$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa File: 74708ca9-5c31-32e1-b243-14870abf5964.roa (raw, json) Hash identifier: +LlLVwv6ptgEb41pPmFBbk8Fu/zxQp1NM3k1YHtGAsI= Subject key identifier: A9:46:BD:BA:EC:AE:4D:54:C7:EC:BA:43:49:E7:F7:4C:15:6F:26:3A Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584AF52139030B505936CD5B8F20 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399976 IP address blocks: 23.131.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:39:03:0b:50:59:36:cd:5b:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=eefec149-d703-444b-9a98-ff1a2ce495b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:2f:89:36:03:72:4a:e3:90:b3:40:fa:03: a2:20:ab:89:9d:70:e6:e2:d5:17:11:ac:a0:cb:49: b4:c4:14:4c:08:dc:e2:2c:55:f5:d8:74:4f:0b:69: e1:bb:86:91:5d:26:9d:de:66:1d:3e:52:6c:b7:ec: 10:90:df:41:35:cc:2d:52:2e:24:c5:de:60:e2:ed: 52:1a:61:d6:b9:43:ba:8c:a3:07:75:e1:fa:62:f2: e1:97:e6:35:29:f8:40:ae:1b:9c:eb:2f:fe:db:53: 99:36:04:7a:07:0f:43:14:be:af:ef:68:45:70:cd: e3:e8:34:87:12:e3:55:36:7b:0a:8f:94:78:36:2b: c4:d2:f2:11:41:89:7a:f4:57:1a:f1:fa:65:2c:b0: 5f:ec:c9:d6:7c:29:62:3f:da:5f:86:e1:55:2d:1e: 9a:a3:85:89:41:33:1c:ab:a9:24:6c:28:dd:51:b8: 08:4b:a4:e3:c5:b8:ab:6b:52:44:26:b5:02:07:00: ef:3d:d1:fc:77:ca:57:61:2e:56:37:1b:d1:fb:62: 45:cd:e5:0a:24:44:2d:9e:65:1d:af:30:30:90:a3: 0f:5f:06:f1:9e:4d:ad:d9:8e:56:b6:4e:e8:20:29: a0:e0:89:11:ee:34:2d:a4:08:e0:d5:c3:04:42:eb: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:46:BD:BA:EC:AE:4D:54:C7:EC:BA:43:49:E7:F7:4C:15:6F:26:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/74708ca9-5c31-32e1-b243-14870abf5964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv4: 23.131.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7c:4d:9b:79:ea:c8:b8:06:4d:c1:a6:65:af:21:39:ff:31: 40:92:16:85:3d:73:74:e7:b7:f0:00:25:63:92:7f:6c:b1:9c: 79:47:6a:dc:e6:09:31:24:dc:b4:05:67:38:33:e0:a4:82:42: 6f:de:c2:ce:85:e6:80:5d:46:a3:76:96:6c:63:d6:c3:b8:83: 59:ed:91:e0:4c:d6:56:dd:97:54:6f:3c:c1:64:f4:43:ef:d3: 99:ec:9c:f4:db:64:ef:18:ee:d4:3a:1d:de:08:4d:72:e5:f2: 1c:28:63:3c:d4:4c:bd:03:c2:aa:11:61:3d:b1:9c:12:b3:e8: c2:91:c1:f8:ae:fc:c5:a1:7a:92:e6:18:ce:18:95:a2:88:26: 07:47:67:6e:54:35:d6:0f:03:a4:14:c0:5b:ac:8f:1f:e2:71: 8a:25:f3:5f:25:6e:04:84:b7:a3:4f:71:f2:1d:6a:49:8b:b3: 64:17:28:7c:0f:4c:ef:a6:f5:d5:14:11:e5:e6:89:58:f3:03: 76:97:9e:3c:d4:35:1c:f2:16:76:da:69:6f:0c:be:c4:b2:1d: 8d:ee:2b:53:12:c3:f9:2c:9a:cb:2e:ad:7e:e3:19:32:e7:ee: c2:d8:47:6c:9f:1e:b9:3f:ef:7a:2f:b4:07:00:d6:21:0e:cc: 33:03:1f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITkDC1BZNs1bjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWVmZWMxNDktZDcwMy00NDRiLTlhOTgtZmYxYTJjZTQ5NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36YviTYDckrjkLNA+gOiIKuJnXDm4tUXEayg y0m0xBRMCNziLFX12HRPC2nhu4aRXSad3mYdPlJst+wQkN9BNcwtUi4kxd5g4u1S GmHWuUO6jKMHdeH6YvLhl+Y1KfhArhuc6y/+21OZNgR6Bw9DFL6v72hFcM3j6DSH EuNVNnsKj5R4NivE0vIRQYl69Fca8fplLLBf7MnWfCliP9pfhuFVLR6ao4WJQTMc q6kkbCjdUbgIS6Tjxbira1JEJrUCBwDvPdH8d8pXYS5WNxvR+2JFzeUKJEQtnmUd rzAwkKMPXwbxnk2t2Y5Wtk7oICmg4IkR7jQtpAjg1cMEQutBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlGvbrsrk1Ux+y6Q0nn90wVbyY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNzQ3MDhjYTktNWMzMS0z MmUxLWIyNDMtMTQ4NzBhYmY1OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB8TZt56si4Bk3BpmWvITn/MUCSFoU9c3Tnt/AAJWOSf2yxnHlHatzm CTEk3LQFZzgz4KSCQm/ews6F5oBdRqN2lmxj1sO4g1ntkeBM1lbdl1RvPMFk9EPv 05nsnPTbZO8Y7tQ6Hd4ITXLl8hwoYzzUTL0DwqoRYT2xnBKz6MKRwfiu/MWhepLm GM4YlaKIJgdHZ25UNdYPA6QUwFusjx/icYol818lbgSEt6NPcfIdakmLs2QXKHwP TO+m9dUUEeXmiVjzA3aXnjzUNRzyFnbaaW8MvsSyHY3uK1MSw/ksmssurX7jGTLn 7sLYR2yfHrk/73ovtAcA1iEOzDMDH/k= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:29 2025 by rpki-client