$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa File: 28931be6-4e16-34bb-90eb-77f681bd268b.roa (raw, json) Hash identifier: hRTIxg04Bbd4nF4nn4jqXP36potLh2XQcayzbiaNRvM= Subject key identifier: EC:77:EB:9C:25:7C:DE:CF:F3:B8:4E:A1:AE:CD:D1:94:E3:4E:86:8B Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584B21CC415B133A5EF8CBE36F80 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396952 IP address blocks: 23.140.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:41:5b:13:3a:5e:f8:cb:e3:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=a1151f43-f6cf-42c4-909c-c1678bf51494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:a3:0f:67:15:9b:b1:f4:0e:5f:a4:5a:c6: 91:89:12:e0:6e:d3:99:d6:3e:35:55:64:65:d3:67: 67:6f:d6:aa:55:e5:d0:67:17:a2:dc:64:2f:16:fd: 2e:fe:17:a6:f8:db:e5:3f:08:f3:3e:b7:d0:b2:e0: 4f:68:16:ff:a8:34:37:7e:8c:94:fc:9b:61:6c:70: 4d:0e:bf:77:41:d7:e2:c4:4b:dd:34:6a:89:de:c5: a2:35:f4:fb:0a:f2:bf:e3:58:cc:25:e5:30:eb:cb: 3c:f7:11:e0:49:f7:75:4a:12:da:16:03:22:23:45: 53:b1:16:ee:be:7e:62:25:48:d3:72:d7:e7:04:90: 24:67:4b:63:dd:31:5c:c5:9e:8f:b2:4a:dd:0e:4c: 7f:2f:94:2b:27:a2:e5:56:57:67:85:0c:d1:2f:2d: e5:fb:1c:99:20:bc:8d:57:9e:f6:e8:d8:4c:a6:cd: 53:6a:e7:fe:87:d5:37:a7:02:f7:70:ad:a2:50:86: e9:d5:df:5d:2d:8c:fa:f1:23:f5:6a:c4:c9:e7:6f: 24:6a:5b:e7:77:60:13:d7:e7:30:a5:d7:c1:d9:23: 42:96:0a:ca:b5:1c:5c:a9:53:e8:a1:70:be:a4:74: 12:13:22:85:99:58:fa:ec:74:95:7a:a7:6e:0f:23: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:77:EB:9C:25:7C:DE:CF:F3:B8:4E:A1:AE:CD:D1:94:E3:4E:86:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 23.140.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f4:ad:79:d3:0b:9c:a0:08:19:82:0b:45:23:7a:42:6e:2f: c3:00:77:51:9f:6e:9f:31:68:36:9d:1c:8c:21:57:3b:00:27: 8e:9e:fc:21:ab:23:68:3b:f5:70:1b:00:c2:f9:8f:ff:8d:1c: b2:7d:ca:81:f0:c5:e2:f2:45:b2:d4:eb:7c:9b:50:cb:07:56: f0:55:46:8b:6a:b6:c8:c3:7a:8b:a7:fe:29:b5:69:f5:d0:0e: fd:3e:8c:89:7f:e7:68:e1:b6:be:70:0e:fa:4a:37:6b:fb:1e: 33:fe:c8:52:8c:5d:cf:8f:e9:97:1c:ea:1b:1c:1b:fd:0a:4b: 5b:88:a9:b8:10:c9:c7:7f:61:1c:54:70:5b:3a:37:00:ba:a7: 31:60:66:f9:0c:f5:5e:45:54:aa:57:7e:c0:03:20:17:ba:17: f6:09:d8:70:e1:1c:72:82:1f:a0:f0:0c:d1:10:0c:e2:d0:29: 20:c1:4c:f9:9f:78:b0:12:37:28:02:ca:dd:0f:74:76:28:29: 6a:bc:65:1e:64:52:c8:85:05:3d:49:de:08:0c:92:cf:25:36: b9:9a:ae:85:af:9d:e8:00:c7:47:e9:a2:dc:3c:14:4c:c3:b3: 8f:c0:63:3c:0e:a5:08:cb:56:75:84:82:3f:0a:af:15:da:e8: 19:1f:bc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzEFbEzpe+Mvjb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YTExNTFmNDMtZjZjZi00MmM0LTkwOWMtYzE2NzhiZjUxNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOSjD2cVm7H0Dl+kWsaRiRLgbtOZ1j41VWRl 02dnb9aqVeXQZxei3GQvFv0u/hem+NvlPwjzPrfQsuBPaBb/qDQ3foyU/JthbHBN Dr93QdfixEvdNGqJ3sWiNfT7CvK/41jMJeUw68s89xHgSfd1ShLaFgMiI0VTsRbu vn5iJUjTctfnBJAkZ0tj3TFcxZ6PskrdDkx/L5QrJ6LlVldnhQzRLy3l+xyZILyN V5726NhMps1Tauf+h9U3pwL3cK2iUIbp1d9dLYz68SP1asTJ528kalvnd2AT1+cw pdfB2SNClgrKtRxcqVPooXC+pHQSEyKFmVj67HSVeqduDyMxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx365wlfN7P87hOoa7N0ZTjToaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjg5MzFiZTYtNGUxNi0z NGJiLTkwZWItNzdmNjgxYmQyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr0rXnTC5ygCBmCC0UjekJuL8MAd1Gfbp8xaDadHIwhVzsAJ46e/CGr I2g79XAbAML5j/+NHLJ9yoHwxeLyRbLU63ybUMsHVvBVRotqtsjDeoun/im1afXQ Dv0+jIl/52jhtr5wDvpKN2v7HjP+yFKMXc+P6Zcc6hscG/0KS1uIqbgQycd/YRxU cFs6NwC6pzFgZvkM9V5FVKpXfsADIBe6F/YJ2HDhHHKCH6DwDNEQDOLQKSDBTPmf eLASNygCyt0PdHYoKWq8ZR5kUsiFBT1J3ggMks8lNrmaroWvnegAx0fpotw8FEzD s4/AYzwOpQjLVnWEgj8KrxXa6BkfvOU= -----END CERTIFICATE-----Generated at Fri Oct 17 13:05:35 2025 by rpki-client