$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa File: ee2f1c42-dd18-3695-9f92-54978bc931df.roa (raw, json) Hash identifier: O7dnUC7uepv2ZcIQ3g1LnUv8+h00fo5vLyPnagR4AXI= Subject key identifier: D5:61:D7:5D:67:EF:F3:AF:8F:F5:00:8E:0E:D2:59:18:70:60:16:C0 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584AF52170ACB7EE8C78992D4840 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 23.231.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:70:ac:b7:ee:8c:78:99:2d:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=6278e57e-c5d3-48d5-99fe-aae4042de988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:0c:b3:58:a1:0f:ec:d7:11:ba:83:ce:7c: 0e:a3:bd:b5:b2:b9:6d:be:24:8a:b1:76:41:9b:1e: 77:d6:e7:6b:2a:77:f8:dc:a0:c7:f5:0d:16:16:85: 49:42:75:e3:5d:37:86:45:18:8c:bf:e0:86:c2:02: 9f:ee:b0:dd:7b:76:43:0b:0b:13:87:f4:24:05:0f: 8e:76:24:e8:eb:28:69:68:a4:25:82:a7:b5:6e:cb: f8:eb:16:bd:77:2d:8d:d7:6a:9a:e6:05:15:70:ab: f4:42:16:15:d0:ed:1d:0b:d6:4a:35:5e:b3:ef:78: 85:54:26:55:b8:f8:92:7b:93:da:93:b6:d1:2c:41: 45:f2:1e:37:6b:24:1e:04:f1:2d:26:b5:c5:de:50: 1a:c9:98:72:52:f8:08:75:ce:e7:ef:3a:29:4a:aa: 6c:77:22:ca:ee:f1:ac:8b:99:57:46:db:1a:dd:4a: ef:1b:bc:62:f5:5b:3c:f3:51:c2:0f:f5:5e:f3:d3: d4:f0:f2:9e:01:75:1a:08:28:e2:c5:26:45:b8:a7: 30:de:39:19:32:10:b1:e8:5e:68:cc:ab:90:c2:54: 6a:b2:35:b7:53:85:66:a9:4c:19:a3:8f:c0:0b:24: 2b:58:14:5d:87:b4:98:41:cb:27:97:ec:62:3c:39: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:61:D7:5D:67:EF:F3:AF:8F:F5:00:8E:0E:D2:59:18:70:60:16:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ee2f1c42-dd18-3695-9f92-54978bc931df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:c2:b6:87:b6:ec:2e:db:45:6f:4c:13:8f:a1:99:f5:3b: c1:15:e3:9c:bb:86:ba:a1:c6:96:5c:30:ad:c4:7c:a3:78:69: 54:25:a3:58:dc:7f:46:ec:fe:5d:b5:ff:7f:14:c3:d9:fc:aa: 9c:74:e1:06:c0:ee:ec:8f:4a:06:84:ad:22:d4:36:4c:23:78: ae:46:04:b5:ab:24:46:ca:49:56:ac:b1:14:a4:74:45:ba:14: bd:ad:31:da:81:27:da:ae:d9:16:27:57:46:22:7e:91:b8:49: 2b:cf:64:b4:c5:8c:54:ce:5d:e7:5b:9a:8d:25:45:12:91:ff: 38:7c:5b:a8:db:e4:0e:51:f3:37:f7:39:a3:9c:3d:dd:01:94: 50:72:b6:22:ee:76:f9:98:19:fe:0d:98:da:9c:4a:47:c6:87: 6b:a5:58:cf:6d:dd:ed:ec:4d:10:2e:82:ea:17:9f:91:cd:83: 73:5f:7d:26:05:5c:30:79:c7:fb:49:53:25:f7:e2:0b:8b:06: 15:09:32:4b:8d:05:25:20:78:6d:03:b1:d9:55:85:83:83:6f: 90:7a:6b:9d:ae:2f:3d:cb:8b:4c:e1:ef:70:ba:cb:5f:ae:93: aa:a1:ae:23:c3:b2:15:48:44:c4:b2:19:d4:2e:b8:8c:5f:34: 94:79:fe:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXCst+6MeJktSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjI3OGU1N2UtYzVkMy00OGQ1LTk5ZmUtYWFlNDA0MmRlOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieUMs1ihD+zXEbqDznwOo721srltviSKsXZB mx531udrKnf43KDH9Q0WFoVJQnXjXTeGRRiMv+CGwgKf7rDde3ZDCwsTh/QkBQ+O diTo6yhpaKQlgqe1bsv46xa9dy2N12qa5gUVcKv0QhYV0O0dC9ZKNV6z73iFVCZV uPiSe5Pak7bRLEFF8h43ayQeBPEtJrXF3lAayZhyUvgIdc7n7zopSqpsdyLK7vGs i5lXRtsa3UrvG7xi9Vs881HCD/Ve89PU8PKeAXUaCCjixSZFuKcw3jkZMhCx6F5o zKuQwlRqsjW3U4VmqUwZo4/ACyQrWBRdh7SYQcsnl+xiPDnb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVh111n7/Ovj/UAjg7SWRhwYBbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZWUyZjFjNDItZGQxOC0z Njk1LTlmOTItNTQ5NzhiYzkzMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+OwraHtuwu20VvTBOPoZn1O8EV45y7hrqhxpZcMK3EfKN4aVQlo1jc f0bs/l21/38Uw9n8qpx04QbA7uyPSgaErSLUNkwjeK5GBLWrJEbKSVassRSkdEW6 FL2tMdqBJ9qu2RYnV0YifpG4SSvPZLTFjFTOXedbmo0lRRKR/zh8W6jb5A5R8zf3 OaOcPd0BlFBytiLudvmYGf4NmNqcSkfGh2ulWM9t3e3sTRAuguoXn5HNg3NffSYF XDB5x/tJUyX34guLBhUJMkuNBSUgeG0DsdlVhYODb5B6a52uLz3Li0zh73C6y1+u k6qhriPDshVIRMSyGdQuuIxfNJR5/tA= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:54 2025 by rpki-client