$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/c83cbe7c-4117-3e2a-9832-97f64a9b349b.roa File: c83cbe7c-4117-3e2a-9832-97f64a9b349b.roa (raw, json) Hash identifier: UKYVvQv85qYhU446C0nO8iPcSw0pDoekPgqb3olnLpw= Subject key identifier: 32:62:04:72:A1:BE:4D:0A:50:28:95:05:C3:E3:06:B3:36:18:1C:4C Certificate issuer: /CN=31c5953d-e37e-4639-a814-20faebab1999 Certificate serial: 010D0C9F4328584B4D11D132271A2E4403FE3D40 Authority key identifier: BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/c83cbe7c-4117-3e2a-9832-97f64a9b349b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 401604 IP address blocks: 23.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d1:32:27:1a:2e:44:03:fe:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c5953d-e37e-4639-a814-20faebab1999 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=1fc5cb24-75d8-421a-8964-a406b1831da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:56:d3:e6:e5:f4:e7:a2:f1:55:9d:b6:30: 10:f9:f8:75:9d:27:1a:d3:a8:bf:71:71:6d:f5:75: b0:7a:d4:b6:4a:9c:81:8e:97:4b:57:c7:4d:f2:f6: 9a:4a:92:78:b8:82:a3:74:19:1c:5e:9a:b6:a9:0a: ff:c6:94:b3:ad:27:18:a6:9d:2a:56:be:42:10:eb: 62:84:a3:4e:ee:bf:76:6c:94:57:96:e0:2f:dc:68: 79:7f:8a:63:a8:a9:d0:cb:5d:fa:a9:50:2d:b3:3c: 25:dd:6a:9f:4e:1f:d4:9e:72:4c:61:d3:a8:4c:7e: 5b:8f:82:6c:13:74:90:08:32:76:bb:77:5c:bf:6b: d2:bb:91:e3:e8:8d:96:06:9b:55:e2:07:e5:69:a6: 93:90:d6:ea:59:3d:75:53:ba:61:d8:c6:d6:50:9e: 5c:57:b4:95:2d:b8:50:e5:a0:bf:54:26:5f:f6:83: 44:7d:88:6e:0c:d4:37:3a:59:3b:20:87:2d:79:1a: 77:03:c2:42:2a:a7:c2:16:9e:69:40:7e:e9:bd:2b: c9:b8:15:17:8d:b7:74:24:b5:c7:e7:cd:85:02:50: ea:43:68:ea:0b:1f:49:c6:51:52:c5:cc:da:62:04: 23:83:4a:f8:bc:ae:db:e1:75:10:86:05:f3:43:1c: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:04:72:A1:BE:4D:0A:50:28:95:05:C3:E3:06:B3:36:18:1C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/c83cbe7c-4117-3e2a-9832-97f64a9b349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.crl X509v3 Authority Key Identifier: keyid:BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer sbgp-ipAddrBlock: critical IPv4: 23.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:58:d5:20:2d:61:b9:b2:25:35:e0:50:54:f7:39:e7:1d:2f: 14:d9:9a:f5:a0:d5:88:94:7f:cf:2c:dd:5f:c7:a4:4b:a0:2b: d1:96:f4:b5:45:ef:95:cb:78:ea:d1:8a:d9:8d:61:86:67:6d: 55:5f:58:3c:fc:33:58:ad:1b:c6:82:17:a8:ca:32:df:90:73: 41:7c:a7:99:b7:2a:ac:89:9b:0b:6b:3b:93:ea:9e:23:6b:9e: 3d:9c:09:40:86:1b:c7:ab:fc:23:e9:6a:38:af:17:92:e6:be: 4c:0a:95:9e:c8:e8:58:58:69:cf:4e:42:75:9b:70:f7:52:4c: 75:20:0b:0d:c2:72:74:f3:fb:94:cb:e4:6d:06:53:3d:90:fd: 73:d0:f3:15:8a:67:61:4f:64:f2:ec:85:0a:0a:83:23:72:fa: d0:7d:0e:2a:d3:87:dc:60:c8:bb:12:ad:cb:2e:32:e3:09:ea: 2b:d2:d0:d9:b1:87:b7:71:d0:5b:74:e2:0c:80:2e:38:c2:44: b9:fa:e7:9a:72:0e:88:e0:4f:e8:6c:90:26:48:e6:8a:14:cb: 57:e1:6e:ef:2e:17:53:73:1e:52:a3:6d:5f:92:56:78:d5:96: a2:5b:26:1f:bc:08:fb:c9:63:1b:99:19:25:b9:df:ab:c4:14: 96:e6:0d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdEyJxouRAP+PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjNTk1M2QtZTM3ZS00NjM5LWE4MTQtMjBmYWViYWIx OTk5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MWZjNWNiMjQtNzVkOC00MjFhLTg5NjQtYTQwNmIxODMxZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFNW0+bl9Oei8VWdtjAQ+fh1nSca06i/cXFt 9XWwetS2SpyBjpdLV8dN8vaaSpJ4uIKjdBkcXpq2qQr/xpSzrScYpp0qVr5CEOti hKNO7r92bJRXluAv3Gh5f4pjqKnQy136qVAtszwl3WqfTh/UnnJMYdOoTH5bj4Js E3SQCDJ2u3dcv2vSu5Hj6I2WBptV4gflaaaTkNbqWT11U7ph2MbWUJ5cV7SVLbhQ 5aC/VCZf9oNEfYhuDNQ3Olk7IIcteRp3A8JCKqfCFp5pQH7pvSvJuBUXjbd0JLXH 582FAlDqQ2jqCx9JxlFSxczaYgQjg0r4vK7b4XUQhgXzQxyoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJiBHKhvk0KUCiVBcPjBrM2GBxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMWM1 OTUzZC1lMzdlLTQ2MzktYTgxNC0yMGZhZWJhYjE5OTkvYzgzY2JlN2MtNDExNy0z ZTJhLTk4MzItOTdmNjRhOWIzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzFjNTk1M2QtZTM3ZS00NjM5LWE4 MTQtMjBmYWViYWIxOTk5LzMxYzU5NTNkLWUzN2UtNDYzOS1hODE0LTIwZmFlYmFi MTk5OS5jcmwwHwYDVR0jBBgwFoAUv5EJBQ6P8SsxwSyO3fhyp7sByEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMWM1OTUzZC1lMzdlLTQ2MzktYTgxNC0yMGZh ZWJhYjE5OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpY1SAtYbmyJTXgUFT3OecdLxTZmvWg1YiUf88s3V/HpEugK9GW9LVF 75XLeOrRitmNYYZnbVVfWDz8M1itG8aCF6jKMt+Qc0F8p5m3KqyJmwtrO5PqniNr nj2cCUCGG8er/CPpajivF5LmvkwKlZ7I6FhYac9OQnWbcPdSTHUgCw3CcnTz+5TL 5G0GUz2Q/XPQ8xWKZ2FPZPLshQoKgyNy+tB9DirTh9xgyLsSrcsuMuMJ6ivS0Nmx h7dx0Ft04gyALjjCRLn655pyDojgT+hskCZI5ooUy1fhbu8uF1NzHlKjbV+SVnjV lqJbJh+8CPvJYxuZGSW536vEFJbmDTI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:42 2025 by rpki-client