$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/88818dc5-80c5-3329-af37-0081f9a30ecd.roa File: 88818dc5-80c5-3329-af37-0081f9a30ecd.roa (raw, json) Hash identifier: 1tlrxFcUNjFt7u9NWXwJa6K7CychqjokcPFDNCspM88= Subject key identifier: F9:EC:FD:FF:58:D1:A9:5D:58:8C:91:F5:7B:2C:1A:4E:FE:AE:3D:A7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B25FC49D054EC4399CA87A300 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/88818dc5-80c5-3329-af37-0081f9a30ecd.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 3257 IP address blocks: 23.231.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:49:d0:54:ec:43:99:ca:87:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=a32065d4-e80a-4c8c-8331-c497453863f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:98:4d:d2:b5:4a:af:6c:0f:ab:31:2c:93: 60:5f:07:9c:71:a0:f2:6c:08:56:00:73:88:49:1b: c8:a0:fe:6c:72:07:1d:12:db:d3:2c:54:94:55:21: 5a:64:92:d4:1c:69:5a:67:2b:2b:97:a7:9c:a4:33: 7c:4a:9f:e5:91:09:e7:42:58:c1:08:3d:cb:7f:1d: 27:aa:3a:28:b1:b4:5f:72:0e:73:bd:14:07:70:23: e4:6c:c0:29:7a:84:d8:af:03:34:25:28:ff:27:73: fa:99:00:a2:59:02:f5:cb:54:c8:55:ac:b2:ae:af: 08:02:b2:45:5b:53:cf:71:00:8f:62:66:b7:f8:3f: e3:1a:f4:9e:b5:c2:4b:d4:a8:c5:d9:90:47:77:32: 01:8b:19:61:1b:0e:fd:73:44:4d:20:50:02:33:64: e8:f8:24:57:e3:ac:ad:e7:1c:5f:a3:95:0b:fd:d2: 17:5d:ce:d2:14:62:88:7a:f7:2d:d0:ec:6f:af:d1: 31:cd:64:1d:65:7b:a2:0d:8b:eb:11:1e:4a:f8:92: a6:21:60:37:e5:29:9d:1b:6f:47:ed:de:39:32:52: 5a:de:f9:92:a3:40:de:04:1c:27:86:9f:cd:f1:3b: 1c:4a:f9:80:5a:ac:8f:84:18:11:9b:71:d1:dc:ab: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EC:FD:FF:58:D1:A9:5D:58:8C:91:F5:7B:2C:1A:4E:FE:AE:3D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/88818dc5-80c5-3329-af37-0081f9a30ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:62:a8:6b:c7:b5:29:b5:61:1e:92:b9:b4:87:6d:7c:da:f3: dc:1a:c9:c0:8b:6a:b1:5f:ea:4d:a1:bf:98:b7:43:8d:42:89: f4:94:54:27:6e:c7:a5:a6:5a:82:9c:38:51:4c:ad:25:d4:13: e0:d8:e5:f2:0b:96:b5:11:43:6b:92:3d:5c:6b:10:31:66:4e: 50:5e:86:93:29:37:74:88:e5:b4:0f:6d:32:fa:96:0b:43:c2: be:7b:84:28:6e:da:5a:f2:4d:5c:b5:1b:1e:fc:c9:e4:f4:c0: fd:ac:90:39:86:e2:37:4a:99:a0:75:e3:97:3c:2f:b5:f5:83: f9:93:a2:b6:30:1a:41:9b:ed:9e:cf:0f:9f:41:0a:79:5f:19: bc:b6:00:79:a0:ea:72:66:3a:1c:e2:5c:b2:c5:c7:e1:eb:60: 53:de:ef:02:fb:ab:a0:36:60:51:4c:a0:42:37:9a:29:29:2d: 42:81:36:6a:df:2d:1b:5a:02:1c:5d:fb:01:be:92:fa:13:54: f3:1c:4b:37:2b:bf:b2:dc:74:35:58:a3:f4:84:3e:b8:8d:e5: b7:ab:67:f8:4e:d4:25:f9:bb:7f:01:20:01:b0:a8:9f:5a:f9: ca:d0:bf:22:1c:7a:fb:bb:fd:f3:d1:4e:da:73:6f:d1:c6:df: 40:d2:eb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EnQVOxDmcqHowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YTMyMDY1ZDQtZTgwYS00YzhjLTgzMzEtYzQ5NzQ1Mzg2M2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMOYTdK1Sq9sD6sxLJNgXweccaDybAhWAHOI SRvIoP5scgcdEtvTLFSUVSFaZJLUHGlaZysrl6ecpDN8Sp/lkQnnQljBCD3Lfx0n qjoosbRfcg5zvRQHcCPkbMApeoTYrwM0JSj/J3P6mQCiWQL1y1TIVayyrq8IArJF W1PPcQCPYma3+D/jGvSetcJL1KjF2ZBHdzIBixlhGw79c0RNIFACM2To+CRX46yt 5xxfo5UL/dIXXc7SFGKIevct0Oxvr9ExzWQdZXuiDYvrER5K+JKmIWA35SmdG29H 7d45MlJa3vmSo0DeBBwnhp/N8TscSvmAWqyPhBgRm3HR3KulKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPns/f9Y0aldWIyR9XssGk7+rj2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvODg4MThkYzUtODBjNS0z MzI5LWFmMzctMDA4MWY5YTMwZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+dvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1iqGvHtSm1YR6SubSHbXza89waycCLarFf6k2hv5i3Q41CifSUVCdu x6WmWoKcOFFMrSXUE+DY5fILlrURQ2uSPVxrEDFmTlBehpMpN3SI5bQPbTL6lgtD wr57hChu2lryTVy1Gx78yeT0wP2skDmG4jdKmaB145c8L7X1g/mTorYwGkGb7Z7P D59BCnlfGby2AHmg6nJmOhziXLLFx+HrYFPe7wL7q6A2YFFMoEI3mikpLUKBNmrf LRtaAhxd+wG+kvoTVPMcSzcrv7LcdDVYo/SEPriN5berZ/hO1CX5u38BIAGwqJ9a +crQvyIcevu7/fPRTtpzb9HG30DS660= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:33 2025 by rpki-client