$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1647a81-e383-3fbd-9ab4-4f03c4cd4041.roa File: a1647a81-e383-3fbd-9ab4-4f03c4cd4041.roa (raw, json) Hash identifier: N2uJwfHzW0746XvRE7ybY5wdWcoRnEU0gUArp1DFcQU= Subject key identifier: D9:B7:0C:4E:02:1C:06:29:DC:51:F2:F2:C9:04:DD:20:77:3B:CF:4B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B238C9FF50C65B87CE2B938C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1647a81-e383-3fbd-9ab4-4f03c4cd4041.roa Signing time: Tue 09 Sep 2025 16:04:20 +0000 ROA not before: Tue 09 Sep 2025 16:04:20 +0000 ROA not after: Mon 08 Dec 2025 17:04:20 +0000 asID: 9304 IP address blocks: 23.230.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:8c:9f:f5:0c:65:b8:7c:e2:b9:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 9 16:04:20 2025 GMT Not After : Dec 8 17:04:20 2025 GMT Subject: CN=21f835a7-e05d-4010-beda-b47659b50465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:d7:f0:91:41:fb:7b:e7:c8:25:af:15:db: 13:f7:80:9e:cd:17:49:77:f3:8c:27:08:d2:bb:1b: be:42:bf:30:f7:84:21:8a:b7:e6:15:4e:1f:a7:b5: d8:98:85:4f:18:04:ba:67:ec:2a:f4:28:0b:55:50: 5b:8a:eb:c6:f6:f4:d4:45:7d:d1:86:4e:66:46:88: de:89:e4:c0:77:76:10:76:fc:b2:75:1b:39:84:0c: 6b:80:9e:2b:e7:35:ff:31:eb:8e:8a:24:77:f4:77: ac:fa:7f:cc:6d:64:71:28:a0:c5:9f:03:1b:b0:bf: 73:2a:21:b4:96:30:b2:08:d1:61:10:42:2f:d2:36: fd:3d:19:e8:5d:79:b1:b9:51:cc:da:ea:ec:47:2e: 28:a3:3e:8e:da:a1:3d:8a:c1:dd:36:03:25:d6:1d: ba:c2:e6:9b:2c:45:36:0d:15:dd:a9:61:3e:4f:df: f4:be:e9:05:6c:6a:fe:c8:c9:fb:74:f1:3d:7f:55: ff:b1:e9:aa:81:dd:aa:44:ca:03:e9:09:cb:37:f3: b9:ff:7b:a7:4f:81:57:c1:ec:05:f8:d2:a0:7b:0e: 69:3c:13:47:cd:07:c5:f0:a3:05:9a:60:f7:29:bd: c8:05:0e:3a:af:29:1e:66:16:af:08:ec:80:82:9e: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:0C:4E:02:1C:06:29:DC:51:F2:F2:C9:04:DD:20:77:3B:CF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1647a81-e383-3fbd-9ab4-4f03c4cd4041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:4c:62:bb:88:be:40:70:57:e8:c4:f3:5e:41:cd:df:6d: 91:eb:b2:50:fd:53:78:35:05:13:6c:a1:02:38:b6:34:b6:b9: aa:0f:95:59:47:0e:3f:f4:50:84:be:ba:a5:f7:95:56:e0:b9: 44:bd:58:11:e7:36:96:4f:58:01:0e:c0:af:c6:fc:de:db:5f: a5:68:b6:61:2a:5c:a5:77:31:37:86:a6:2e:a4:70:0b:e2:5f: 32:cc:4f:aa:69:e3:6c:09:0d:47:4d:b3:31:93:35:dd:cf:6d: a6:74:7a:d7:45:7e:7a:a3:80:e0:54:d7:ca:a3:7a:af:34:8a: ee:c5:ba:10:f0:d9:3c:34:02:66:80:3a:15:be:f6:90:2e:47: ab:d7:9c:b0:b0:3f:de:63:03:cf:ed:47:46:25:0f:ed:e7:ca: 7c:75:6c:13:24:30:23:58:6b:78:bc:2f:b3:e9:ed:a0:b3:4a: 7e:b7:94:35:38:a3:52:54:4f:f7:fa:01:04:c9:cd:73:83:8b: e7:a8:9a:68:d8:c4:b1:79:30:41:68:0d:de:49:d2:9a:45:c0: f0:c2:65:eb:2d:5a:be:c1:33:14:44:0f:e9:5e:d5:3d:c0:37: 58:b4:6a:7a:9e:ff:2a:dd:88:5a:e2:b5:7d:89:bd:36:5d:e0: 06:33:bb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjjJ/1DGW4fOK5OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwOTE2MDQyMFoXDTI1MTIwODE3MDQyMFowLzEtMCsGA1UEAxMk MjFmODM1YTctZTA1ZC00MDEwLWJlZGEtYjQ3NjU5YjUwNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4/X8JFB+3vnyCWvFdsT94CezRdJd/OMJwjS uxu+Qr8w94QhirfmFU4fp7XYmIVPGAS6Z+wq9CgLVVBbiuvG9vTURX3Rhk5mRoje ieTAd3YQdvyydRs5hAxrgJ4r5zX/MeuOiiR39Hes+n/MbWRxKKDFnwMbsL9zKiG0 ljCyCNFhEEIv0jb9PRnoXXmxuVHM2ursRy4ooz6O2qE9isHdNgMl1h26wuabLEU2 DRXdqWE+T9/0vukFbGr+yMn7dPE9f1X/semqgd2qRMoD6QnLN/O5/3unT4FXwewF +NKgew5pPBNHzQfF8KMFmmD3Kb3IBQ46rykeZhavCOyAgp4lmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm3DE4CHAYp3FHy8skE3SB3O89LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTE2NDdhODEtZTM4My0z ZmJkLTlhYjQtNGYwM2M0Y2Q0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZkTGK7iL5AcFfoxPNeQc3fbZHrslD9U3g1BRNsoQI4tjS2uaoPlVlH Dj/0UIS+uqX3lVbguUS9WBHnNpZPWAEOwK/G/N7bX6VotmEqXKV3MTeGpi6kcAvi XzLMT6pp42wJDUdNszGTNd3PbaZ0etdFfnqjgOBU18qjeq80iu7FuhDw2Tw0AmaA OhW+9pAuR6vXnLCwP95jA8/tR0YlD+3nynx1bBMkMCNYa3i8L7Pp7aCzSn63lDU4 o1JUT/f6AQTJzXODi+eommjYxLF5MEFoDd5J0ppFwPDCZestWr7BMxRED+le1T3A N1i0anqe/yrdiFritX2JvTZd4AYzu1A= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:52 2025 by rpki-client