$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa File: 3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa (raw, json) Hash identifier: 44+z54jdjjm1xtFwBB2mU8ALc9jqTgYxW37ZsIv64Pc= Subject key identifier: 9A:53:C6:4F:07:BD:31:DE:C7:77:C9:34:A0:86:21:CF:E6:BF:E0:44 Certificate issuer: /CN=00742cea-2e97-42c0-9c46-fc566e540c74 Certificate serial: 010D0C9F4328584B6978CCE007BD2949193CD2A0 Authority key identifier: D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa Signing time: Sat 04 Oct 2025 17:10:58 +0000 ROA not before: Sat 04 Oct 2025 17:10:58 +0000 ROA not after: Fri 02 Jan 2026 18:10:58 +0000 asID: 979 IP address blocks: 23.178.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:78:cc:e0:07:bd:29:49:19:3c:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00742cea-2e97-42c0-9c46-fc566e540c74 Validity Not Before: Oct 4 17:10:58 2025 GMT Not After : Jan 2 18:10:58 2026 GMT Subject: CN=b9acc491-24c2-481c-97ec-81caa204cac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:e6:e2:75:63:73:86:8f:90:1e:c2:f7:10: 69:b8:2d:2c:18:ad:24:74:9a:51:6a:e3:8d:c8:5e: 63:c5:ce:4e:b1:f5:ed:c1:5c:e8:54:97:4a:56:c6: 02:57:a4:cd:ab:f0:43:3c:c7:81:a8:b3:60:7b:75: 4f:07:aa:cd:b5:01:ed:23:98:ee:36:4f:a5:6e:cb: 68:55:12:4d:7b:36:28:b8:1c:9a:a6:c6:26:57:e0: 60:f3:a6:a6:94:4c:f4:c9:30:06:69:d4:93:94:06: 2a:d6:00:ca:0a:be:dc:66:a1:64:cf:ba:38:a0:d3: ce:69:80:26:5d:b1:4c:d8:48:ef:d3:52:cb:8d:67: 0d:9a:fb:94:20:83:05:ab:66:62:c3:aa:63:58:7f: dd:e6:ff:fe:44:13:4d:e1:8e:cf:33:b5:60:27:61: c8:f2:72:ed:64:61:e6:f4:b6:2d:36:bd:db:54:e4: 0c:73:63:c6:b9:04:2a:64:5d:f7:61:bc:d0:cd:21: 98:a3:2c:0a:a2:93:e6:13:c0:c2:ca:a7:0f:ed:53: d2:0d:c6:1c:27:e7:f6:fb:a7:ef:95:cd:ce:09:13: 67:45:24:5b:9c:68:cf:5d:58:a4:53:98:75:4e:70: 51:26:e4:10:db:51:5a:2d:7d:0a:fb:c7:4d:bd:a0: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:53:C6:4F:07:BD:31:DE:C7:77:C9:34:A0:86:21:CF:E6:BF:E0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl X509v3 Authority Key Identifier: keyid:D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer sbgp-ipAddrBlock: critical IPv4: 23.178.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9b:04:30:bc:af:2e:4b:6c:4e:7b:a6:4d:7d:bd:2b:42:1b: 3c:59:be:54:45:a5:fe:45:72:52:cd:55:ad:48:0c:d5:6c:36: cf:81:cb:02:45:54:f3:db:e1:34:b6:c8:8e:c4:0f:83:7a:90: 99:f7:18:19:7a:00:8a:0b:3e:ab:f4:fb:88:24:40:08:a1:19: 47:ba:af:26:83:ec:06:66:69:60:ae:59:41:9e:4a:13:92:8c: da:80:a6:c1:47:92:0b:ec:1d:ec:84:72:03:f7:b8:32:a7:56: 16:58:a1:ca:4f:70:8b:72:7d:52:1d:4c:86:56:1e:af:31:0f: 3f:31:b2:7a:27:6e:14:b1:45:6d:7b:6c:ca:a7:99:6d:ec:50: 45:df:38:fc:04:1b:28:89:00:18:76:22:ee:87:53:8a:8d:6a: 44:23:e1:47:45:95:4e:48:e2:65:23:9d:f8:86:78:06:78:af: 09:fe:19:a6:a5:07:7f:c0:67:1a:2c:7f:0b:b7:27:9b:79:8b: 6f:4e:f1:82:96:3c:f7:56:8c:f8:b5:a3:ef:5d:7c:1a:1a:c6: 2a:d6:58:03:c5:f1:35:8f:5c:ef:a2:c9:92:6c:db:97:f2:ea: 8e:28:53:1f:bd:dc:44:63:12:12:4d:5a:cf:03:44:c0:0d:bf: c6:8f:64:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtpeMzgB70pSRk80qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NDJjZWEtMmU5Ny00MmMwLTljNDYtZmM1NjZlNTQw Yzc0MB4XDTI1MTAwNDE3MTA1OFoXDTI2MDEwMjE4MTA1OFowLzEtMCsGA1UEAxMk YjlhY2M0OTEtMjRjMi00ODFjLTk3ZWMtODFjYWEyMDRjYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4jm4nVjc4aPkB7C9xBpuC0sGK0kdJpRauON yF5jxc5OsfXtwVzoVJdKVsYCV6TNq/BDPMeBqLNge3VPB6rNtQHtI5juNk+lbsto VRJNezYouByapsYmV+Bg86amlEz0yTAGadSTlAYq1gDKCr7cZqFkz7o4oNPOaYAm XbFM2Ejv01LLjWcNmvuUIIMFq2Ziw6pjWH/d5v/+RBNN4Y7PM7VgJ2HI8nLtZGHm 9LYtNr3bVOQMc2PGuQQqZF33YbzQzSGYoywKopPmE8DCyqcP7VPSDcYcJ+f2+6fv lc3OCRNnRSRbnGjPXVikU5h1TnBRJuQQ21FaLX0K+8dNvaB5TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpTxk8HvTHex3fJNKCGIc/mv+BEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMDc0 MmNlYS0yZTk3LTQyYzAtOWM0Ni1mYzU2NmU1NDBjNzQvM2E4OWE0MGItYjIzOC0z MzZjLWE2MWUtMmVjYzVlODMwZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDA3NDJjZWEtMmU5Ny00MmMwLTlj NDYtZmM1NjZlNTQwYzc0LzAwNzQyY2VhLTJlOTctNDJjMC05YzQ2LWZjNTY2ZTU0 MGM3NC5jcmwwHwYDVR0jBBgwFoAU2K3rZXrRoOaav9/5MfwnqDIcmY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wMDc0MmNlYS0yZTk3LTQyYzAtOWM0Ni1mYzU2 NmU1NDBjNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2bBDC8ry5LbE57pk19vStCGzxZvlRFpf5FclLNVa1IDNVsNs+BywJF VPPb4TS2yI7ED4N6kJn3GBl6AIoLPqv0+4gkQAihGUe6ryaD7AZmaWCuWUGeShOS jNqApsFHkgvsHeyEcgP3uDKnVhZYocpPcItyfVIdTIZWHq8xDz8xsnonbhSxRW17 bMqnmW3sUEXfOPwEGyiJABh2Iu6HU4qNakQj4UdFlU5I4mUjnfiGeAZ4rwn+Gaal B3/AZxosfwu3J5t5i29O8YKWPPdWjPi1o+9dfBoaxirWWAPF8TWPXO+iyZJs25fy 6o4oUx+93ERjEhJNWs8DRMANv8aPZDQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:16:04 2025 by rpki-client