$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa File: 0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa (raw, json) Hash identifier: dX3/owPO9kMf8KfEV90F2SQt4IJumtbYk2IWOAnzZR0= Subject key identifier: 05:47:D1:19:39:A1:C9:05:34:8D:73:58:34:32:D2:7D:33:11:50:39 Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F4328584B0B76AEC90769AFCD5EAC45D0 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 209104 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ae:c9:07:69:af:cd:5e:ac:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=8fc1d298-13c6-4c9f-97ad-b51aef507eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:43:9a:38:77:c9:ff:4b:40:6e:0d:dc:12: a2:ae:a2:16:96:91:44:f1:93:25:96:21:93:c6:6d: 09:7f:25:26:c9:b4:a6:99:11:5b:ac:40:ff:ce:eb: 89:e7:c8:41:de:c9:48:8d:e1:80:ea:47:13:b6:b2: 9e:72:05:1b:91:8b:52:05:72:b3:e4:d9:ce:43:db: bb:b8:3c:0a:0f:4f:67:28:b6:f0:11:9c:5b:49:e6: 11:b7:dd:42:24:f2:ca:fe:f6:27:43:d1:04:a3:c3: 32:eb:4c:42:1f:59:58:13:47:2b:93:89:f1:45:64: c9:51:0a:9b:de:3c:bb:b8:78:62:80:aa:8c:33:57: f2:f3:1c:06:9e:d2:26:03:df:08:c9:34:59:fe:75: 56:4e:91:b1:e0:07:fd:b2:eb:c2:79:13:e9:32:a8: 98:f4:dc:5b:3f:4f:02:39:f3:e8:0e:1d:11:31:43: fc:cd:32:0b:a7:cc:02:04:c2:e4:0f:40:37:2d:e4: 7d:13:a7:93:51:d3:cd:5c:73:6d:9b:c3:21:e5:ce: e8:ec:e1:8c:9d:38:73:5e:cf:80:06:2f:c7:ae:43: 6c:0c:65:24:7d:fc:8b:6b:15:86:c3:4f:84:86:f8: 0a:d7:ee:ec:54:6d:52:c6:1d:6d:9c:98:f0:08:ed: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:D1:19:39:A1:C9:05:34:8D:73:58:34:32:D2:7D:33:11:50:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:74:1a:b9:07:4b:2d:fe:b2:fd:f2:92:61:44:cb:12:95:b9: 4e:30:64:2f:f3:9f:d5:d2:9e:1a:b4:b9:23:4f:be:93:d4:7e: b1:5e:c1:77:e8:f3:e9:ae:94:91:0f:69:a3:f5:94:b7:a3:4b: f5:34:ec:80:5d:a1:31:a0:83:21:5a:ae:b7:2c:6e:d0:00:f1: 15:cf:b6:d8:93:39:ad:54:4c:c0:84:96:39:00:76:df:9c:b6: ff:50:d2:85:d9:96:d5:7a:30:71:02:d0:44:22:58:3a:8f:51: 5f:1e:93:c6:d3:d7:73:2f:f7:47:14:ae:32:e4:f3:cb:c8:4d: a4:18:a9:dd:84:c2:37:fa:d3:da:bc:1f:8b:48:48:04:3c:ad: 14:6b:f2:39:97:ac:e6:f7:13:ae:fd:ba:de:c0:93:d0:74:77: 80:4f:9e:db:69:e4:1b:33:9c:d2:0b:4d:51:51:51:8d:d7:b2: 25:60:cc:81:15:48:33:03:d9:34:4a:b4:75:3d:eb:5e:19:65: c3:74:e4:fe:91:ed:0e:4a:5c:f9:ea:37:a6:ef:75:5b:14:57: f5:43:a4:31:62:2f:40:69:bf:70:01:7a:ad:d5:35:1b:bc:62: b3:cb:15:b3:8b:d6:81:b1:02:6e:72:af:0a:12:5c:13:8a:04: af:91:d3:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq7JB2mvzV6sRdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OGZjMWQyOTgtMTNjNi00YzlmLTk3YWQtYjUxYWVmNTA3ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifhDmjh3yf9LQG4N3BKirqIWlpFE8ZMlliGT xm0JfyUmybSmmRFbrED/zuuJ58hB3slIjeGA6kcTtrKecgUbkYtSBXKz5NnOQ9u7 uDwKD09nKLbwEZxbSeYRt91CJPLK/vYnQ9EEo8My60xCH1lYE0crk4nxRWTJUQqb 3jy7uHhigKqMM1fy8xwGntImA98IyTRZ/nVWTpGx4Af9suvCeRPpMqiY9NxbP08C OfPoDh0RMUP8zTILp8wCBMLkD0A3LeR9E6eTUdPNXHNtm8Mh5c7o7OGMnThzXs+A Bi/HrkNsDGUkffyLaxWGw0+EhvgK1+7sVG1Sxh1tnJjwCO1diQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVH0Rk5ockFNI1zWDQy0n0zEVA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvMGM2NTZhZDgtMGJkMy0z ZjJkLWE0ODgtMDViNmYxZTFkOGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt0GrkHSy3+sv3ykmFEyxKVuU4wZC/zn9XSnhq0uSNPvpPUfrFewXfo 8+mulJEPaaP1lLejS/U07IBdoTGggyFarrcsbtAA8RXPttiTOa1UTMCEljkAdt+c tv9Q0oXZltV6MHEC0EQiWDqPUV8ek8bT13Mv90cUrjLk88vITaQYqd2Ewjf609q8 H4tISAQ8rRRr8jmXrOb3E679ut7Ak9B0d4BPnttp5BsznNILTVFRUY3XsiVgzIEV SDMD2TRKtHU9614ZZcN05P6R7Q5KXPnqN6bvdVsUV/VDpDFiL0Bpv3ABeq3VNRu8 YrPLFbOL1oGxAm5yrwoSXBOKBK+R0xM= -----END CERTIFICATE-----Generated at Wed Sep 10 14:57:20 2025 by rpki-client