$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json) Hash identifier: VPvL83yLP8laVfX13UCSqPYTUB/lvbsljFjAcQ8uTMs= Subject key identifier: FB:85:40:25:9B:F4:2E:EF:B1:D8:E0:B3:5C:9A:24:B0:D7:1E:54:65 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584B2A2C3A736F0ECB024E14BF40 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 23470 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:73:6f:0e:cb:02:4e:14:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=938bb078-ffa3-44cc-9fb0-0a938188b284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:72:c6:94:98:c6:f7:18:29:f7:27:dd:7f:85: dd:8b:a4:d9:33:13:8a:e0:8e:df:d6:93:73:65:be: c5:ec:1d:56:e9:73:76:06:ab:39:0d:ad:9b:89:1c: 61:9d:25:38:42:1f:a6:04:f9:62:15:7a:4e:65:7f: 59:c8:84:69:82:a5:af:3b:d9:cd:9e:e4:3c:25:43: 8a:fe:0f:61:a0:bc:89:4f:2e:85:a6:33:c7:e0:45: 1e:4f:31:59:02:79:bf:c0:a9:91:e0:ad:c1:bd:e9: 24:6d:f6:8a:b1:02:76:13:12:4e:d5:17:8f:aa:2d: 24:7b:5a:d6:e9:09:4e:75:d6:48:0f:17:ef:b3:3c: 71:d7:a8:92:ee:25:ba:7c:a7:44:d4:91:53:43:22: f0:6a:15:c9:a4:ea:ba:d0:03:81:e4:6a:49:e4:36: e6:dc:9b:61:e4:a4:dc:8e:83:30:15:51:fb:7e:54: 8e:07:2d:43:8f:c2:d7:48:81:06:e2:11:b4:ea:b8: c2:c0:fe:cf:16:ff:a7:50:5e:07:70:3e:37:e3:a5: d3:cc:f2:37:9b:b2:ba:63:d5:b6:96:21:d9:33:0d: 9c:80:e7:be:4c:d5:20:33:b0:4f:77:07:4b:e2:48: 12:57:e9:a8:08:99:cd:72:37:a5:ac:77:91:a7:df: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:40:25:9B:F4:2E:EF:B1:D8:E0:B3:5C:9A:24:B0:D7:1E:54:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0f:cb:fc:67:56:7d:8b:51:74:72:69:55:2a:29:34:3c:66: 3b:28:d3:a8:9f:2a:ec:9e:1a:72:fb:79:42:3d:3f:3c:46:62: 87:00:cf:01:74:62:a1:74:c3:04:3b:67:78:76:eb:20:7a:19: a3:a7:7d:e8:42:1e:ad:65:92:33:92:2f:ff:dc:e0:8f:d5:75: 91:41:df:64:89:07:7d:e5:38:54:ee:55:14:24:cc:35:8e:92: a6:7b:9b:2d:f5:f3:a9:4e:06:74:65:3d:b7:3d:23:23:03:58: 5a:35:58:94:9c:aa:f7:f7:1a:e7:a3:6f:a7:47:55:0b:13:e9: ef:1e:c9:96:a9:c6:92:43:be:b8:b4:b8:bd:ff:d8:e4:53:53: c3:d8:64:44:10:68:7d:b2:24:e1:c1:67:a2:9f:6f:ea:51:61: 78:bf:66:c9:02:70:1a:18:3f:f4:eb:59:28:e8:04:04:8d:b3: 20:bb:08:dd:7e:b4:fa:2e:54:ff:df:07:50:93:36:c8:14:74: 32:f5:f9:d6:dc:f1:2b:18:a9:77:3b:8e:16:24:a3:a7:03:78: ac:34:d0:9e:ff:b3:c0:ca:e6:f9:62:23:55:f2:b0:dc:79:dc: 7c:b1:b5:43:a1:81:cb:c9:39:42:5d:d5:7e:94:89:65:f0:65: e1:fc:c5:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDpzbw7LAk4Uv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OTM4YmIwNzgtZmZhMy00NGNjLTlmYjAtMGE5MzgxODhiMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83LGlJjG9xgp9yfdf4Xdi6TZMxOK4I7f1pNz Zb7F7B1W6XN2Bqs5Da2biRxhnSU4Qh+mBPliFXpOZX9ZyIRpgqWvO9nNnuQ8JUOK /g9hoLyJTy6FpjPH4EUeTzFZAnm/wKmR4K3BvekkbfaKsQJ2ExJO1RePqi0ke1rW 6QlOddZIDxfvszxx16iS7iW6fKdE1JFTQyLwahXJpOq60AOB5GpJ5Dbm3Jth5KTc joMwFVH7flSOBy1Dj8LXSIEG4hG06rjCwP7PFv+nUF4HcD4346XTzPI3m7K6Y9W2 liHZMw2cgOe+TNUgM7BPdwdL4kgSV+moCJnNcjelrHeRp99tJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuFQCWb9C7vsdjgs1yaJLDXHlRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvOGM3ZDNlNGItMGU4Ni0z NDhhLWI0ZmQtZjM5MGM2ZDU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUPy/xnVn2LUXRyaVUqKTQ8Zjso06ifKuyeGnL7eUI9PzxGYocAzwF0 YqF0wwQ7Z3h26yB6GaOnfehCHq1lkjOSL//c4I/VdZFB32SJB33lOFTuVRQkzDWO kqZ7my3186lOBnRlPbc9IyMDWFo1WJScqvf3Guejb6dHVQsT6e8eyZapxpJDvri0 uL3/2ORTU8PYZEQQaH2yJOHBZ6Kfb+pRYXi/ZskCcBoYP/TrWSjoBASNsyC7CN1+ tPouVP/fB1CTNsgUdDL1+dbc8SsYqXc7jhYko6cDeKw00J7/s8DK5vliI1XysNx5 3HyxtUOhgcvJOUJd1X6UiWXwZeH8xeE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:01 2025 by rpki-client