$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa File: c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa (raw, json) Hash identifier: ak2GtLG/ZAUO+q8bpQjcDqzI6tcIYfmMFTy44aDfl2w= Subject key identifier: 66:97:C5:29:7D:3F:A6:D2:56:B2:0B:E1:B8:30:45:D1:6C:97:20:86 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584B328C3BA329B330BC7F33CCC0 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 400304 IP address blocks: 23.147.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3b:a3:29:b3:30:bc:7f:33:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=fe5a84f0-3c3a-45b7-8dba-4049b0538573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:37:77:58:ee:a9:23:80:42:c3:4b:bf:1f:60: 53:7e:66:d7:dd:c0:22:aa:70:d8:f1:12:05:bc:a3: b9:0f:92:9b:96:55:18:ee:40:f3:6c:0c:33:a4:17: aa:89:e2:d6:ed:b7:3a:db:8f:e4:b4:fd:4d:07:5a: 7a:4c:f2:df:67:4b:0e:88:69:14:e8:2f:19:cb:8a: f1:00:14:36:e0:18:0a:1e:4b:1e:cc:18:af:d6:c1: 35:53:06:4e:00:39:82:f6:db:35:0d:ef:d5:5e:99: 13:07:ec:9e:cc:cd:2e:8b:dd:54:04:68:77:47:f5: 0b:d2:5f:03:ec:2f:46:32:44:01:50:a8:88:09:0e: 2b:33:8d:40:84:0c:fb:e6:4e:85:e3:e1:06:3d:93: c6:d6:3b:bc:b3:38:63:40:df:60:be:a2:3d:b6:7d: 00:83:fc:10:d5:17:0c:03:a1:18:5a:f6:68:6d:50: bc:2b:6c:9a:19:c3:fc:2b:01:b3:91:80:87:76:e1: d8:3f:7b:4a:d5:89:53:36:62:99:45:c0:1b:82:8c: 1c:11:c2:cc:ef:d7:3c:5a:10:ef:62:43:65:c6:5c: 5f:c9:1a:43:98:4b:d8:47:fc:df:8b:70:3c:b7:d6: a0:44:b9:72:b5:22:62:36:b6:19:d4:f3:86:86:03: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:C5:29:7D:3F:A6:D2:56:B2:0B:E1:B8:30:45:D1:6C:97:20:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:5c:e2:23:8d:37:92:29:28:d4:6c:c7:8f:ec:58:d1:de: 8d:59:8c:c5:ee:7c:35:99:da:93:12:7a:9c:2d:90:d8:c5:ed: e6:5b:65:6a:1e:a3:18:88:33:f1:e3:42:18:9f:06:c8:29:40: 88:26:37:1f:e0:88:5b:bd:e9:ca:c8:3c:89:29:0c:81:bf:f9: 0f:14:8c:56:89:ad:ac:a2:f0:9e:63:c3:ab:72:6a:3b:18:b6: d2:4e:eb:7d:e1:58:95:93:c2:5e:b1:f9:7c:e4:f8:0a:df:93: 68:f7:96:57:b6:70:3e:2e:af:b6:2a:31:4b:a6:6b:ff:3d:fe: f6:29:ee:17:e7:c0:9a:29:28:63:4b:e5:37:40:d6:4f:c2:81: 32:11:bf:e0:60:cd:5d:6b:e9:43:07:68:97:27:8f:ee:86:f2: 8c:1d:d8:30:c2:f9:8a:8d:97:5d:18:d8:03:de:67:10:4e:0d: 7c:c1:01:19:00:4a:06:58:17:8d:00:0d:5f:5e:4b:1c:5d:61: bd:41:d8:27:0b:6a:bc:6a:4d:66:40:6c:65:2e:21:3d:26:14: a3:63:7e:48:72:3b:82:82:6a:0e:0a:50:9e:8f:f5:f7:3c:d7: dc:e7:c9:ea:ea:17:5b:0e:7d:5a:f7:a7:1b:a3:3e:82:3f:aa: 28:fd:0b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDujKbMwvH8zzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmU1YTg0ZjAtM2MzYS00NWI3LThkYmEtNDA0OWIwNTM4NTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dd3WO6pI4BCw0u/H2BTfmbX3cAiqnDY8RIF vKO5D5KbllUY7kDzbAwzpBeqieLW7bc624/ktP1NB1p6TPLfZ0sOiGkU6C8Zy4rx ABQ24BgKHksezBiv1sE1UwZOADmC9ts1De/VXpkTB+yezM0ui91UBGh3R/UL0l8D 7C9GMkQBUKiICQ4rM41AhAz75k6F4+EGPZPG1ju8szhjQN9gvqI9tn0Ag/wQ1RcM A6EYWvZobVC8K2yaGcP8KwGzkYCHduHYP3tK1YlTNmKZRcAbgowcEcLM79c8WhDv YkNlxlxfyRpDmEvYR/zfi3A8t9agRLlytSJiNrYZ1POGhgOQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaXxSl9P6bSVrIL4bgwRdFslyCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvYzFmZmVkNDMtOGIzYS0z OWUyLWE1MzctZmUzMTQzMjBmNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx3XOIjjTeSKSjUbMeP7FjR3o1ZjMXufDWZ2pMSepwtkNjF7eZbZWoe oxiIM/HjQhifBsgpQIgmNx/giFu96crIPIkpDIG/+Q8UjFaJrayi8J5jw6tyajsY ttJO633hWJWTwl6x+Xzk+Arfk2j3lle2cD4ur7YqMUuma/89/vYp7hfnwJopKGNL 5TdA1k/CgTIRv+BgzV1r6UMHaJcnj+6G8owd2DDC+YqNl10Y2APeZxBODXzBARkA SgZYF40ADV9eSxxdYb1B2CcLarxqTWZAbGUuIT0mFKNjfkhyO4KCag4KUJ6P9fc8 19znyerqF1sOfVr3pxujPoI/qij9C60= -----END CERTIFICATE-----Generated at Wed Oct 15 22:07:14 2025 by rpki-client