$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa File: 12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa (raw, json) Hash identifier: y2k9HvHe/XzL4+O9sH1jWi6mLQseura96eAi1rf5f0c= Subject key identifier: 58:37:75:A0:31:74:4D:37:7D:11:D1:E3:ED:A6:CA:05:6B:53:A2:B9 Certificate issuer: /CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07 Certificate serial: 010D0C9F4328584B004C301FF8058CFF7F551480 Authority key identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 149513 IP address blocks: 23.186.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:30:1f:f8:05:8c:ff:7f:55:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=4ee96ec9-78ca-465f-8c80-90fb9893e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:e0:d8:d4:66:db:84:a2:72:80:e2:ee:a8: 8b:28:29:99:cd:b9:8a:c9:df:85:49:e3:6e:6b:18: ca:80:ec:6d:61:d6:98:40:b8:d2:b1:08:24:bf:bc: 7b:eb:80:b3:a4:1f:c0:05:aa:8e:a0:45:c9:83:de: e6:86:51:a0:2e:3a:00:72:78:a0:4f:af:db:37:26: 92:8b:28:63:0e:52:d7:8c:fe:61:c4:33:a3:96:0c: 65:e0:97:5c:b0:0b:c3:2a:2c:f5:2a:5b:1e:88:08: 11:77:3d:5a:35:d6:38:0f:fc:cd:9a:f5:3b:f7:e1: b3:02:96:b3:0d:8c:51:cb:42:69:b3:0f:4f:ca:4f: c1:fb:67:64:da:1e:a4:f5:65:66:7a:67:8d:34:2d: 26:c7:9e:f9:8a:98:04:95:96:f1:51:70:e2:b0:7e: f0:1e:4d:d8:eb:4b:1c:66:27:9e:27:44:f1:2b:04: f6:e5:25:56:75:b7:00:ff:56:a0:a0:06:d3:74:6c: ce:c8:a3:92:f9:03:07:23:0c:78:87:94:94:d2:c5: 41:de:76:c7:ff:c8:f3:2e:4c:6d:65:4e:d7:05:87: d3:60:16:cd:72:d3:19:53:05:05:37:17:77:67:8c: 66:32:7a:52:da:33:06:5d:37:ac:6f:3c:ec:33:cd: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:75:A0:31:74:4D:37:7D:11:D1:E3:ED:A6:CA:05:6B:53:A2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/12ebfa55-941a-3da9-bdf7-a3b35bff1050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl X509v3 Authority Key Identifier: keyid:77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer sbgp-ipAddrBlock: critical IPv4: 23.186.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:76:4d:b6:9b:12:5a:d1:88:17:18:9b:e3:3c:f2:5a:ae:38: cc:50:c5:52:59:b9:ec:d8:96:e8:41:99:a1:86:cb:39:dc:71: 4f:43:9f:86:b5:1d:67:ea:3d:4e:a9:0e:b4:86:54:ee:ad:00: e1:ad:9f:15:d1:df:d0:56:ea:d7:c3:52:48:5a:eb:ec:76:25: 68:13:ec:53:cf:35:10:cb:33:cb:74:8d:e4:95:37:69:75:ab: 56:6a:3a:0d:16:e5:74:a5:4a:3c:e9:30:4b:8a:65:83:cd:42: 96:09:3d:82:06:59:ec:77:55:0c:19:69:cc:76:31:57:46:d0: f9:b6:5f:d1:48:6a:e8:16:10:4a:a0:21:24:76:86:30:4b:f0: 76:c1:e1:ab:58:0a:1b:bd:ca:7d:a7:4d:ee:2f:cc:f1:04:b6: 42:be:ee:99:7d:1a:d5:a0:49:2e:46:35:39:7e:d2:06:5f:4e: 66:eb:71:2e:eb:ae:82:6d:0f:17:ea:76:fa:37:19:bf:f6:e4: 63:fa:8a:d4:5e:ea:08:62:49:c2:0b:de:c7:a5:ec:cd:ba:4e: df:0a:f4:e1:c4:9b:3a:fc:fe:c0:35:f5:0d:88:79:cb:df:57: 6e:43:75:48:6b:66:3f:4c:61:89:0f:45:9e:bf:a9:18:29:c0: 59:1a:15:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATDAf+AWM/39VFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkzZWJjMTEtOWY3Zi00NjJlLTg1YTMtNjY0ZmU4ZGI0 ZDA3MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NGVlOTZlYzktNzhjYS00NjVmLThjODAtOTBmYjk4OTNlM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr27g2NRm24SicoDi7qiLKCmZzbmKyd+FSeNu axjKgOxtYdaYQLjSsQgkv7x764CzpB/ABaqOoEXJg97mhlGgLjoAcnigT6/bNyaS iyhjDlLXjP5hxDOjlgxl4JdcsAvDKiz1KlseiAgRdz1aNdY4D/zNmvU79+GzApaz DYxRy0Jpsw9Pyk/B+2dk2h6k9WVmemeNNC0mx575ipgElZbxUXDisH7wHk3Y60sc ZieeJ0TxKwT25SVWdbcA/1agoAbTdGzOyKOS+QMHIwx4h5SU0sVB3nbH/8jzLkxt ZU7XBYfTYBbNctMZUwUFNxd3Z4xmMnpS2jMGXTesbzzsM81gYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg3daAxdE03fRHR4+2mygVrU6K5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOTNl YmMxMS05ZjdmLTQ2MmUtODVhMy02NjRmZThkYjRkMDcvMTJlYmZhNTUtOTQxYS0z ZGE5LWJkZjctYTNiMzViZmYxMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDkzZWJjMTEtOWY3Zi00NjJlLTg1 YTMtNjY0ZmU4ZGI0ZDA3L2Q5M2ViYzExLTlmN2YtNDYyZS04NWEzLTY2NGZlOGRi NGQwNy5jcmwwHwYDVR0jBBgwFoAUd34bGaTdPYagsRtAdblBI7aFWu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOTNlYmMxMS05ZjdmLTQ2MmUtODVhMy02NjRm ZThkYjRkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl2TbabElrRiBcYm+M88lquOMxQxVJZuezYluhBmaGGyznccU9Dn4a1 HWfqPU6pDrSGVO6tAOGtnxXR39BW6tfDUkha6+x2JWgT7FPPNRDLM8t0jeSVN2l1 q1ZqOg0W5XSlSjzpMEuKZYPNQpYJPYIGWex3VQwZacx2MVdG0Pm2X9FIaugWEEqg ISR2hjBL8HbB4atYChu9yn2nTe4vzPEEtkK+7pl9GtWgSS5GNTl+0gZfTmbrcS7r roJtDxfqdvo3Gb/25GP6itRe6ghiScIL3sel7M26Tt8K9OHEmzr8/sA19Q2Iecvf V25DdUhrZj9MYYkPRZ6/qRgpwFkaFU4= -----END CERTIFICATE-----Generated at Fri Oct 10 17:28:48 2025 by rpki-client