$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/955a2e83-6ecf-377c-b918-c4e352851fdf.roa File: 955a2e83-6ecf-377c-b918-c4e352851fdf.roa (raw, json) Hash identifier: VDC6yHtt9IzFzA0ClNJSkTADCxKU5wd6CQa4YNmBreU= Subject key identifier: DA:A8:45:8F:E5:94:AD:A4:F3:23:98:26:26:5C:00:C3:28:07:52:C7 Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Certificate serial: 010D0C9F4328584B2066D51D6E93BD60E2813120 Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/955a2e83-6ecf-377c-b918-c4e352851fdf.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 20473 IP address blocks: 23.141.8.0/24 maxlen: 24 2602:fb1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d5:1d:6e:93:bd:60:e2:81:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c9c67396-a08e-4dda-8635-a270068a3a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:17:47:5b:2b:16:2d:78:78:39:da:be:db: 56:1b:e3:19:a3:8e:c0:21:47:7c:95:dc:44:70:1b: 24:2c:c4:b6:23:01:35:94:65:83:cc:9b:4a:45:b2: 11:b8:77:16:ff:1c:a9:6d:9a:60:01:13:31:ce:3f: 70:a1:59:6c:a6:42:95:93:08:03:f5:b5:df:1d:2d: ad:b9:9c:e4:52:79:28:58:83:25:fe:ca:56:38:55: 29:09:f4:ab:e4:79:27:28:02:1f:67:df:ab:23:34: 46:6d:49:2a:9d:a2:51:bb:e6:d5:25:de:36:2e:dc: 81:ae:cd:82:18:7b:6a:22:a7:39:2c:a8:86:4d:99: df:9a:c7:c7:77:46:5f:bd:d3:e7:6f:ae:fe:37:ec: 94:61:a3:24:84:c4:2f:b1:a1:0f:9d:e2:b3:80:dc: b0:8c:d1:8f:6d:c0:1f:f2:6a:ef:63:0a:30:f1:36: b6:f6:bd:8b:60:71:74:9b:d9:12:84:1e:ff:8f:2c: c1:cc:6b:8a:2b:37:6f:a9:0d:57:3b:d9:a3:58:1e: 1e:ff:82:40:59:7f:1c:a9:52:33:b6:b2:81:da:5a: 3e:de:e1:58:4a:26:8e:51:30:db:99:b6:08:af:6d: c2:34:2e:6b:17:0c:e0:2b:20:8e:6f:78:89:b5:60: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:45:8F:E5:94:AD:A4:F3:23:98:26:26:5C:00:C3:28:07:52:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/955a2e83-6ecf-377c-b918-c4e352851fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl X509v3 Authority Key Identifier: keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer sbgp-ipAddrBlock: critical IPv4: 23.141.8.0/24 IPv6: 2602:fb1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:24:ef:c9:0d:8b:21:c3:a1:b6:bf:c2:3c:20:e8:21:f1:95: 58:91:b0:e5:23:4a:f1:26:69:5c:4e:76:7d:70:ca:2c:4b:5b: f0:9c:5e:ae:d3:c9:12:8c:6f:cc:a5:2c:30:a0:38:0d:4d:62: e2:27:6e:fd:b2:eb:92:45:a3:53:67:e8:a6:e3:58:f7:ba:50: cd:b3:f2:7b:bb:e1:ca:af:2d:7d:16:67:25:67:48:bd:49:c0: 7b:99:0e:52:dc:66:38:f3:1a:de:d2:2b:77:51:b5:17:ae:47: 1b:72:3d:24:8a:f1:9a:29:6a:d6:da:c0:99:1c:64:7c:ad:8b: fc:4f:40:37:97:fc:01:55:38:f3:1e:00:57:10:ab:16:5f:58: 08:b5:1c:48:90:76:05:30:66:c9:69:5b:a4:e5:29:5c:c5:92: bf:a7:96:68:00:00:d8:f6:b3:56:63:ce:d8:ba:0c:d7:72:7b: 2c:92:02:44:48:5b:2e:ef:a9:a2:20:cf:9b:a3:17:3a:91:59: ea:8b:dd:8a:4d:6f:29:1b:d6:30:58:76:38:f3:ba:c8:af:f8: 6a:9d:19:29:59:f3:b0:db:75:2b:4b:c8:f0:aa:16:0f:a6:75: 2b:dd:a2:c8:1a:e4:2e:65:6e:6b:6b:26:f7:82:de:01:ee:79: 9b:48:c5:ed -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsgZtUdbpO9YOKBMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh ZjYzMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzljNjczOTYtYTA4ZS00ZGRhLTg2MzUtYTI3MDA2OGEzYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM0XR1srFi14eDnavttWG+MZo47AIUd8ldxE cBskLMS2IwE1lGWDzJtKRbIRuHcW/xypbZpgARMxzj9woVlspkKVkwgD9bXfHS2t uZzkUnkoWIMl/spWOFUpCfSr5HknKAIfZ9+rIzRGbUkqnaJRu+bVJd42LtyBrs2C GHtqIqc5LKiGTZnfmsfHd0ZfvdPnb67+N+yUYaMkhMQvsaEPneKzgNywjNGPbcAf 8mrvYwow8Ta29r2LYHF0m9kShB7/jyzBzGuKKzdvqQ1XO9mjWB4e/4JAWX8cqVIz trKB2lo+3uFYSiaOUTDbmbYIr23CNC5rFwzgKyCOb3iJtWAn1wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNqoRY/llK2k8yOYJiZcAMMoB1LHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvOTU1YTJlODMtNmVjZi0z NzdjLWI5MTgtYzRlMzUyODUxZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF40IMA8E AgACMAkDBwAmAvsbAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiSTvyQ2LIcOhtr/CPCDoIfGVWJGw5SNK 8SZpXE52fXDKLEtb8JxertPJEoxvzKUsMKA4DU1i4idu/bLrkkWjU2fopuNY97pQ zbPye7vhyq8tfRZnJWdIvUnAe5kOUtxmOPMa3tIrd1G1F65HG3I9JIrxmilq1trA mRxkfK2L/E9AN5f8AVU48x4AVxCrFl9YCLUcSJB2BTBmyWlbpOUpXMWSv6eWaAAA 2PazVmPO2LoM13J7LJICREhbLu+poiDPm6MXOpFZ6ovdik1vKRvWMFh2OPO6yK/4 ap0ZKVnzsNt1K0vI8KoWD6Z1K92iyBrkLmVua2sm94LeAe55m0jF7Q== -----END CERTIFICATE-----Generated at Sat Sep 13 19:45:34 2025 by rpki-client