$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa File: d823da31-dfeb-3482-8118-efd174a432a0.roa (raw, json) Hash identifier: Z9TihizFSx7kzq1iqoFaDnCrQlJ3pBnNPFfdpZMaSos= Subject key identifier: 01:C7:82:54:73:31:D7:CD:30:BC:2C:1B:56:C6:9C:96:A5:0F:E3:A5 Certificate issuer: /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Certificate serial: 010D0C9F4328584B2B9199AC3CC7213BC6977D00 Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 400402 IP address blocks: 23.134.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:99:ac:3c:c7:21:3b:c6:97:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=a3d2c7f5-e824-4d39-92f5-36e5822862d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:ac:96:f8:65:93:d1:c4:d5:9a:92:ac:84: 6c:77:66:e4:90:36:c7:81:b2:b1:67:5e:89:bb:71: 36:d9:fc:6c:cb:02:71:a3:d8:fe:31:8f:21:9f:00: 83:52:91:0c:4e:0c:25:aa:59:b2:91:c3:12:da:19: 23:c0:60:d3:6d:44:da:21:37:3b:a2:e8:a6:1e:a9: d5:c2:c8:9e:28:1f:81:8a:e6:b6:1a:f2:f4:89:c6: d7:d7:a9:0d:06:6a:73:f6:00:b2:c2:b0:34:bf:c7: 25:3d:fd:b6:72:e2:20:32:d4:c6:24:8c:6a:32:24: 68:f2:8a:a4:f3:0d:e7:0a:13:00:4d:44:86:8b:a1: b0:34:43:08:0f:f3:8e:51:b7:8b:de:12:69:c5:eb: 4e:cb:71:31:76:95:fd:75:91:11:c3:75:7d:79:77: d4:03:6f:03:23:06:c0:28:32:49:5c:b5:df:f9:53: 40:37:ac:2c:4a:73:8a:fc:3a:f9:53:3d:8b:02:b0: 1c:48:01:fc:f4:f8:5b:20:f7:ba:5d:a9:1c:22:41: 20:fe:b8:b9:26:37:80:2b:44:7b:87:21:02:51:2b: 5c:26:8b:ba:c7:e3:a2:fe:d6:95:04:7d:f1:3a:30: b5:5e:e5:94:11:d7:37:20:52:dd:fa:07:c9:63:b5: 66:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C7:82:54:73:31:D7:CD:30:BC:2C:1B:56:C6:9C:96:A5:0F:E3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl X509v3 Authority Key Identifier: keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer sbgp-ipAddrBlock: critical IPv4: 23.134.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:95:0e:82:6e:f8:9b:29:9c:a6:95:72:a7:f7:94:d8:41:74: cb:c3:0d:f3:04:73:8e:4b:1c:64:e6:1f:10:6f:08:fc:4a:e1: b0:5d:6f:62:b7:06:13:fd:1e:dc:f8:eb:4e:77:54:04:05:b9: 5e:da:f9:98:bd:b7:aa:58:74:1e:22:71:53:c2:8c:66:b3:92: 3a:de:ba:3e:16:46:e8:60:86:a9:cb:97:bd:34:e1:24:03:28: fc:6f:33:1b:b8:48:0a:11:a5:d2:8c:17:90:89:f5:19:a8:dd: 78:40:32:6b:89:8a:e0:72:90:f6:f0:3c:1b:97:99:78:b5:1a: 60:25:15:9f:d4:a3:18:b0:35:25:be:9f:d5:1c:dc:76:4d:a0: 6d:ff:56:09:d3:49:0e:0b:f6:55:ad:4b:c6:fb:c0:5c:b4:8f: 75:e0:66:75:ab:03:06:34:62:71:2d:b9:7e:4a:1d:9f:e4:93: 28:ee:79:d0:84:2b:0b:1f:56:c6:de:0b:68:b6:cc:b4:4d:95: 5b:f4:58:5d:82:98:eb:fb:62:c2:a1:30:9d:a6:3f:95:c1:79: 5e:96:33:ee:ea:f4:0d:10:65:4d:6c:4e:7f:48:94:fe:9a:8a: 2b:d7:00:d4:37:9e:f9:d8:5e:a8:4f:fd:9f:f7:eb:f2:7f:68: 3b:b3:d2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZmsPMchO8aXfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZk ZDAzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YTNkMmM3ZjUtZTgyNC00ZDM5LTkyZjUtMzZlNTgyMjg2MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86slvhlk9HE1ZqSrIRsd2bkkDbHgbKxZ16J u3E22fxsywJxo9j+MY8hnwCDUpEMTgwlqlmykcMS2hkjwGDTbUTaITc7ouimHqnV wsieKB+Biua2GvL0icbX16kNBmpz9gCywrA0v8clPf22cuIgMtTGJIxqMiRo8oqk 8w3nChMATUSGi6GwNEMID/OOUbeL3hJpxetOy3ExdpX9dZERw3V9eXfUA28DIwbA KDJJXLXf+VNAN6wsSnOK/Dr5Uz2LArAcSAH89PhbIPe6XakcIkEg/ri5JjeAK0R7 hyECUStcJou6x+Oi/taVBH3xOjC1XuWUEdc3IFLd+gfJY7Vm1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHHglRzMdfNMLwsG1bGnJalD+OlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGFh NWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvZDgyM2RhMzEtZGZlYi0z NDgyLTgxMTgtZWZkMTc0YTQzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRhYTViMjItYmRhMi00MTQxLThi ZGYtOThhNzg2OTZkZDAzLzc0YWE1YjIyLWJkYTItNDE0MS04YmRmLTk4YTc4Njk2 ZGQwMy5jcmwwHwYDVR0jBBgwFoAU3qp9sUUjQBMBvni32v/Oz8/U868wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3 ODY5NmRkMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGVDoJu+JspnKaVcqf3lNhBdMvDDfMEc45LHGTmHxBvCPxK4bBdb2K3 BhP9Htz46053VAQFuV7a+Zi9t6pYdB4icVPCjGazkjreuj4WRuhghqnLl7004SQD KPxvMxu4SAoRpdKMF5CJ9Rmo3XhAMmuJiuBykPbwPBuXmXi1GmAlFZ/UoxiwNSW+ n9Uc3HZNoG3/VgnTSQ4L9lWtS8b7wFy0j3XgZnWrAwY0YnEtuX5KHZ/kkyjuedCE KwsfVsbeC2i2zLRNlVv0WF2CmOv7YsKhMJ2mP5XBeV6WM+7q9A0QZU1sTn9IlP6a iivXANQ3nvnYXqhP/Z/36/J/aDuz0ks= -----END CERTIFICATE-----Generated at Tue Sep 16 04:22:13 2025 by rpki-client