$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/603cd943-fd49-3ef3-9787-250c86135919.roa File: 603cd943-fd49-3ef3-9787-250c86135919.roa (raw, json) Hash identifier: 9kIQdISeG/EyXo9QQXTNUQAlKzOw5SApMQ0wZ2+2kfo= Subject key identifier: AD:58:BC:8E:9C:AE:3C:4A:36:0D:48:0B:A3:6E:2A:4D:53:F5:23:04 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584AF52138EE70B8BEE1510A0D40 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/603cd943-fd49-3ef3-9787-250c86135919.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399976 IP address blocks: 23.131.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:38:ee:70:b8:be:e1:51:0a:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=bebea982-f92a-4e99-8e96-a1711a56b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:db:15:ca:53:20:14:b3:2a:d8:96:8a:5e: ae:be:a1:9b:1c:f7:e6:1b:e8:59:1b:8b:9e:67:b4: bb:d2:a1:44:ab:27:56:68:0b:a8:4b:e6:01:7e:d6: 2b:4c:0a:ed:fe:50:36:f0:24:b2:1f:c6:70:da:77: 87:9d:52:bb:a3:ba:f3:0f:fc:98:bb:e5:36:8c:1a: 47:41:d1:29:bb:9c:5e:8d:0c:20:32:8e:c1:97:5a: 17:8d:81:86:2e:79:f5:e8:36:0e:d9:86:93:be:56: 83:a1:4f:14:af:bd:5f:cb:9d:9e:bb:3d:26:c1:73: 2f:f8:bf:b8:af:d9:cb:03:da:c0:f1:12:8d:3b:fe: bc:89:03:ac:68:98:55:40:03:50:0b:51:6e:7d:09: c4:c8:dd:27:e3:79:70:ce:d6:ab:04:d0:22:d9:a0: 9d:49:2f:ab:1a:d2:d7:be:fa:0d:0b:11:67:d8:f1: 9f:f4:a8:02:ef:03:6a:74:f7:4c:e5:44:ad:9f:fe: d7:c1:22:bf:a3:00:a6:da:52:cf:f6:94:1e:ce:4b: 17:d8:98:46:49:21:cd:48:17:bd:6a:72:ca:25:aa: d8:cb:28:ab:4c:f3:d5:56:e9:08:88:e2:b7:f0:d0: d2:28:36:56:0b:fd:5f:81:24:4b:36:53:08:b1:dd: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:BC:8E:9C:AE:3C:4A:36:0D:48:0B:A3:6E:2A:4D:53:F5:23:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/603cd943-fd49-3ef3-9787-250c86135919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv4: 23.131.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1f:20:5d:a0:6f:4c:48:ed:38:8f:9c:98:01:f0:dd:f8:54: d9:2b:34:fa:e8:78:05:92:c5:a1:89:88:fe:f8:fc:80:9d:05: 7c:5e:3a:d1:cc:02:20:c3:4a:5b:ac:83:7f:87:e6:5b:61:93: 7e:b4:aa:d8:48:92:f1:b2:75:4f:99:64:e7:b3:83:a8:19:c8: 4d:ec:6e:05:27:71:66:ab:6b:54:96:4f:12:e8:66:af:a2:da: ef:01:68:c7:e5:4b:bb:9d:da:1d:e4:7c:ee:df:c7:0e:4b:ed: a9:8f:d5:99:89:2a:2f:7d:7c:4e:af:d2:bb:06:98:7c:cd:ea: c6:1c:4d:a4:15:f1:5c:ec:dc:a9:ee:6c:1b:8c:48:4d:6e:b3: 22:bd:d7:f3:89:85:eb:e3:28:b8:43:90:c2:06:9b:6e:56:fa: e3:67:0c:8b:86:ce:8e:00:60:59:83:e7:0b:ca:f1:ee:13:d1: a7:72:25:99:2e:b8:69:a1:cc:df:63:46:25:62:23:83:64:98: 5f:94:a1:dc:27:bd:3c:ad:69:ac:f6:26:ef:bc:d6:00:e4:4d: ba:95:a5:3a:90:5d:8a:d2:64:85:67:8e:26:54:d8:02:27:bb: 4d:df:df:81:73:61:d2:8f:56:5a:0e:dd:5d:dd:5e:5b:f6:c9: 06:e6:54:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITjucLi+4VEKDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmViZWE5ODItZjkyYS00ZTk5LThlOTYtYTE3MTFhNTZiMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWHbFcpTIBSzKtiWil6uvqGbHPfmG+hZG4ue Z7S70qFEqydWaAuoS+YBftYrTArt/lA28CSyH8Zw2neHnVK7o7rzD/yYu+U2jBpH QdEpu5xejQwgMo7Bl1oXjYGGLnn16DYO2YaTvlaDoU8Ur71fy52euz0mwXMv+L+4 r9nLA9rA8RKNO/68iQOsaJhVQANQC1FufQnEyN0n43lwztarBNAi2aCdSS+rGtLX vvoNCxFn2PGf9KgC7wNqdPdM5UStn/7XwSK/owCm2lLP9pQezksX2JhGSSHNSBe9 anLKJarYyyirTPPVVukIiOK38NDSKDZWC/1fgSRLNlMIsd2DmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1YvI6crjxKNg1IC6NuKk1T9SMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNjAzY2Q5NDMtZmQ0OS0z ZWYzLTk3ODctMjUwYzg2MTM1OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIfIF2gb0xI7TiPnJgB8N34VNkrNProeAWSxaGJiP74/ICdBXxeOtHM AiDDSlusg3+H5lthk360qthIkvGydU+ZZOezg6gZyE3sbgUncWara1SWTxLoZq+i 2u8BaMflS7ud2h3kfO7fxw5L7amP1ZmJKi99fE6v0rsGmHzN6sYcTaQV8Vzs3Knu bBuMSE1usyK91/OJhevjKLhDkMIGm25W+uNnDIuGzo4AYFmD5wvK8e4T0adyJZku uGmhzN9jRiViI4NkmF+UodwnvTytaaz2Ju+81gDkTbqVpTqQXYrSZIVnjiZU2AIn u03f34FzYdKPVloO3V3dXlv2yQbmVKc= -----END CERTIFICATE-----Generated at Mon Aug 25 19:31:27 2025 by rpki-client