$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa File: 41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa (raw, json) Hash identifier: 3sKQ/CF8ysUTWGNNdbSJgdrlY/Y11Hb9HO5VuLrCvpY= Subject key identifier: BD:69:3C:29:2E:38:26:F0:FB:43:55:AB:B1:5D:60:57:0A:43:73:2D Certificate issuer: /CN=743065a1-7855-4be2-941a-23bce4898410 Certificate serial: 010D0C9F4328584B2CF6E7FABC77D1D9CA270400 Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 209242 IP address blocks: 23.145.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e7:fa:bc:77:d1:d9:ca:27:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743065a1-7855-4be2-941a-23bce4898410 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=56daa2ea-f954-45fa-9267-9e568309aaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:91:f1:ac:40:75:37:32:7a:f0:b2:52:8e: 36:6b:80:65:cb:1a:0e:25:80:e9:e9:58:de:34:60: 16:81:b9:9a:b1:c1:10:10:92:56:df:d9:14:7a:11: 2d:40:f3:46:1e:64:63:95:d3:dc:c9:75:18:da:b5: 1b:7d:6c:38:c1:0e:b7:37:ac:24:48:2a:b5:42:8b: 5e:d1:74:09:c5:79:d8:33:e1:b7:26:e7:9c:a6:3a: 34:fe:e6:88:f2:bd:35:b3:47:99:f9:15:a3:a8:fb: 02:69:9f:01:1d:cd:5b:11:61:27:83:b3:c2:c5:cf: 99:32:81:ec:6a:08:51:7d:d8:b1:ed:52:01:d6:0e: 59:08:ff:c0:ac:c1:8d:a6:84:7c:b3:67:1a:06:c1: f9:88:e5:6d:ea:f3:e7:0a:26:98:c1:53:d4:55:11: 61:90:6a:53:98:37:80:3b:fe:4b:9d:5c:2a:b4:ec: 98:39:c9:08:ed:92:f7:5b:9f:07:f1:0e:0e:b1:cb: f6:fd:18:4f:41:79:3b:8f:df:ea:8d:e9:e9:a9:4d: 2b:d2:d1:b8:a4:b2:ce:7d:6e:fe:d9:db:10:cc:13: 29:59:4f:6c:df:75:29:e0:03:fc:81:0b:f8:8b:36: 77:65:d3:8e:5f:94:46:6b:d8:6c:34:c6:bb:28:d9: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:69:3C:29:2E:38:26:F0:FB:43:55:AB:B1:5D:60:57:0A:43:73:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl X509v3 Authority Key Identifier: keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer sbgp-ipAddrBlock: critical IPv4: 23.145.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:91:ce:c9:7c:db:b9:a2:e3:e3:c3:87:04:d2:1b:34:f2:84: 53:45:23:db:05:50:1a:91:40:32:6a:85:7f:8a:e0:70:1f:df: e0:3d:a3:51:70:78:95:66:5c:de:61:fe:02:b1:1d:f4:72:b3: 6f:39:24:63:62:b4:7a:f3:f6:89:ce:f2:56:88:af:f6:e0:e0: 0a:53:5d:c9:4a:a9:71:51:a2:02:b1:d8:03:ba:a7:c9:6a:d2: 78:e5:51:96:a4:7b:e3:b1:1a:8e:6a:09:ed:41:ad:50:1a:05: 86:5e:92:ab:fb:67:a2:ba:c5:7f:67:53:e0:58:07:4b:1f:99: 23:cd:df:75:04:3e:a0:2c:2c:d8:24:5d:0f:cc:19:5e:6e:49: 35:39:d3:a5:52:be:59:8b:b4:5a:4c:84:c2:66:59:6b:07:2c: f3:d0:fa:f5:08:71:71:bc:33:6e:c5:cd:8b:1e:6b:4a:5c:ca: a6:d7:26:e0:66:e0:1b:d0:2f:af:08:6c:65:29:76:d7:5a:c2: d8:15:f4:e1:55:ef:fa:1c:4b:62:16:c5:79:85:cd:04:8e:10: 08:fb:27:df:c4:1a:8c:4e:f0:52:58:45:90:92:dd:12:11:4e: 82:11:48:60:89:ff:54:5a:88:b5:bf:bc:28:95:4b:42:f6:6a: 82:21:65:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uf6vHfR2conBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMDY1YTEtNzg1NS00YmUyLTk0MWEtMjNiY2U0ODk4 NDEwMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NTZkYWEyZWEtZjk1NC00NWZhLTkyNjctOWU1NjgzMDlhYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF2R8axAdTcyevCyUo42a4BlyxoOJYDp6Vje NGAWgbmascEQEJJW39kUehEtQPNGHmRjldPcyXUY2rUbfWw4wQ63N6wkSCq1Qote 0XQJxXnYM+G3Juecpjo0/uaI8r01s0eZ+RWjqPsCaZ8BHc1bEWEng7PCxc+ZMoHs aghRfdix7VIB1g5ZCP/ArMGNpoR8s2caBsH5iOVt6vPnCiaYwVPUVRFhkGpTmDeA O/5LnVwqtOyYOckI7ZL3W58H8Q4Oscv2/RhPQXk7j9/qjenpqU0r0tG4pLLOfW7+ 2dsQzBMpWU9s33Up4AP8gQv4izZ3ZdOOX5RGa9hsNMa7KNmibwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1pPCkuOCbw+0NVq7FdYFcKQ3MtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMw NjVhMS03ODU1LTRiZTItOTQxYS0yM2JjZTQ4OTg0MTAvNDFhMjBmYTQtNjc4My0z ZmM1LWE1ODUtYjVkMTlkNTFhYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzQzMDY1YTEtNzg1NS00YmUyLTk0 MWEtMjNiY2U0ODk4NDEwLzc0MzA2NWExLTc4NTUtNGJlMi05NDFhLTIzYmNlNDg5 ODQxMC5jcmwwHwYDVR0jBBgwFoAUHeCt7o13h6jhBF+BO8nZfFhbERwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMwNjVhMS03ODU1LTRiZTItOTQxYS0yM2Jj ZTQ4OTg0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2Rzsl827mi4+PDhwTSGzTyhFNFI9sFUBqRQDJqhX+K4HAf3+A9o1Fw eJVmXN5h/gKxHfRys285JGNitHrz9onO8laIr/bg4ApTXclKqXFRogKx2AO6p8lq 0njlUZake+OxGo5qCe1BrVAaBYZekqv7Z6K6xX9nU+BYB0sfmSPN33UEPqAsLNgk XQ/MGV5uSTU506VSvlmLtFpMhMJmWWsHLPPQ+vUIcXG8M27FzYsea0pcyqbXJuBm 4BvQL68IbGUpdtdawtgV9OFV7/ocS2IWxXmFzQSOEAj7J9/EGoxO8FJYRZCS3RIR ToIRSGCJ/1RaiLW/vCiVS0L2aoIhZX0= -----END CERTIFICATE-----Generated at Wed Sep 17 23:23:06 2025 by rpki-client