$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa File: 976702a7-d8db-3c3b-a6d5-137267df4791.roa (raw, json) Hash identifier: 7/DJzw/CvZqFOUiGFbL9lT48OCNEmq6knalQ37Dj2ME= Subject key identifier: 29:33:03:D2:92:A9:5A:9F:93:6A:A6:50:AD:42:6E:FC:36:C3:8A:97 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B715CB9F756D4F3C1B05BAD80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 62564 IP address blocks: 23.230.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b9:f7:56:d4:f3:c1:b0:5b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=14c05c30-bf79-4fe6-a5e4-fa32bc8cc766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:c8:13:27:cb:b2:fd:a8:41:79:8c:95:8e: 91:17:a2:de:6d:bd:be:71:5e:03:6b:c4:f3:ea:4c: f6:a2:ed:a1:8b:1a:e5:a7:f5:96:bc:2e:9b:2c:23: 99:b5:ab:e6:8b:8b:1b:c7:e2:d1:85:39:91:a7:e1: a3:1f:16:55:89:98:d9:0c:59:e6:bc:31:be:17:a5: 15:36:5d:b8:ab:16:37:ad:a9:7f:60:44:4d:92:b7: 37:7b:c0:4c:c0:d6:3f:de:7c:8d:98:6e:ec:c9:62: f5:c3:34:89:2a:e5:e3:82:f0:0d:38:0f:e3:c7:fc: fb:30:bf:99:fc:3d:a7:06:3f:43:33:75:ef:a4:fc: d9:3c:97:b4:a1:77:81:e1:63:4b:12:90:d8:d9:f8: 1f:fb:bd:2f:9b:cf:d7:b7:e6:83:de:10:87:94:dd: dc:67:30:59:8c:e3:67:88:d4:6b:97:a0:11:d9:1f: 62:8d:fe:08:97:b9:ea:62:34:45:50:25:10:1f:12: 50:b9:6f:63:a4:89:4c:31:b1:48:c0:31:62:63:cc: 82:a5:59:79:74:44:eb:d1:e7:f8:60:25:fb:3e:ef: aa:50:fe:c2:7a:ba:e3:46:b0:be:96:9a:fb:01:2b: f1:7d:b2:05:41:a4:df:be:2b:46:3f:15:7f:39:a3: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:33:03:D2:92:A9:5A:9F:93:6A:A6:50:AD:42:6E:FC:36:C3:8A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/976702a7-d8db-3c3b-a6d5-137267df4791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dd:39:3c:0f:f7:c6:74:c4:d0:bd:75:52:db:9c:d2:1f:01: 60:84:02:5e:c2:58:6b:f8:e9:da:7a:37:31:d0:94:67:00:31: 88:31:a4:56:ec:2f:19:cb:ad:81:9a:59:bc:f1:89:61:c3:fb: 63:cd:4c:8d:44:3e:f1:d5:59:d6:4f:99:27:4a:54:ee:fb:2d: 64:e4:d5:30:af:e5:e9:3a:59:b0:87:71:98:f5:7d:98:2a:7d: 08:af:32:c8:3a:09:73:c3:45:b3:08:8e:11:d1:ff:f1:6f:5a: 1c:44:1a:21:68:4d:37:54:ce:1b:0a:8b:1a:41:25:e6:2b:09: fa:77:79:ba:b6:af:92:19:43:01:b7:4e:0e:42:c2:e7:49:0d: 69:35:69:f0:69:61:9e:82:38:22:91:e7:f2:6d:da:db:90:df: 32:8c:18:7a:27:ca:66:2f:7f:b8:1d:e8:3f:ec:b7:1e:05:ed: cc:14:92:b4:5f:7f:85:4d:c1:0a:28:b0:09:e1:bc:c0:f4:f0: 48:f5:f1:fd:04:d2:1e:5c:d0:64:7c:e5:66:62:46:1f:f6:03: b0:48:15:85:95:75:5f:6e:b6:c0:bf:38:7c:50:18:f5:c3:fa: 13:29:ee:43:10:e8:86:27:f7:32:b1:b3:58:64:aa:bf:5e:1e: 8b:cc:3d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLn3VtTzwbBbrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTRjMDVjMzAtYmY3OS00ZmU2LWE1ZTQtZmEzMmJjOGNjNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQDIEyfLsv2oQXmMlY6RF6Lebb2+cV4Da8Tz 6kz2ou2hixrlp/WWvC6bLCOZtavmi4sbx+LRhTmRp+GjHxZViZjZDFnmvDG+F6UV Nl24qxY3ral/YERNkrc3e8BMwNY/3nyNmG7syWL1wzSJKuXjgvANOA/jx/z7ML+Z /D2nBj9DM3XvpPzZPJe0oXeB4WNLEpDY2fgf+70vm8/Xt+aD3hCHlN3cZzBZjONn iNRrl6AR2R9ijf4Il7nqYjRFUCUQHxJQuW9jpIlMMbFIwDFiY8yCpVl5dETr0ef4 YCX7Pu+qUP7CerrjRrC+lpr7ASvxfbIFQaTfvitGPxV/OaO52wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkzA9KSqVqfk2qmUK1Cbvw2w4qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTc2NzAyYTctZDhkYi0z YzNiLWE2ZDUtMTM3MjY3ZGY0NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvdOTwP98Z0xNC9dVLbnNIfAWCEAl7CWGv46dp6NzHQlGcAMYgxpFbs LxnLrYGaWbzxiWHD+2PNTI1EPvHVWdZPmSdKVO77LWTk1TCv5ek6WbCHcZj1fZgq fQivMsg6CXPDRbMIjhHR//FvWhxEGiFoTTdUzhsKixpBJeYrCfp3ebq2r5IZQwG3 Tg5CwudJDWk1afBpYZ6COCKR5/Jt2tuQ3zKMGHonymYvf7gd6D/stx4F7cwUkrRf f4VNwQoosAnhvMD08Ej18f0E0h5c0GR85WZiRh/2A7BIFYWVdV9utsC/OHxQGPXD +hMp7kMQ6IYn9zKxs1hkqr9eHovMPRE= -----END CERTIFICATE-----Generated at Sat Oct 11 13:09:57 2025 by rpki-client