9:84:2d:a9:0a:d6: b2:24:c4:98:b4:47:da:9a:15:74:78:ae:61:8c:e9:c6:65:98: 37:c4:a9:6d:ef:99:dd:90:63:8b:04:04:01:ce:fc:10:3d:f4: df:f2:78:90:29:97:b5:95:df:78:2e:e2:dc:17:b8:fb:8a:38: 5f:34:1c:03:7a:bb:a2:59:da:b6:5c:a0:ab:3c:12:69:cf:7d: 10:78:91:e7:09:eb:ed:14:5f:6a:86:1b:40:e0:cb:04:bd:c4: ad:c6:d5:64:94:c9:10:bf:4d:0b:0a:e1:42:39:b1:15:a1:b1: 42:53:8e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEfEyK77FeX7/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDUyMDFkZDAtZTczNy00ZWZhLWJmNzItYTAyZTUwMGYyODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgUhLKOAYcW9D9O3pUoPvemFzVOgFBeNBBR 1LpM7MdxlwdY69rmCAxfxiRsNmrfV9Ka4r3681MYeNjj59MLJboN9oWj3Y97Fm/+ HGk4CtrY6QoC3dts6f7tun4EActjeN7lNc4YQPs7p7nE37BDHBcyOrQ4doaHW7mR EMdEfNdJhxb90EJf3W/BZfmDgbCQbCZNUb5QTvgu57B63WJHHIwlI0HvtOfls2f3 enNt93i2KDpx1Kv1kXe4JjS7Vhk+dTKftUY6QybAaipOTXIL+eyfZ5CU7eC9CjNG zmiIIUbEN9SlZwYPum1aWnvjfFWh7xUGUozaml1xeD6PBhRrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNibaR2jBxnnrXek3cABkLdDMbsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTM5MGZlYTAtYTVmZi0z Y2M1LWI4MDYtYTEwMzYwMGZjNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS6kXbYKA4XvgrEc7/QjzpPcwn7xzp1BHWR4n1VJBETfNFWKpocuTwB ji5I2QU2z4LxMyUYZ73OtLK5vsdH6Lmb/XAgiqOqJbp0sYRYhOGSdRbvdlbvu08S iIIBTjf+lmxUHKqkEks9Xp+L5YOIRA/cSMmnKWD6x+/1E3hNpzLOMytMrJeGiD0d 5bmELakK1rIkxJi0R9qaFXR4rmGM6cZlmDfEqW3vmd2QY4sEBAHO/BA99N/yeJAp l7WV33gu4twXuPuKOF80HAN6u6JZ2rZcoKs8EmnPfRB4kecJ6+0UX2qGG0DgywS9 xK3G1WSUyRC/TQsK4UI5sRWhsUJTjkI= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:55 2025 by rpki-client