$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa File: 3669ecca-f135-306c-9018-d762944294a1.roa (raw, json) Hash identifier: GkceyEo/PQYmTNqlA9g2gjofhPPUr0EbfL6edA3/cPM= Subject key identifier: FC:27:FF:B4:0D:B5:6B:F7:90:1A:FE:06:C3:FC:D4:A2:1D:28:29:BA Certificate issuer: /CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Certificate serial: 010D0C9F4328584B3C6406F1C64641F6E0471700 Authority key identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa Signing time: Thu 18 Sep 2025 13:37:45 +0000 ROA not before: Thu 18 Sep 2025 13:37:45 +0000 ROA not after: Wed 17 Dec 2025 14:37:45 +0000 asID: 401990 IP address blocks: 23.145.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:64:06:f1:c6:46:41:f6:e0:47:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Validity Not Before: Sep 18 13:37:45 2025 GMT Not After : Dec 17 14:37:45 2025 GMT Subject: CN=511e5624-5be6-4abf-871c-06b1180db252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:4e:f9:b3:13:26:9d:a3:90:ba:f9:20:e7: 5d:ab:65:c4:2f:82:3c:35:37:fe:30:d2:42:62:38: d8:35:29:98:67:f2:1f:57:20:80:b3:3c:16:f7:1f: 1e:6f:bf:d0:4a:7a:3e:d8:2c:bd:5d:fd:d4:0d:c9: 24:a9:4c:93:b1:e1:e6:10:01:e1:27:61:97:34:f2: 16:34:c4:be:56:c8:a2:98:92:83:fe:ee:67:c8:2c: 14:46:8d:d9:7e:91:4f:3f:91:2a:01:2e:14:4a:42: 1c:cd:6b:97:5f:a0:41:49:fd:15:91:cd:14:a7:a1: f2:55:29:b9:13:52:85:0e:07:9f:91:c3:4d:79:9f: a6:be:22:5f:b4:d0:e2:24:b7:45:ce:2f:f3:f3:e1: 6b:91:cd:e5:24:44:39:78:9f:6a:2e:cd:9b:8e:d4: f6:45:c5:6c:7d:55:a4:10:62:41:e6:cb:84:ea:f4: 80:09:3c:d9:56:3d:b0:bc:b1:5d:a1:1b:21:58:5f: 09:77:5d:58:bb:7c:93:35:5b:be:b6:3c:c7:08:49: 18:5c:e9:67:0f:ae:f0:ee:7d:13:10:08:25:08:e2: 23:eb:12:0d:81:e0:3e:be:9b:a1:f7:3f:a6:a9:09: ae:aa:26:07:6e:47:b4:23:bf:b3:42:06:a9:de:45: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:FF:B4:0D:B5:6B:F7:90:1A:FE:06:C3:FC:D4:A2:1D:28:29:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl X509v3 Authority Key Identifier: keyid:EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer sbgp-ipAddrBlock: critical IPv4: 23.145.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e1:e6:82:77:f9:25:e0:c7:69:cb:4e:c1:54:0f:cd:e7:06: b8:63:c9:17:cf:2e:d0:51:24:fe:ab:72:43:d9:e2:4c:1d:67: 65:60:24:a1:78:d0:2a:fb:46:99:3a:f3:94:9d:52:7a:06:82: d6:be:67:29:51:b4:5c:2e:71:84:a8:8e:eb:78:a8:c3:17:48: e9:50:37:57:6a:83:91:c5:5e:74:cd:a0:ca:d5:59:22:1b:be: b9:42:f4:7a:e0:cf:d5:04:63:f0:2e:a9:44:cb:bc:86:d6:0a: 70:97:a6:bc:67:5f:af:11:7d:b5:95:23:cf:2e:1d:f7:49:ce: cb:0b:bf:bc:6a:74:bb:f6:84:97:4a:b7:97:42:68:3d:ab:b4: 30:43:f4:26:7c:96:61:02:0d:f2:1e:8d:43:d4:f5:89:81:96: ba:88:a1:74:bd:6c:31:1c:59:f5:f2:64:4f:7d:8e:04:33:af: 55:92:7d:30:14:98:08:04:86:32:e1:64:7a:ae:c4:9d:b2:61: 65:56:7f:8b:a5:fb:43:25:bb:3b:65:cf:7b:6c:72:2e:2d:c2: 14:ed:8b:1d:44:e2:b7:73:65:c0:94:bc:8b:4d:5b:cb:4d:00: f1:cd:b8:a9:1a:45:97:17:b9:a8:72:73:2d:91:83:74:65:95: 39:4f:b7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8ZAbxxkZB9uBHFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmMmZhYzItZDM1Mi00MjA0LTliNTMtZjJkN2U0Njg0 Y2NlMB4XDTI1MDkxODEzMzc0NVoXDTI1MTIxNzE0Mzc0NVowLzEtMCsGA1UEAxMk NTExZTU2MjQtNWJlNi00YWJmLTg3MWMtMDZiMTE4MGRiMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihpO+bMTJp2jkLr5IOddq2XEL4I8NTf+MNJC YjjYNSmYZ/IfVyCAszwW9x8eb7/QSno+2Cy9Xf3UDckkqUyTseHmEAHhJ2GXNPIW NMS+VsiimJKD/u5nyCwURo3ZfpFPP5EqAS4USkIczWuXX6BBSf0Vkc0Up6HyVSm5 E1KFDgefkcNNeZ+mviJftNDiJLdFzi/z8+Frkc3lJEQ5eJ9qLs2bjtT2RcVsfVWk EGJB5suE6vSACTzZVj2wvLFdoRshWF8Jd11Yu3yTNVu+tjzHCEkYXOlnD67w7n0T EAglCOIj6xINgeA+vpuh9z+mqQmuqiYHbke0I7+zQgap3kXctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwn/7QNtWv3kBr+BsP81KIdKCm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Yy ZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3ZTQ2ODRjY2UvMzY2OWVjY2EtZjEzNS0z MDZjLTkwMTgtZDc2Mjk0NDI5NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNmMmZhYzItZDM1Mi00MjA0LTli NTMtZjJkN2U0Njg0Y2NlLzBjZjJmYWMyLWQzNTItNDIwNC05YjUzLWYyZDdlNDY4 NGNjZS5jcmwwHwYDVR0jBBgwFoAU7m9kwGHH6ut7EotFL3+TvtU2zRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wY2YyZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3 ZTQ2ODRjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3h5oJ3+SXgx2nLTsFUD83nBrhjyRfPLtBRJP6rckPZ4kwdZ2VgJKF4 0Cr7Rpk685SdUnoGgta+ZylRtFwucYSojut4qMMXSOlQN1dqg5HFXnTNoMrVWSIb vrlC9Hrgz9UEY/AuqUTLvIbWCnCXprxnX68RfbWVI88uHfdJzssLv7xqdLv2hJdK t5dCaD2rtDBD9CZ8lmECDfIejUPU9YmBlrqIoXS9bDEcWfXyZE99jgQzr1WSfTAU mAgEhjLhZHquxJ2yYWVWf4ul+0Mluztlz3tsci4twhTtix1E4rdzZcCUvItNW8tN APHNuKkaRZcXuahycy2Rg3RllTlPt4Y= -----END CERTIFICATE-----Generated at Wed Oct 8 19:10:48 2025 by rpki-client