$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa File: 41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa (raw, json) Hash identifier: /0uFWjYy65jwpcWpcwQ2zwNOrFQFmftxKFVlnu4G/K0= Subject key identifier: CF:FF:3B:E2:9B:77:DC:34:7A:35:EB:58:FA:92:BE:1C:EA:98:93:87 Certificate issuer: /CN=7d992196-6f15-4590-b76f-b34e1ea329f8 Certificate serial: 010D0C9F4328584AE8912FACB4161A484685F200 Authority key identifier: C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 63023 IP address blocks: 23.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2f:ac:b4:16:1a:48:46:85:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d992196-6f15-4590-b76f-b34e1ea329f8 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=01e95e39-0a76-4c4a-949b-823dc4c175ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:04:19:03:fa:69:e6:4d:57:c9:a1:8d:28:ba: 6f:b5:53:db:97:6b:71:f8:2d:93:10:7b:70:ac:0e: ca:b8:75:55:1b:9a:62:cf:69:ef:d8:e8:4e:db:cc: 34:d2:37:17:27:57:82:de:14:97:f0:a8:d7:68:14: 81:a5:b5:45:92:a8:48:6d:95:bf:28:23:81:f8:96: 97:b4:a1:19:dd:8b:74:c4:67:9c:07:b4:1f:92:c8: 21:dd:70:e1:75:0f:a3:7c:32:ca:7d:3d:52:07:8e: de:4f:13:7c:d0:01:2a:35:3b:66:6f:cd:33:61:69: 14:2c:0d:db:38:d2:27:d5:86:f9:82:70:d7:ea:de: c6:19:f1:63:e3:99:01:99:c4:07:42:23:76:91:bf: 84:d6:2d:ce:ee:7b:11:f9:ca:f2:56:8f:e3:7d:39: 21:1a:e9:94:8a:b6:5f:21:0f:de:69:52:a1:36:2c: c6:da:b7:ca:5c:ad:1c:c3:fc:ab:46:b3:3f:40:f2: 35:61:8c:bc:d5:3e:17:f6:70:35:d9:a6:80:28:41: 42:e3:98:41:75:22:46:b9:f0:e1:6a:47:23:45:fa: 89:24:08:a3:84:a4:89:38:32:5f:f5:8c:75:97:15: 8b:92:1e:67:ad:74:49:0f:c3:cd:9f:05:34:a2:11: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:3B:E2:9B:77:DC:34:7A:35:EB:58:FA:92:BE:1C:EA:98:93:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl X509v3 Authority Key Identifier: keyid:C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer sbgp-ipAddrBlock: critical IPv4: 23.168.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:73:94:1b:fd:eb:87:e1:94:3a:4b:c8:44:b3:ae:d7:d7:07: 08:c6:b5:1c:86:c5:c9:29:b3:12:98:ae:a9:c2:50:72:52:e1: ec:55:71:49:47:47:70:89:5f:ea:48:86:f9:43:a6:61:6e:72: 58:01:2c:ab:a8:be:31:ab:b0:7d:b0:89:0e:23:c7:55:6a:79: 68:de:9a:54:2e:d2:fe:43:4e:0e:b8:08:c4:1a:9f:13:38:73: f8:c2:9b:c7:6d:4e:da:6b:6d:7d:e4:5d:74:ff:53:c2:fa:0f: 6d:ea:a2:20:82:5f:96:15:1c:ca:74:e0:95:5b:d0:4d:ff:bd: d5:7b:f7:7a:37:96:9a:8d:82:9b:67:e1:55:b8:b6:38:32:ea: aa:21:0a:31:7e:d1:05:cd:15:24:69:92:96:c2:c7:63:e5:fb: 47:be:87:a4:8d:d9:e5:9e:47:17:d6:9c:21:ca:39:95:b6:eb: f5:40:79:8d:2a:e0:c1:44:cb:62:11:9e:fc:6d:05:78:c3:9f: 1c:f5:6d:80:cd:78:98:37:1d:04:92:26:15:89:15:dc:e2:a3: da:f4:d9:1d:7e:f3:6c:7f:b9:23:2f:9e:44:1b:c0:8d:8a:55: b6:72:45:ed:c0:7b:5d:7c:f4:43:b7:29:27:3a:2f:ca:61:38: a6:4a:89:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS+stBYaSEaF8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q5OTIxOTYtNmYxNS00NTkwLWI3NmYtYjM0ZTFlYTMy OWY4MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MDFlOTVlMzktMGE3Ni00YzRhLTk0OWItODIzZGM0YzE3NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QQZA/pp5k1XyaGNKLpvtVPbl2tx+C2TEHtw rA7KuHVVG5piz2nv2OhO28w00jcXJ1eC3hSX8KjXaBSBpbVFkqhIbZW/KCOB+JaX tKEZ3Yt0xGecB7Qfksgh3XDhdQ+jfDLKfT1SB47eTxN80AEqNTtmb80zYWkULA3b ONIn1Yb5gnDX6t7GGfFj45kBmcQHQiN2kb+E1i3O7nsR+cryVo/jfTkhGumUirZf IQ/eaVKhNizG2rfKXK0cw/yrRrM/QPI1YYy81T4X9nA12aaAKEFC45hBdSJGufDh akcjRfqJJAijhKSJODJf9Yx1lxWLkh5nrXRJD8PNnwU0ohFA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM//O+Kbd9w0ejXrWPqSvhzqmJOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZDk5 MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRlMWVhMzI5ZjgvNDFiODY2NWQtM2JmMi0z NmMzLTk5NjMtMGYyNmYzZjdiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2Q5OTIxOTYtNmYxNS00NTkwLWI3 NmYtYjM0ZTFlYTMyOWY4LzdkOTkyMTk2LTZmMTUtNDU5MC1iNzZmLWIzNGUxZWEz MjlmOC5jcmwwHwYDVR0jBBgwFoAUxCGjmgfFSd28vSIb8T9B7iDzBFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZDk5MjE5Ni02ZjE1LTQ1OTAtYjc2Zi1iMzRl MWVhMzI5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9zlBv964fhlDpLyESzrtfXBwjGtRyGxckpsxKYrqnCUHJS4exVcUlH R3CJX+pIhvlDpmFuclgBLKuovjGrsH2wiQ4jx1VqeWjemlQu0v5DTg64CMQanxM4 c/jCm8dtTtprbX3kXXT/U8L6D23qoiCCX5YVHMp04JVb0E3/vdV793o3lpqNgptn 4VW4tjgy6qohCjF+0QXNFSRpkpbCx2Pl+0e+h6SN2eWeRxfWnCHKOZW26/VAeY0q 4MFEy2IRnvxtBXjDnxz1bYDNeJg3HQSSJhWJFdzio9r02R1+82x/uSMvnkQbwI2K VbZyRe3Ae1189EO3KSc6L8phOKZKifo= -----END CERTIFICATE-----Generated at Fri Nov 7 17:58:12 2025 by rpki-client