$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa File: 42311329-687f-3581-9dd8-4ecc3e9bc883.roa (raw, json) Hash identifier: 2nLr3aB4uOBjYSiXMATa/Ff/e1FaPQmBykIwTFRoBLQ= Subject key identifier: AD:FB:04:02:09:71:60:67:3D:88:24:61:10:09:20:69:97:25:45:41 Certificate issuer: /CN=3d3016dd-bb93-47bb-b986-002f3d7984c5 Certificate serial: 010D0C9F4328584B2066DAD8F2C885C4B68B2900 Authority key identifier: DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 21699 IP address blocks: 23.188.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:da:d8:f2:c8:85:c4:b6:8b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3016dd-bb93-47bb-b986-002f3d7984c5 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=4c35ad94-011c-41f1-b06b-e19dbfed6240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:31:b7:7c:50:7f:6e:56:b8:7f:21:42:cb: 1c:6a:c5:9d:e7:1d:30:23:38:98:8c:9b:40:16:94: bc:c0:44:d1:3f:dd:3b:b5:10:96:4c:80:6c:71:cb: e0:29:d3:7e:de:34:14:17:3a:76:a4:49:3f:90:78: 6c:3d:2c:b4:2e:1a:44:33:1e:0a:46:31:db:b6:d8: 7d:78:1b:74:fe:8d:39:52:63:7e:dc:b3:a8:c7:68: 6c:7e:b9:b4:ca:e2:0f:29:c6:d3:e6:97:47:14:c4: e8:cf:21:64:23:c6:f8:ea:5a:00:c6:9f:e8:2e:60: 03:be:36:dc:49:fc:38:94:40:1b:ea:ca:38:d7:32: a1:73:59:3c:c2:91:a5:05:0a:b3:84:d0:af:b9:57: 1d:ae:d3:bd:fc:c9:11:96:9d:20:f8:cd:b2:57:8b: 7b:a8:8c:5e:ec:f8:f8:74:f9:8a:9c:15:75:d8:bf: c4:d1:fc:bb:8c:5f:ef:9c:ea:d7:89:97:37:c9:9f: 91:73:ef:f0:e8:92:85:e9:09:1a:45:45:d9:41:f2: e4:2f:36:70:cc:b7:ad:21:20:63:e1:ae:ac:de:f2: 07:93:0a:82:12:1d:f5:e6:d0:1b:7c:df:d5:d6:01: 56:05:ab:2a:23:94:65:7f:a0:0e:d1:b7:33:b0:a1: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:04:02:09:71:60:67:3D:88:24:61:10:09:20:69:97:25:45:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl X509v3 Authority Key Identifier: keyid:DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer sbgp-ipAddrBlock: critical IPv4: 23.188.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:17:01:2b:fa:5d:87:67:00:20:bc:10:00:96:d4:3b:95:81: 5c:a0:c3:28:eb:14:d0:c7:94:30:12:6f:51:47:ca:43:eb:70: 90:0f:7d:1d:2f:9c:4f:8e:2c:f3:03:8d:a6:1f:ff:80:a7:ac: db:50:2a:d4:b2:36:43:64:04:91:1f:d1:eb:03:70:cc:a2:54: 62:62:6d:89:46:62:2f:4a:56:18:a3:2b:9b:50:00:68:5e:53: 9d:b7:54:fb:ad:9b:94:9a:4f:41:c7:39:5d:bf:a1:47:45:95: 0f:05:85:16:26:56:6d:58:0e:ea:27:df:12:08:ee:2b:9c:37: b1:b8:67:fe:0b:4a:de:4c:4e:08:e8:dc:a1:09:9d:f3:c2:d2: 78:af:cf:dd:a5:92:91:67:55:1a:27:8b:d6:84:de:ef:cb:4d: bf:81:4b:5a:d7:b4:83:d6:32:80:5a:31:f1:b8:a0:0b:57:a8: bb:a8:7a:58:20:0c:d7:d2:f9:2b:48:e6:6a:3d:1d:d9:77:cf: 8b:f5:25:42:84:b8:80:b2:92:85:77:80:3a:39:33:be:2a:fe: fc:c2:5c:d0:98:c0:d5:bb:1f:89:9c:bf:9c:65:f2:fe:53:12: f8:49:7c:ad:a1:4e:fb:96:ac:dd:66:da:cb:ba:3a:69:7b:94: f1:a7:18:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtrY8siFxLaLKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMDE2ZGQtYmI5My00N2JiLWI5ODYtMDAyZjNkNzk4 NGM1MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGMzNWFkOTQtMDExYy00MWYxLWIwNmItZTE5ZGJmZWQ2MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaExt3xQf25WuH8hQsscasWd5x0wIziYjJtA FpS8wETRP907tRCWTIBsccvgKdN+3jQUFzp2pEk/kHhsPSy0LhpEMx4KRjHbtth9 eBt0/o05UmN+3LOox2hsfrm0yuIPKcbT5pdHFMTozyFkI8b46loAxp/oLmADvjbc Sfw4lEAb6so41zKhc1k8wpGlBQqzhNCvuVcdrtO9/MkRlp0g+M2yV4t7qIxe7Pj4 dPmKnBV12L/E0fy7jF/vnOrXiZc3yZ+Rc+/w6JKF6QkaRUXZQfLkLzZwzLetISBj 4a6s3vIHkwqCEh315tAbfN/V1gFWBasqI5Rlf6AO0bczsKF+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK37BAIJcWBnPYgkYRAJIGmXJUVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZDMw MTZkZC1iYjkzLTQ3YmItYjk4Ni0wMDJmM2Q3OTg0YzUvNDIzMTEzMjktNjg3Zi0z NTgxLTlkZDgtNGVjYzNlOWJjODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2QzMDE2ZGQtYmI5My00N2JiLWI5 ODYtMDAyZjNkNzk4NGM1LzNkMzAxNmRkLWJiOTMtNDdiYi1iOTg2LTAwMmYzZDc5 ODRjNS5jcmwwHwYDVR0jBBgwFoAU3gvb4Tyy2ewgcUuuEl3AKuRaoS4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZDMwMTZkZC1iYjkzLTQ3YmItYjk4Ni0wMDJm M2Q3OTg0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7xoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEXASv6XYdnACC8EACW1DuVgVygwyjrFNDHlDASb1FHykPrcJAPfR0v nE+OLPMDjaYf/4CnrNtQKtSyNkNkBJEf0esDcMyiVGJibYlGYi9KVhijK5tQAGhe U523VPutm5SaT0HHOV2/oUdFlQ8FhRYmVm1YDuon3xII7iucN7G4Z/4LSt5MTgjo 3KEJnfPC0nivz92lkpFnVRoni9aE3u/LTb+BS1rXtIPWMoBaMfG4oAtXqLuoelgg DNfS+StI5mo9Hdl3z4v1JUKEuICykoV3gDo5M74q/vzCXNCYwNW7H4mcv5xl8v5T EvhJfK2hTvuWrN1m2su6Oml7lPGnGJQ= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:50 2025 by rpki-client