$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa File: 3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa (raw, json) Hash identifier: 7AhuToCQFWsHcOG8654qxIP2ZXtMoIVsE4JplkGKHX4= Subject key identifier: B2:C1:E3:F2:3A:EA:2E:17:EE:2C:B0:6E:9A:65:D9:88:A9:B2:C5:66 Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F4328584B1AD18017E9626D9B49E18800 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 395585 IP address blocks: 23.171.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:80:17:e9:62:6d:9b:49:e1:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=24b353a2-1f47-42de-bb2c-ff7785ba03b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:e7:c9:84:31:75:0d:5d:92:86:9d:62:d2: ae:4e:92:60:23:00:50:76:86:1c:32:3b:9e:92:d4: a0:49:49:e1:3e:cd:38:a2:4b:39:a4:cb:27:e8:9e: e5:01:69:45:05:05:46:3d:6f:a7:74:ab:17:60:20: 9e:08:46:c9:5e:4c:19:2b:79:3b:41:36:7f:d6:bf: c5:bf:32:a2:41:31:c5:5d:77:93:ec:ec:2d:47:74: 40:4e:6f:9d:51:e6:34:f6:f2:4d:cb:23:d9:d2:87: 9e:22:47:08:24:04:ee:37:7c:45:ac:36:70:7d:c8: 01:a2:8a:e9:72:00:1b:b7:82:40:29:ff:f5:74:45: ae:a3:32:9c:e3:c6:76:cc:35:8a:bf:e2:1d:da:70: 80:2e:39:f1:5f:97:1f:2d:09:45:4f:a4:f0:fa:96: be:a7:e8:35:a0:ca:b4:4c:1f:48:75:f7:cd:91:f8: eb:bf:05:f8:79:c3:0a:cb:b6:8d:3c:95:2b:78:25: c4:73:9a:a2:6d:ba:ae:e0:06:a1:fb:c4:dd:53:0e: 03:82:4d:a9:e1:17:85:55:35:37:2c:52:91:55:5e: c6:e7:af:95:84:67:b5:f9:30:80:c5:f5:46:dc:53: c7:7d:7a:37:15:61:c6:52:45:c8:3e:ef:5b:fc:08: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:E3:F2:3A:EA:2E:17:EE:2C:B0:6E:9A:65:D9:88:A9:B2:C5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv4: 23.171.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:26:9d:61:58:fc:f5:35:36:e1:94:7d:30:a1:67:1c:52:f0: 4f:0f:29:bf:b6:61:fd:d0:eb:1c:eb:63:aa:af:7e:07:af:5e: a4:d4:a4:21:4f:fa:7a:41:a7:7c:04:ae:05:17:a5:96:25:a3: 4b:37:5b:91:02:10:f0:ac:59:20:38:32:a9:7b:fd:b4:99:6c: 2c:ca:7a:7f:d9:7a:5b:19:4f:18:8e:4c:b3:35:11:4a:26:0d: 58:81:23:ee:df:b8:fe:78:13:d8:37:cb:20:38:65:cb:88:1e: c4:69:c4:ad:8e:a8:bf:40:e0:04:b3:83:95:4b:d3:9c:ce:cf: a8:f4:25:f4:7a:61:46:96:03:d2:7a:2d:8a:33:06:06:04:9f: dc:bc:28:b1:d5:f7:50:d3:a6:24:2f:6e:ae:39:7d:38:d9:fe: 11:45:bd:86:bf:45:23:05:24:f3:71:b8:b5:56:5c:70:32:01: d4:ec:1d:ae:54:41:cd:a0:92:5a:af:7b:3b:90:7d:c3:2f:32: f4:42:c5:aa:ae:d0:39:eb:af:c4:cd:58:74:3e:77:e6:40:84: 34:4d:f9:72:95:a7:7c:7d:ca:6a:b9:15:80:7d:49:bb:fb:5f: 70:37:20:a5:77:54:1d:6b:c4:74:59:5a:b6:a6:4d:73:35:12: c8:fe:4d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YAX6WJtm0nhiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjRiMzUzYTItMWY0Ny00MmRlLWJiMmMtZmY3Nzg1YmEwM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzjnyYQxdQ1dkoadYtKuTpJgIwBQdoYcMjue ktSgSUnhPs04oks5pMsn6J7lAWlFBQVGPW+ndKsXYCCeCEbJXkwZK3k7QTZ/1r/F vzKiQTHFXXeT7OwtR3RATm+dUeY09vJNyyPZ0oeeIkcIJATuN3xFrDZwfcgBoorp cgAbt4JAKf/1dEWuozKc48Z2zDWKv+Id2nCALjnxX5cfLQlFT6Tw+pa+p+g1oMq0 TB9IdffNkfjrvwX4ecMKy7aNPJUreCXEc5qibbqu4Aah+8TdUw4Dgk2p4ReFVTU3 LFKRVV7G56+VhGe1+TCAxfVG3FPHfXo3FWHGUkXIPu9b/Ais/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLB4/I66i4X7iywbppl2YipssVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvM2RjMTY0N2MtNDRkOC0z NWZhLTkzYzUtM2MwYTlhZWJkYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4mnWFY/PU1NuGUfTChZxxS8E8PKb+2Yf3Q6xzrY6qvfgevXqTUpCFP +npBp3wErgUXpZYlo0s3W5ECEPCsWSA4Mql7/bSZbCzKen/ZelsZTxiOTLM1EUom DViBI+7fuP54E9g3yyA4ZcuIHsRpxK2OqL9A4ASzg5VL05zOz6j0JfR6YUaWA9J6 LYozBgYEn9y8KLHV91DTpiQvbq45fTjZ/hFFvYa/RSMFJPNxuLVWXHAyAdTsHa5U Qc2gklqvezuQfcMvMvRCxaqu0Dnrr8TNWHQ+d+ZAhDRN+XKVp3x9ymq5FYB9Sbv7 X3A3IKV3VB1rxHRZWramTXM1Esj+Tfo= -----END CERTIFICATE-----Generated at Sun Sep 7 16:17:38 2025 by rpki-client