$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa File: 8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa (raw, json) Hash identifier: gD53vXK+XxXlbN3RT0PSl+p8RJj5kdXV6fGyVWmRscA= Subject key identifier: 94:EA:74:9C:1D:A6:25:CB:79:3F:95:F8:EE:A4:97:46:A5:15:EF:95 Certificate issuer: /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887 Certificate serial: 010D0C9F4328584B2A2C3E748ABDA2AF0FE64140 Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 33436 IP address blocks: 23.165.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3e:74:8a:bd:a2:af:0f:e6:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=2c0f80e0-7f71-457f-a9dd-ac53e47e897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:25:ca:93:16:f4:78:f8:c4:5a:00:1c:8d: 47:87:a0:3e:6c:0a:aa:38:5a:57:b0:7c:9c:88:5e: d5:10:e2:5a:21:4f:aa:21:4f:74:4b:a7:69:48:dd: 19:e3:03:18:3e:85:76:db:da:51:8c:98:cc:df:69: 99:58:e4:1a:37:56:02:8f:43:1d:1c:c1:99:1a:5a: ea:48:39:96:af:14:8b:df:46:94:b7:9f:bb:0d:0f: f0:bb:60:a2:b3:54:c7:24:69:f0:27:5c:44:d8:88: 0c:94:82:fe:01:cb:b6:13:5d:38:0e:26:14:5b:6c: 6f:73:19:d9:d0:01:29:2d:10:37:1f:1d:9e:0d:53: 18:7f:d5:e6:67:da:df:db:2f:29:93:28:3a:ba:f3: 58:68:67:a1:6d:35:74:6d:b2:c6:71:2f:7e:64:f8: d5:23:ce:f7:b9:94:17:9c:e7:32:27:af:65:d6:b0: ae:70:e8:fe:a9:4a:f4:67:49:25:ae:59:e9:4a:3f: 62:a9:8a:e7:29:38:e9:b5:3a:29:e7:91:a7:9f:80: 4d:c6:d2:96:fa:f7:e9:d6:14:30:19:37:56:a6:a6: 72:cf:a6:d7:2e:e6:cc:bd:ce:04:d8:36:cf:cc:6e: eb:88:03:9e:bd:fd:93:b5:1f:27:fe:3d:17:fd:42: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EA:74:9C:1D:A6:25:CB:79:3F:95:F8:EE:A4:97:46:A5:15:EF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl X509v3 Authority Key Identifier: keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer sbgp-ipAddrBlock: critical IPv4: 23.165.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bc:2f:cf:b7:07:38:1e:a6:b0:a7:31:d3:24:96:09:a7:75: 27:97:dc:82:b6:ec:6f:5d:1f:f4:42:80:c5:15:b4:65:56:eb: 2f:03:4d:46:27:e1:5c:c0:17:42:fb:1c:b4:67:ea:fa:24:63: 96:52:91:4f:21:29:8c:6b:96:be:ee:13:a1:a5:6d:84:3a:d0: a7:90:5e:25:f8:32:a6:10:a7:7c:2d:44:fa:08:eb:d2:a6:5e: d9:18:25:bf:0c:48:a7:81:01:4e:4c:80:a6:b5:fc:8c:b1:ff: de:6a:70:28:e3:3c:99:bf:c7:05:73:71:6a:a5:ff:63:62:32: 28:54:ed:71:d2:23:a7:ac:5d:ec:ae:f5:72:2d:11:53:d4:ed: e2:90:d1:0f:19:cf:dc:a6:3c:c9:94:47:a8:aa:3f:76:3e:c7: a5:1a:17:4e:47:ec:ea:4e:b9:cc:90:81:57:81:ff:8f:0f:9e: 4e:95:14:10:86:2d:f2:43:4f:35:6b:d1:f7:ba:22:7f:79:cb: b3:8c:0c:da:36:84:45:d8:e7:9a:8e:77:5c:43:a9:9e:eb:5e: 78:ca:13:9c:06:ca:1e:e7:ff:0f:ae:33:39:fd:89:dd:fa:2c: bc:61:82:9c:a0:77:c5:cb:8e:42:51:49:5f:18:58:fb:e5:3a: f7:d0:a7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLD50ir2irw/mQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNjNDM5YTEtZjVlZC00OTM3LWI0NzgtNjRkYTZiNGZl ODg3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MmMwZjgwZTAtN2Y3MS00NTdmLWE5ZGQtYWM1M2U0N2U4OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMklypMW9Hj4xFoAHI1Hh6A+bAqqOFpXsHyc iF7VEOJaIU+qIU90S6dpSN0Z4wMYPoV229pRjJjM32mZWOQaN1YCj0MdHMGZGlrq SDmWrxSL30aUt5+7DQ/wu2Cis1THJGnwJ1xE2IgMlIL+Acu2E104DiYUW2xvcxnZ 0AEpLRA3Hx2eDVMYf9XmZ9rf2y8pkyg6uvNYaGehbTV0bbLGcS9+ZPjVI873uZQX nOcyJ69l1rCucOj+qUr0Z0klrlnpSj9iqYrnKTjptTop55Gnn4BNxtKW+vfp1hQw GTdWpqZyz6bXLubMvc4E2DbPzG7riAOevf2TtR8n/j0X/UK/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTqdJwdpiXLeT+V+O6kl0alFe+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0 MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRhNmI0ZmU4ODcvOGQxNzcyYTYtYmNlZC0z NGRkLWFiOGUtYWFkZGRlOWEyYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmNjNDM5YTEtZjVlZC00OTM3LWI0 NzgtNjRkYTZiNGZlODg3LzZjYzQzOWExLWY1ZWQtNDkzNy1iNDc4LTY0ZGE2YjRm ZTg4Ny5jcmwwHwYDVR0jBBgwFoAU54Oux1f+8aa2yRyYWepU8k0eWVQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRh NmI0ZmU4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy8L8+3BzgeprCnMdMklgmndSeX3IK27G9dH/RCgMUVtGVW6y8DTUYn 4VzAF0L7HLRn6vokY5ZSkU8hKYxrlr7uE6GlbYQ60KeQXiX4MqYQp3wtRPoI69Km XtkYJb8MSKeBAU5MgKa1/Iyx/95qcCjjPJm/xwVzcWql/2NiMihU7XHSI6esXeyu 9XItEVPU7eKQ0Q8Zz9ymPMmUR6iqP3Y+x6UaF05H7OpOucyQgVeB/48Pnk6VFBCG LfJDTzVr0fe6In95y7OMDNo2hEXY55qOd1xDqZ7rXnjKE5wGyh7n/w+uMzn9id36 LLxhgpygd8XLjkJRSV8YWPvlOvfQp0o= -----END CERTIFICATE-----Generated at Thu Oct 9 06:15:51 2025 by rpki-client