$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa File: 2973c52c-5659-3596-8301-dc3e576e7381.roa (raw, json) Hash identifier: +6AEMLrT6qXbjMTb2LAHRi1Wm7QIP51V+KtTOe6pkE4= Subject key identifier: 88:64:DE:9D:22:4B:AA:A3:ED:5F:8C:C7:BE:18:9D:F5:B3:D0:D7:2D Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584B047C09F28188F743CEE53780 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 216435 IP address blocks: 23.157.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:09:f2:81:88:f7:43:ce:e5:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6943f198-d150-41d2-afa3-8251e8953bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:ca:ce:ed:bc:91:ce:bf:62:89:53:88:d7: 47:44:61:ea:fa:34:dd:71:89:00:13:bc:d6:3e:cd: 9e:d6:31:5c:6a:e7:a9:07:51:f3:55:e2:68:ac:81: 2c:3d:0e:ba:13:da:e4:fb:42:43:6c:cd:37:61:6d: ce:f8:78:a3:f0:07:17:39:e1:91:ed:77:98:1c:0f: 89:f4:1c:8c:e2:68:fa:b3:1f:1d:20:f0:97:17:1f: d5:a8:d0:b4:8c:cb:57:ff:48:4f:06:bc:8c:ed:62: 11:4c:19:4a:86:ad:3c:0b:18:0c:7e:51:dc:d4:76: 53:c7:2e:5a:6c:5f:86:9e:36:f7:75:34:43:75:f6: 41:0d:d0:0b:7c:f6:96:33:03:d5:c5:2d:ec:32:2a: 74:72:39:98:23:ad:7b:7d:e9:72:9a:6e:22:6f:2f: cc:b0:27:8d:33:cf:6a:f6:14:42:16:52:fd:69:31: 0e:ca:19:ac:51:22:4e:5b:21:9e:87:5b:b9:a8:94: bf:2d:be:ff:73:56:1f:28:50:f9:8f:44:d8:f7:52: 23:e7:25:63:b3:ad:79:a3:14:65:ed:a1:47:5a:85: 05:e1:c8:09:47:8d:97:55:b8:9d:2f:fd:17:68:3a: a5:b7:a7:65:b1:11:cd:a0:d9:a2:31:f3:87:42:d0: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:DE:9D:22:4B:AA:A3:ED:5F:8C:C7:BE:18:9D:F5:B3:D0:D7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f6:58:96:9b:05:37:05:b1:30:c3:24:64:79:26:73:06:b1: 09:10:fa:26:90:7f:7f:8a:18:8c:65:b2:96:ae:c8:55:d7:6a: 6b:af:5a:1d:db:92:d1:8e:71:28:23:ca:39:2c:2c:6e:d5:2d: 38:42:09:7d:a7:e2:36:7e:5c:12:49:2f:bd:6e:02:f9:13:1c: 86:18:25:0d:ce:b8:0d:88:de:b5:74:2e:50:21:8b:1c:dc:14: 2b:d6:51:d3:e1:d3:63:2d:09:d9:a5:29:fe:ee:4e:35:55:df: 35:01:53:63:f3:c0:11:98:a4:0c:e0:19:95:db:11:df:6b:9f: ed:80:75:27:79:be:e6:ff:c2:70:ce:17:a5:53:4f:28:d3:82: 63:19:cf:1c:c6:cf:39:8a:e0:a7:9b:c5:43:20:22:5c:6e:60: 18:63:aa:2e:d0:0b:02:90:96:26:e4:e8:18:b0:54:5a:7a:e4: 76:d2:5c:07:a4:0f:40:81:04:a2:37:10:da:36:68:e2:0c:f2: 13:ab:46:33:fc:a5:89:fa:b3:c1:2a:15:ab:8f:e8:d3:06:5f: a0:12:19:99:56:21:81:7a:0c:e6:7c:74:e5:b1:c9:7c:bd:e0: 13:5f:91:ee:90:9d:15:8c:73:9c:7b:2f:52:f0:0a:9e:91:59: 5b:9f:dc:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAnygYj3Q87lN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk Njk0M2YxOTgtZDE1MC00MWQyLWFmYTMtODI1MWU4OTUzYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO3Kzu28kc6/YolTiNdHRGHq+jTdcYkAE7zW Ps2e1jFcauepB1HzVeJorIEsPQ66E9rk+0JDbM03YW3O+Hij8AcXOeGR7XeYHA+J 9ByM4mj6sx8dIPCXFx/VqNC0jMtX/0hPBryM7WIRTBlKhq08CxgMflHc1HZTxy5a bF+Gnjb3dTRDdfZBDdALfPaWMwPVxS3sMip0cjmYI617felymm4iby/MsCeNM89q 9hRCFlL9aTEOyhmsUSJOWyGeh1u5qJS/Lb7/c1YfKFD5j0TY91Ij5yVjs615oxRl 7aFHWoUF4cgJR42XVbidL/0XaDqlt6dlsRHNoNmiMfOHQtDvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhk3p0iS6qj7V+Mx74YnfWz0NctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjk3M2M1MmMtNTY1OS0z NTk2LTgzMDEtZGMzZTU3NmU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF525MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf2WJabBTcFsTDDJGR5JnMGsQkQ+iaQf3+KGIxlspauyFXXamuvWh3b ktGOcSgjyjksLG7VLThCCX2n4jZ+XBJJL71uAvkTHIYYJQ3OuA2I3rV0LlAhixzc FCvWUdPh02MtCdmlKf7uTjVV3zUBU2PzwBGYpAzgGZXbEd9rn+2AdSd5vub/wnDO F6VTTyjTgmMZzxzGzzmK4KebxUMgIlxuYBhjqi7QCwKQlibk6BiwVFp65HbSXAek D0CBBKI3ENo2aOIM8hOrRjP8pYn6s8EqFauP6NMGX6ASGZlWIYF6DOZ8dOWxyXy9 4BNfke6QnRWMc5x7L1LwCp6RWVuf3I0= -----END CERTIFICATE-----Generated at Tue Sep 9 08:19:50 2025 by rpki-client