$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa File: d5ccba6c-e48a-34dc-9989-d340928eb37f.roa (raw, json) Hash identifier: 2LZK7FNI8RzDITw9m8pUb1KT/R8SvafDwe23qX2gg34= Subject key identifier: ED:7D:81:66:F3:D2:FD:BA:FB:11:1E:25:AB:06:A4:58:81:B8:61:19 Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Certificate serial: 010D0C9F4328584B153C1D4D11989AF3FC8D3A80 Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 400803 IP address blocks: 23.141.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1d:4d:11:98:9a:f3:fc:8d:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=ce866b46-c385-4545-92d3-9d7e56d98582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:b2:b2:0a:0f:09:5a:c5:d4:3c:d5:f2:3e: 14:1a:09:af:c9:49:24:88:e8:e7:c8:a0:47:83:06: 5d:35:0f:61:f4:a2:fd:97:cd:ea:5b:a0:02:4a:00: df:11:46:85:df:67:c1:f2:63:37:a4:8f:08:2d:8e: ff:ef:87:45:77:1f:0d:3c:f0:1e:3f:73:38:5c:28: b1:d4:d2:41:5c:37:a9:7f:cc:75:2c:14:13:c8:8b: 2b:f6:a3:2a:93:c9:49:37:1f:bf:ce:ba:96:07:53: 40:71:32:78:15:61:c2:17:ca:30:2a:3e:9f:b1:a3: b7:ce:91:41:64:82:10:b8:33:24:5c:d1:01:3e:32: 2e:36:e2:46:72:ee:0f:da:fd:a1:09:cf:75:6a:4b: 52:00:1a:eb:3f:34:8b:39:55:5c:d1:84:2a:b4:8e: eb:14:1a:a2:4c:34:a3:42:b5:39:20:62:1b:9b:a9: 41:87:54:1a:8e:df:4b:34:02:fc:6a:b0:f2:f8:74: 57:9d:1b:a7:b7:78:06:23:29:dd:ea:4f:51:89:09: 02:6b:5d:21:4a:42:16:33:63:d2:b4:ef:0b:f5:4e: d0:53:57:ee:88:ae:b5:d6:44:20:32:a1:cd:e1:71: 20:48:48:29:f2:4d:d6:92:30:8b:54:62:d0:44:53: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:81:66:F3:D2:FD:BA:FB:11:1E:25:AB:06:A4:58:81:B8:61:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl X509v3 Authority Key Identifier: keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer sbgp-ipAddrBlock: critical IPv4: 23.141.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:19:97:0b:c1:7e:f9:e4:76:d5:e0:1f:67:f0:69:9f:e6:f2: c1:94:7a:0b:a6:e9:ad:0a:df:b1:33:74:ab:53:72:e2:b3:d9: 63:78:73:d7:3a:0a:33:5a:c3:25:9e:b0:e1:c8:98:40:e7:b5: 37:1d:a9:f9:00:6d:7a:e2:07:94:16:2f:f9:a3:5b:62:0e:c0: 0d:d6:15:99:e3:d9:87:75:ea:0b:7a:5e:c2:04:a7:a4:89:6d: 6f:94:a4:d7:04:6e:9c:5e:d3:e7:67:0b:d4:9c:f4:e0:cb:db: 82:02:92:32:f4:ad:2d:7a:d9:fd:fe:5b:cb:39:ce:c7:0f:74: 0e:25:1d:96:37:9c:11:ec:9b:12:58:40:ee:66:a9:02:28:62: 6e:57:2e:23:52:c9:a7:9b:dc:33:8b:ee:77:c5:62:9b:45:f6: 77:c2:f9:58:7a:bf:fd:f0:7a:6e:00:ac:77:4a:e2:80:05:6c: 55:51:84:3f:16:91:43:d3:59:c7:27:85:d8:7b:00:49:cd:d6: 3b:59:65:06:10:14:b1:50:34:4a:75:1a:4a:68:c5:12:b2:19: c2:74:c9:58:dc:5a:79:15:eb:0c:c2:5d:50:c6:07:07:d2:c3: e5:b4:f0:61:65:60:34:f6:39:20:68:a4:e9:c5:4b:6b:07:ea: 5c:64:70:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPB1NEZia8/yNOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNkMjBlZmQtNzI5Yy00NmIyLWIyNjgtNTEwZDFmOWY3 ZGQzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2U4NjZiNDYtYzM4NS00NTQ1LTkyZDMtOWQ3ZTU2ZDk4NTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFOysgoPCVrF1DzV8j4UGgmvyUkkiOjnyKBH gwZdNQ9h9KL9l83qW6ACSgDfEUaF32fB8mM3pI8ILY7/74dFdx8NPPAeP3M4XCix 1NJBXDepf8x1LBQTyIsr9qMqk8lJNx+/zrqWB1NAcTJ4FWHCF8owKj6fsaO3zpFB ZIIQuDMkXNEBPjIuNuJGcu4P2v2hCc91aktSABrrPzSLOVVc0YQqtI7rFBqiTDSj QrU5IGIbm6lBh1Qajt9LNAL8arDy+HRXnRunt3gGIynd6k9RiQkCa10hSkIWM2PS tO8L9U7QU1fuiK611kQgMqHN4XEgSEgp8k3WkjCLVGLQRFN+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO19gWbz0v26+xEeJasGpFiBuGEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Qy MGVmZC03MjljLTQ2YjItYjI2OC01MTBkMWY5ZjdkZDMvZDVjY2JhNmMtZTQ4YS0z NGRjLTk5ODktZDM0MDkyOGViMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNkMjBlZmQtNzI5Yy00NmIyLWIy NjgtNTEwZDFmOWY3ZGQzLzAzZDIwZWZkLTcyOWMtNDZiMi1iMjY4LTUxMGQxZjlm N2RkMy5jcmwwHwYDVR0jBBgwFoAU7igQcfxLoYlblvWnORaycggT39QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2QyMGVmZC03MjljLTQ2YjItYjI2OC01MTBk MWY5ZjdkZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF414MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgZlwvBfvnkdtXgH2fwaZ/m8sGUegum6a0K37EzdKtTcuKz2WN4c9c6 CjNawyWesOHImEDntTcdqfkAbXriB5QWL/mjW2IOwA3WFZnj2Yd16gt6XsIEp6SJ bW+UpNcEbpxe0+dnC9Sc9ODL24ICkjL0rS162f3+W8s5zscPdA4lHZY3nBHsmxJY QO5mqQIoYm5XLiNSyaeb3DOL7nfFYptF9nfC+Vh6v/3wem4ArHdK4oAFbFVRhD8W kUPTWccnhdh7AEnN1jtZZQYQFLFQNEp1GkpoxRKyGcJ0yVjcWnkV6wzCXVDGBwfS w+W08GFlYDT2OSBopOnFS2sH6lxkcKE= -----END CERTIFICATE-----Generated at Tue Sep 16 02:53:17 2025 by rpki-client