$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa File: aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa (raw, json) Hash identifier: 8NezphAwryd4nkhVh6YI/XJx79eENRhN4e/sYGvsfcc= Subject key identifier: CD:72:A7:A1:F5:C5:40:13:09:85:D6:C0:94:55:DF:63:67:F4:E1:52 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B620209DFE19A1B3283567240 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 834 IP address blocks: 23.230.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:09:df:e1:9a:1b:32:83:56:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b17847c7-0f63-46ce-9321-27efbf190a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:b8:89:1c:de:f5:15:8f:bd:80:e1:1f:74: 83:00:a8:23:2f:29:b1:c4:b3:e4:6a:c5:84:09:87: 03:04:6e:eb:c3:c8:e7:f6:67:5c:35:0d:01:ba:7e: fe:05:36:00:25:72:dc:61:b0:37:45:83:f3:de:d9: 5a:df:3c:c0:d7:ca:e9:cf:56:ff:8f:8c:27:43:54: a6:09:ef:86:c4:95:bf:a6:59:c9:92:b5:0f:29:49: 1b:2b:86:8f:e7:20:f2:a6:ff:87:30:14:33:68:fa: 6e:60:d1:10:44:c9:27:3c:e5:91:92:78:c0:b7:07: 7b:a5:53:7f:6b:15:d5:8d:e0:05:65:95:87:ea:91: cf:70:8d:44:21:af:be:7e:d4:e5:99:46:75:29:f0: 0c:6f:c0:1b:ef:65:34:09:a7:fe:c2:79:40:5f:ab: 3b:ab:67:bd:c1:96:d0:63:d3:51:3c:f6:bd:54:c3: 61:66:b7:3d:49:9c:e7:f9:de:e3:87:bf:cf:ef:68: 30:47:8f:6a:e8:2c:44:4d:c9:44:a8:0b:f7:aa:41: 5e:88:f2:61:a2:7a:4d:2d:ef:d0:7e:30:28:b8:b2: 1c:74:0f:72:65:86:cb:d0:d9:0a:dd:01:e0:77:d2: 96:e8:aa:d1:e0:07:e5:53:27:22:11:47:76:c2:71: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:A7:A1:F5:C5:40:13:09:85:D6:C0:94:55:DF:63:67:F4:E1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:85:b3:90:09:1b:cb:4e:f7:1e:e9:5f:7b:8d:a7:ce:5b:98: 12:87:2b:53:3c:a1:a2:76:e7:68:91:6c:b7:9e:dd:56:97:46: 2b:b1:a5:24:de:88:7c:1c:6b:5f:a8:35:e7:ec:77:bc:77:3c: 76:34:ee:68:28:fa:81:b0:8a:84:9e:f4:4c:4a:f9:4f:c3:ad: 12:35:2e:f4:8b:9f:de:c5:57:7c:db:2b:89:28:d5:ef:89:4c: 6d:4c:d7:11:ca:92:38:77:4e:7b:fe:4d:da:19:e4:e8:12:4d: 34:51:fb:28:83:c1:ab:35:63:54:98:a6:e4:4a:c9:30:56:76: 2c:c2:2d:96:f5:04:df:89:4e:c8:2e:60:f0:20:51:c9:f4:71: 26:f2:97:ee:9a:b7:a1:e3:72:d3:84:8c:58:f6:ae:ad:f9:8e: d3:56:7d:06:7a:f6:b3:93:ca:a4:fe:31:cd:c0:9e:96:ec:8c: fd:e4:e4:84:0a:ce:48:b6:41:90:3b:1a:79:df:04:ff:a9:b7: 65:de:59:1e:ba:aa:0c:f3:83:d6:7b:ef:46:51:06:2f:eb:00: 09:56:93:45:3a:0c:40:28:26:87:a2:6e:2f:7d:4b:56:a9:c7: ad:6b:7e:c9:a7:d9:cc:fc:fe:23:b6:7f:9a:4a:82:7a:75:0b: 6d:a4:c4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgnf4ZobMoNWckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjE3ODQ3YzctMGY2My00NmNlLTkzMjEtMjdlZmJmMTkwYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltm4iRze9RWPvYDhH3SDAKgjLymxxLPkasWE CYcDBG7rw8jn9mdcNQ0Bun7+BTYAJXLcYbA3RYPz3tla3zzA18rpz1b/j4wnQ1Sm Ce+GxJW/plnJkrUPKUkbK4aP5yDypv+HMBQzaPpuYNEQRMknPOWRknjAtwd7pVN/ axXVjeAFZZWH6pHPcI1EIa++ftTlmUZ1KfAMb8Ab72U0Caf+wnlAX6s7q2e9wZbQ Y9NRPPa9VMNhZrc9SZzn+d7jh7/P72gwR49q6CxETclEqAv3qkFeiPJhonpNLe/Q fjAouLIcdA9yZYbL0NkK3QHgd9KW6KrR4AflUyciEUd2wnEXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1yp6H1xUATCYXWwJRV32Nn9OFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWE0ZGYzOWYtMTFiMy0z MWQ3LWFkNjktZGM3YWFjOTlhOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOFs5AJG8tO9x7pX3uNp85bmBKHK1M8oaJ252iRbLee3VaXRiuxpSTe iHwca1+oNefsd7x3PHY07mgo+oGwioSe9ExK+U/DrRI1LvSLn97FV3zbK4ko1e+J TG1M1xHKkjh3Tnv+TdoZ5OgSTTRR+yiDwas1Y1SYpuRKyTBWdizCLZb1BN+JTsgu YPAgUcn0cSbyl+6at6HjctOEjFj2rq35jtNWfQZ69rOTyqT+Mc3AnpbsjP3k5IQK zki2QZA7GnnfBP+pt2XeWR66qgzzg9Z770ZRBi/rAAlWk0U6DEAoJoeibi99S1ap x61rfsmn2cz8/iO2f5pKgnp1C22kxCw= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:50 2025 by rpki-client