$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/b8df394c-bd2f-3da6-bb73-41293cee5daa.roa File: b8df394c-bd2f-3da6-bb73-41293cee5daa.roa (raw, json) Hash identifier: 2yIW+f0Ow8Jhz/OVWIbEEsaAhw9BjBhDYEWNJwTmxz4= Subject key identifier: A4:93:FF:35:3A:35:AC:CF:08:00:48:A0:5D:26:D0:75:21:E7:CC:4B Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584AFC2F5BBD863CEF1786CEAB00 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/b8df394c-bd2f-3da6-bb73-41293cee5daa.roa Signing time: Tue 26 Aug 2025 13:39:53 +0000 ROA not before: Tue 26 Aug 2025 13:39:53 +0000 ROA not after: Mon 24 Nov 2025 14:39:53 +0000 asID: 21939 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:2f:5b:bd:86:3c:ef:17:86:ce:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Aug 26 13:39:53 2025 GMT Not After : Nov 24 14:39:53 2025 GMT Subject: CN=34c5ffae-0560-499d-819e-2702b4bd7952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:cb:e1:91:56:c2:9e:e1:ab:d3:ca:b4:68: cc:de:60:a9:83:46:68:c2:06:7b:11:37:82:c7:89: 66:66:98:86:66:b6:b4:76:6d:e0:39:40:50:41:d2: 04:59:28:bb:cd:76:96:a6:03:c3:9f:33:83:17:c4: b6:7e:6f:6c:5c:76:dd:7f:45:ce:e8:1c:fc:26:a7: 9a:8c:1e:7f:02:d7:9f:06:c3:59:b2:45:99:7d:3e: 67:91:41:2e:86:19:76:22:72:78:e4:ac:c2:ab:8d: b9:a7:86:cc:89:8e:6c:b9:ed:21:d1:ec:fb:80:e6: c2:1e:5d:f9:56:22:60:13:33:05:5f:2d:c6:97:c5: ef:c1:36:50:d7:52:7e:db:ef:ca:c8:4a:5d:0e:eb: b8:93:c0:5b:f6:09:64:b5:96:d8:7b:2e:be:c1:25: eb:e8:07:df:12:58:cb:47:09:d5:68:96:81:1d:55: d4:9a:78:a1:29:f7:a6:b9:28:81:db:1b:9a:34:9f: f8:ee:ad:18:07:dc:7f:3a:29:cc:28:e1:b4:45:99: 11:df:66:8a:1a:38:4f:de:6c:bf:8f:ae:dd:9c:89: 47:88:6b:20:96:c0:de:55:a0:2a:fe:d0:62:96:92: 1f:8e:50:f8:92:e7:5a:d2:eb:09:8b:7a:f1:b2:0a: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:93:FF:35:3A:35:AC:CF:08:00:48:A0:5D:26:D0:75:21:E7:CC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/b8df394c-bd2f-3da6-bb73-41293cee5daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:ca:28:9d:71:bd:b9:ba:21:72:e3:9e:01:67:e9:78:c7: da:42:b5:b7:cd:fa:4f:ad:3e:31:d4:25:2b:8e:ac:d5:93:b1: 1e:4b:f3:e3:c9:ad:90:dc:6e:93:72:75:42:4e:08:f4:72:d5: c7:75:7b:ac:03:3b:29:f5:5a:59:c6:01:0c:1b:71:ca:e4:c4: 8e:a7:e7:33:47:0b:79:43:d4:14:f5:e8:46:24:6d:29:f1:b5: 5c:e3:2c:97:c2:9f:ce:c8:c0:8c:4c:2c:5a:02:b5:b8:06:c3: 48:cc:94:08:71:ef:8f:00:0d:f7:ca:f2:5d:cc:24:7b:df:63: fe:45:56:c1:4e:fc:5c:83:5e:e8:4a:27:fc:e7:76:74:0d:32: 02:d5:70:ee:f7:9f:51:c1:7c:0b:9d:a0:db:07:1b:5e:8c:97: d3:4f:80:bb:95:99:7c:a3:dc:04:03:29:47:48:1f:8c:00:93: 3e:96:2b:15:84:05:55:95:06:4b:55:b1:df:c8:cb:0b:9c:40: 87:73:00:05:89:ba:3d:dc:0c:0b:36:d0:48:87:ce:36:02:d6: c7:6d:52:3c:54:af:c7:85:1c:5b:77:8e:a9:cb:78:fe:c0:0b: 93:f0:79:4f:71:3e:1b:cd:bc:ab:0b:54:fc:9c:9c:ea:23:9d: 75:56:c8:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8L1u9hjzvF4bOqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI1MDgyNjEzMzk1M1oXDTI1MTEyNDE0Mzk1M1owLzEtMCsGA1UEAxMk MzRjNWZmYWUtMDU2MC00OTlkLTgxOWUtMjcwMmI0YmQ3OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m3L4ZFWwp7hq9PKtGjM3mCpg0ZowgZ7ETeC x4lmZpiGZra0dm3gOUBQQdIEWSi7zXaWpgPDnzODF8S2fm9sXHbdf0XO6Bz8Jqea jB5/AtefBsNZskWZfT5nkUEuhhl2InJ45KzCq425p4bMiY5sue0h0ez7gObCHl35 ViJgEzMFXy3Gl8XvwTZQ11J+2+/KyEpdDuu4k8Bb9glktZbYey6+wSXr6AffEljL RwnVaJaBHVXUmnihKfemuSiB2xuaNJ/47q0YB9x/OinMKOG0RZkR32aKGjhP3my/ j67dnIlHiGsglsDeVaAq/tBilpIfjlD4kuda0usJi3rxsgrcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKST/zU6NazPCABIoF0m0HUh58xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYjhkZjM5NGMtYmQyZi0z ZGE2LWJiNzMtNDEyOTNjZWU1ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUvyiidcb25uiFy454BZ+l4x9pCtbfN+k+tPjHUJSuOrNWTsR5L8+PJ rZDcbpNydUJOCPRy1cd1e6wDOyn1WlnGAQwbccrkxI6n5zNHC3lD1BT16EYkbSnx tVzjLJfCn87IwIxMLFoCtbgGw0jMlAhx748ADffK8l3MJHvfY/5FVsFO/FyDXuhK J/zndnQNMgLVcO73n1HBfAudoNsHG16Ml9NPgLuVmXyj3AQDKUdIH4wAkz6WKxWE BVWVBktVsd/IywucQIdzAAWJuj3cDAs20EiHzjYC1sdtUjxUr8eFHFt3jqnLeP7A C5PweU9xPhvNvKsLVPycnOojnXVWyMM= -----END CERTIFICATE-----Generated at Wed Oct 8 20:59:53 2025 by rpki-client