$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa File: 1cee1fb9-f452-30a3-996d-1de632277883.roa (raw, json) Hash identifier: O7IwA3f9Fe9Z0JO0A3bT7+TQZcYZSsxmKS1XfUaqmhY= Subject key identifier: 88:0A:10:55:B3:1F:7A:BC:51:32:FB:E0:C8:B5:C9:71:65:F5:63:32 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584B13D6B54E4FF270FA7E1D1200 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 396416 IP address blocks: 23.137.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b5:4e:4f:f2:70:fa:7e:1d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=8a56c18a-1bb3-4625-8b7a-a564671c913d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:69:e6:f4:bd:3d:1a:a0:12:2f:eb:7c:b2: 69:91:02:ee:e7:48:c7:b5:b3:4c:e0:92:ee:20:99: 45:49:85:dc:77:8b:be:53:a9:a8:bc:01:4f:a7:0c: c2:8a:ab:43:e4:97:65:c2:70:c3:bd:bd:5e:92:c0: 0b:17:93:b4:6e:f9:7b:7e:0c:2c:68:d9:ec:53:3c: d6:02:94:14:8a:2c:d0:26:a1:21:ce:73:92:60:1d: a3:f8:de:2f:a1:9e:1e:84:70:79:e9:9d:05:26:90: 5d:d8:d5:78:a7:fd:41:d4:4d:26:d9:aa:9c:83:bd: d4:ba:b4:f9:a6:f1:ad:7b:4a:3f:d3:06:64:29:36: ae:f5:65:9f:f4:8e:da:7c:09:0b:60:df:79:86:a7: dc:2b:e1:83:97:12:0f:09:ec:c3:56:83:2d:bd:3a: 21:81:fe:a1:4a:d3:07:2f:d0:b3:25:ae:9e:98:28: f0:ea:ab:a6:ea:73:be:ad:16:7a:9b:87:70:2b:2d: cb:64:3e:de:79:82:22:3d:ba:ca:ed:fe:ee:2c:1a: 5e:15:04:89:fc:a5:74:84:78:5a:94:fc:11:ee:cf: f3:9e:2f:63:6e:1d:d9:ec:51:ba:43:4d:62:65:33: 1f:ee:52:71:bb:40:b5:33:72:26:dc:01:c5:2b:76: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:10:55:B3:1F:7A:BC:51:32:FB:E0:C8:B5:C9:71:65:F5:63:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 23.137.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:42:18:a5:09:ad:05:c0:ce:af:40:c1:5e:f5:77:1b:42:7f: 45:b6:fc:04:bf:a0:85:b1:b0:4f:45:8e:ee:e9:4c:f1:5c:7d: 1f:4a:33:e9:21:63:71:63:f0:f6:89:f4:11:7a:24:e1:23:f2: 95:72:fb:8a:70:30:46:83:b9:d5:34:fd:06:03:3b:55:b0:80: d4:3b:0d:8f:e1:d0:0c:0c:10:83:0d:3d:31:aa:0c:57:67:d7: 09:79:30:2d:d4:ca:a4:13:f5:0d:ed:e7:84:98:b9:99:3e:20: a5:56:d7:32:59:4f:0b:d8:a5:5a:26:42:72:be:6e:04:e8:fc: cb:4f:a3:91:be:d0:61:12:37:e3:7b:00:ed:5d:38:7d:68:0d: 32:94:28:15:96:19:e2:44:9f:a1:bd:16:36:76:48:3d:c0:7b: 70:12:b5:eb:a5:4a:35:13:09:a1:f1:2e:05:80:04:e3:7f:61: 7e:d7:8a:9d:3d:15:3e:8f:a5:42:74:9a:58:fd:5c:76:9f:f3: c9:ef:09:35:c8:62:d4:d3:af:66:cd:2d:2d:81:27:a5:02:21: da:e9:0a:67:79:54:eb:78:40:07:76:f2:5e:31:f2:d1:7b:1b: f5:d3:03:24:74:ae:3b:06:97:ad:af:59:fd:7a:e8:98:d2:3a: 3d:3a:49:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rVOT/Jw+n4dEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OGE1NmMxOGEtMWJiMy00NjI1LThiN2EtYTU2NDY3MWM5MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB1p5vS9PRqgEi/rfLJpkQLu50jHtbNM4JLu IJlFSYXcd4u+U6movAFPpwzCiqtD5JdlwnDDvb1eksALF5O0bvl7fgwsaNnsUzzW ApQUiizQJqEhznOSYB2j+N4voZ4ehHB56Z0FJpBd2NV4p/1B1E0m2aqcg73UurT5 pvGte0o/0wZkKTau9WWf9I7afAkLYN95hqfcK+GDlxIPCezDVoMtvTohgf6hStMH L9CzJa6emCjw6qum6nO+rRZ6m4dwKy3LZD7eeYIiPbrK7f7uLBpeFQSJ/KV0hHha lPwR7s/zni9jbh3Z7FG6Q01iZTMf7lJxu0C1M3Im3AHFK3bcgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgKEFWzH3q8UTL74Mi1yXFl9WMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvMWNlZTFmYjktZjQ1Mi0z MGEzLTk5NmQtMWRlNjMyMjc3ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1CGKUJrQXAzq9AwV71dxtCf0W2/AS/oIWxsE9Fju7pTPFcfR9KM+kh Y3Fj8PaJ9BF6JOEj8pVy+4pwMEaDudU0/QYDO1WwgNQ7DY/h0AwMEIMNPTGqDFdn 1wl5MC3UyqQT9Q3t54SYuZk+IKVW1zJZTwvYpVomQnK+bgTo/MtPo5G+0GESN+N7 AO1dOH1oDTKUKBWWGeJEn6G9FjZ2SD3Ae3ASteulSjUTCaHxLgWABON/YX7Xip09 FT6PpUJ0mlj9XHaf88nvCTXIYtTTr2bNLS2BJ6UCIdrpCmd5VOt4QAd28l4x8tF7 G/XTAyR0rjsGl62vWf166JjSOj06SaY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:23 2025 by rpki-client