$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa File: 075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json) Hash identifier: CUaGWOSjnq102F9LqRGGsGjNEJv14q3xdBi1nDwi65A= Subject key identifier: C8:10:17:FD:F6:10:85:DC:A2:97:22:EC:C2:56:6B:29:1A:0C:10:C8 Certificate issuer: /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff Certificate serial: 010D0C9F4328584B0CDC126CA7522410CC708900 Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 212524 IP address blocks: 23.155.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:12:6c:a7:52:24:10:cc:70:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=1d94862e-af9a-4e2f-ac9e-6a5a979fda71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:ad:e0:04:9e:31:25:61:87:3b:7e:3d:2f: c3:a5:02:ca:88:67:dc:6d:94:b8:e6:8c:0d:5e:b5: 1a:94:99:5e:12:7e:e1:5f:18:56:ad:f7:ee:5b:25: a0:4d:34:2e:5c:40:d8:7d:ac:51:7e:f7:2b:d1:ad: a6:18:56:a1:e2:cb:ac:50:cd:e7:60:51:0b:04:57: d0:05:11:fc:4f:6c:0c:45:9b:cb:3b:40:9c:0c:66: 66:60:8b:07:25:62:a5:f6:af:6c:b4:17:e5:89:f3: b4:d0:de:32:10:c8:91:0c:43:fe:12:0b:53:9e:18: 40:e2:fe:ad:18:db:4c:1e:83:aa:71:08:d9:04:3b: 9a:bf:f7:4f:4f:1a:68:7b:cc:43:b7:f7:2f:3c:3c: 00:ea:84:a4:a3:a6:2e:c3:86:4c:b6:78:d3:38:26: c2:56:c3:01:14:27:c5:3b:db:af:7a:a6:57:1c:99: 08:b6:1d:1c:7a:c9:8f:4d:09:5a:ef:ae:31:c8:02: ca:be:fa:ad:fb:92:49:ab:72:d1:1c:8b:03:30:91: ca:82:8b:00:5c:e9:86:88:4a:fd:2d:fc:67:84:26: 2c:9a:87:26:eb:21:8c:63:e3:06:60:f8:b6:53:14: 92:6b:ce:bd:d8:ea:d2:12:91:17:f9:ac:f3:ed:9d: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:17:FD:F6:10:85:DC:A2:97:22:EC:C2:56:6B:29:1A:0C:10:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl X509v3 Authority Key Identifier: keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer sbgp-ipAddrBlock: critical IPv4: 23.155.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:91:12:63:d7:1c:1c:96:4a:ab:92:0d:ce:00:61:da:72:fa: ce:c0:0f:fd:f7:7e:47:a2:42:18:d6:16:2e:79:09:08:46:87: 2c:bc:a4:00:c1:af:96:6f:5e:08:38:fe:65:f7:99:98:ce:26: 3a:ef:fd:b8:ca:78:bf:88:4f:3e:b1:2c:e4:cd:49:e9:e5:71: c2:fe:4e:d3:b2:56:14:65:7a:77:69:f4:38:d2:fd:9c:e4:89: 73:9e:f1:50:2d:8e:6d:14:55:2b:96:75:e4:11:d7:d8:82:a0: 7f:b6:9b:4b:32:2d:e1:2a:05:05:00:98:26:1e:53:2a:79:93: fd:9b:24:77:d0:df:98:42:19:ca:9b:9b:39:f1:d4:b8:3e:c9: cf:00:88:16:72:c1:55:99:6b:76:f8:16:74:7e:4d:50:1d:d5: 9b:98:53:23:d7:8b:2f:02:52:d2:15:09:d0:91:9a:df:66:4e: 47:3b:76:a8:b6:32:2c:8c:ac:35:a1:0c:d8:68:5d:a3:80:26: 6c:b9:9a:aa:78:65:61:62:9a:37:06:27:97:c4:3f:93:d0:a2: 22:e6:59:24:38:71:78:0e:7d:fe:d9:39:17:30:86:d1:a0:01: 58:b7:e5:a2:cf:e4:f8:87:6b:5d:ad:de:5a:3c:78:6e:dc:03: 91:d1:50:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BJsp1IkEMxwiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5ZGM2NDAtMmYyZS00ZDk2LWI2NzItMTg3ZTgxZDNk NGZmMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MWQ5NDg2MmUtYWY5YS00ZTJmLWFjOWUtNmE1YTk3OWZkYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2et4ASeMSVhhzt+PS/DpQLKiGfcbZS45owN XrUalJleEn7hXxhWrffuWyWgTTQuXEDYfaxRfvcr0a2mGFah4susUM3nYFELBFfQ BRH8T2wMRZvLO0CcDGZmYIsHJWKl9q9stBflifO00N4yEMiRDEP+EgtTnhhA4v6t GNtMHoOqcQjZBDuav/dPTxpoe8xDt/cvPDwA6oSko6Yuw4ZMtnjTOCbCVsMBFCfF O9uveqZXHJkIth0cesmPTQla764xyALKvvqt+5JJq3LRHIsDMJHKgosAXOmGiEr9 LfxnhCYsmocm6yGMY+MGYPi2UxSSa8692OrSEpEX+azz7Z2sWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgQF/32EIXcopci7MJWaykaDBDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYzlk YzY0MC0yZjJlLTRkOTYtYjY3Mi0xODdlODFkM2Q0ZmYvMDc1NDM5YWQtYjQ2My0z OWRhLWJkMTktNWQwMmJkZGVhMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmM5ZGM2NDAtMmYyZS00ZDk2LWI2 NzItMTg3ZTgxZDNkNGZmLzJjOWRjNjQwLTJmMmUtNGQ5Ni1iNjcyLTE4N2U4MWQz ZDRmZi5jcmwwHwYDVR0jBBgwFoAUjzGajLcT3Hsb221qs2kkjrAMCQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYzlkYzY0MC0yZjJlLTRkOTYtYjY3Mi0xODdl ODFkM2Q0ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKREmPXHByWSquSDc4AYdpy+s7AD/33fkeiQhjWFi55CQhGhyy8pADB r5ZvXgg4/mX3mZjOJjrv/bjKeL+ITz6xLOTNSenlccL+TtOyVhRlendp9DjS/Zzk iXOe8VAtjm0UVSuWdeQR19iCoH+2m0syLeEqBQUAmCYeUyp5k/2bJHfQ35hCGcqb mznx1Lg+yc8AiBZywVWZa3b4FnR+TVAd1ZuYUyPXiy8CUtIVCdCRmt9mTkc7dqi2 MiyMrDWhDNhoXaOAJmy5mqp4ZWFimjcGJ5fEP5PQoiLmWSQ4cXgOff7ZORcwhtGg AVi35aLP5PiHa12t3lo8eG7cA5HRUIA= -----END CERTIFICATE-----Generated at Wed Sep 10 15:18:17 2025 by rpki-client