$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa File: 2e52f828-a538-3e6a-b928-f02369bcab6e.roa (raw, json) Hash identifier: IACY54nCFF3x/gRvwhxeWMiWxVnjUm05ju/GH8tJOp4= Subject key identifier: A5:F8:47:17:16:DA:D1:9B:03:84:58:7F:0E:53:F1:93:B8:EA:73:78 Certificate issuer: /CN=cc43c894-0822-4819-9b8f-df16b53cf6de Certificate serial: 010D0C9F4328584B44B1C436617B0E844BB91800 Authority key identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399861 IP address blocks: 23.130.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c4:36:61:7b:0e:84:4b:b9:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc43c894-0822-4819-9b8f-df16b53cf6de Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=1d373612-b363-4d07-b4e6-9f1dd3a49ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:63:c5:4f:d8:ea:b7:98:8f:8c:36:0b:a8: 3c:5d:30:c8:48:3d:e0:18:80:a8:f4:bd:6a:6b:5f: bd:8c:32:53:87:92:94:11:57:23:b3:da:89:3e:af: ec:49:18:6c:a9:4b:61:b0:27:75:36:49:f8:38:7c: 14:b4:3e:be:ff:6b:f7:c9:49:2e:08:45:f7:62:25: 34:b2:90:f5:00:82:1a:e0:7b:94:c1:2a:41:e0:c0: 7f:d5:04:6b:57:e2:39:0c:48:74:a5:ed:80:f8:12: 38:77:b2:33:56:2c:f8:bd:55:4b:69:d2:3c:88:f8: e4:c2:c5:30:fe:c3:7b:b8:ac:b0:cb:01:a9:b7:57: 11:ca:9c:33:5a:06:16:fe:d6:52:1d:76:b4:cb:9f: 06:71:17:c1:da:bb:b8:af:b7:12:e4:44:fb:16:9c: 43:92:34:3e:2a:51:af:30:4c:8d:c8:db:04:4a:2b: bf:d1:49:0a:6a:80:a6:84:f8:3a:3d:f3:69:6e:29: 57:34:27:32:2f:da:e0:f4:5b:23:75:fb:8d:44:b0: a2:2f:a8:37:b4:04:33:53:9c:ad:f8:57:68:7f:95: 7d:9e:13:e5:cb:19:f2:9d:b3:20:93:c1:70:94:f5: 40:f0:21:b0:c7:df:c0:fe:eb:c7:0d:63:dc:c8:09: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:47:17:16:DA:D1:9B:03:84:58:7F:0E:53:F1:93:B8:EA:73:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl X509v3 Authority Key Identifier: keyid:9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer sbgp-ipAddrBlock: critical IPv4: 23.130.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:55:43:2b:cb:8e:f9:31:6e:a7:80:3c:4f:94:6c:c7:c9:bf: 5a:b2:05:75:5d:8c:52:76:a2:09:26:06:5b:ba:a9:6b:6a:40: e1:f3:c9:0e:ea:76:4c:dd:c8:ee:c0:01:10:3b:26:03:77:ff: 50:e7:f6:db:6d:92:72:09:9d:1a:e3:76:a3:01:6d:a5:17:9e: cf:35:79:46:52:89:cc:bb:cb:55:a4:25:0d:21:a8:26:a9:46: 67:7b:36:26:e5:8b:35:44:14:5a:a0:f3:98:ff:a5:7b:fa:be: 06:59:1a:83:d7:bb:25:ae:0b:83:da:4e:a0:d7:4f:ea:a4:c4: 63:97:67:ec:8f:ed:a8:1b:f0:da:71:1e:88:47:24:a9:be:b6: 87:f1:86:e7:e8:71:ac:92:65:04:40:63:25:6c:b1:c9:3b:2f: d4:7e:08:1f:b1:2e:d4:02:9f:64:d6:a1:34:3a:b3:b5:5e:0b: 7b:de:09:83:4d:3f:d9:ea:27:65:a3:00:3b:9d:7b:77:d0:62: bc:df:9c:2e:23:34:ea:5f:a3:fe:01:f9:d3:a0:7d:c0:d8:c3: f7:52:01:cb:80:c9:10:7e:4a:79:e3:d5:4e:f4:51:d4:f9:05: d3:a2:b8:27:10:87:d3:dd:e4:bb:84:db:c8:37:63:8b:9a:c3: 06:77:11:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscQ2YXsOhEu5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M0M2M4OTQtMDgyMi00ODE5LTliOGYtZGYxNmI1M2Nm NmRlMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MWQzNzM2MTItYjM2My00ZDA3LWI0ZTYtOWYxZGQzYTQ5YWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SljxU/Y6reYj4w2C6g8XTDISD3gGICo9L1q a1+9jDJTh5KUEVcjs9qJPq/sSRhsqUthsCd1Nkn4OHwUtD6+/2v3yUkuCEX3YiU0 spD1AIIa4HuUwSpB4MB/1QRrV+I5DEh0pe2A+BI4d7IzViz4vVVLadI8iPjkwsUw /sN7uKywywGpt1cRypwzWgYW/tZSHXa0y58GcRfB2ru4r7cS5ET7FpxDkjQ+KlGv MEyNyNsESiu/0UkKaoCmhPg6PfNpbilXNCcyL9rg9FsjdfuNRLCiL6g3tAQzU5yt +Fdof5V9nhPlyxnynbMgk8FwlPVA8CGwx9/A/uvHDWPcyAlBsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX4RxcW2tGbA4RYfw5T8ZO46nN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYzQz Yzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUzY2Y2ZGUvMmU1MmY4MjgtYTUzOC0z ZTZhLWI5MjgtZjAyMzY5YmNhYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2M0M2M4OTQtMDgyMi00ODE5LTli OGYtZGYxNmI1M2NmNmRlL2NjNDNjODk0LTA4MjItNDgxOS05YjhmLWRmMTZiNTNj ZjZkZS5jcmwwHwYDVR0jBBgwFoAUm3Qj0L1QiD9Fct/ObL7cdA+K9DowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2 YjUzY2Y2ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJVQyvLjvkxbqeAPE+UbMfJv1qyBXVdjFJ2ogkmBlu6qWtqQOHzyQ7q dkzdyO7AARA7JgN3/1Dn9tttknIJnRrjdqMBbaUXns81eUZSicy7y1WkJQ0hqCap Rmd7NiblizVEFFqg85j/pXv6vgZZGoPXuyWuC4PaTqDXT+qkxGOXZ+yP7agb8Npx HohHJKm+tofxhufocaySZQRAYyVssck7L9R+CB+xLtQCn2TWoTQ6s7VeC3veCYNN P9nqJ2WjADude3fQYrzfnC4jNOpfo/4B+dOgfcDYw/dSAcuAyRB+Snnj1U70UdT5 BdOiuCcQh9Pd5LuE28g3Y4uawwZ3EXA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:36 2025 by rpki-client