$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa File: 175b01ae-d440-3465-a430-3580015e4b3c.roa (raw, json) Hash identifier: z3fr8JrGp0MlS4Kc/QtUlRGGmj9+LbmLcIlHsoufv30= Subject key identifier: 09:28:17:6D:1C:12:A0:95:E1:71:C9:C8:85:8C:68:93:05:C7:AC:5E Certificate issuer: /CN=24570cf0-6be7-4f66-a550-b04cfd954538 Certificate serial: 010D0C9F4328584B03EA2806742C3336A6C17BE0 Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa Signing time: Fri 29 Aug 2025 08:06:55 +0000 ROA not before: Fri 29 Aug 2025 08:06:55 +0000 ROA not after: Thu 27 Nov 2025 09:06:55 +0000 asID: 64079 IP address blocks: 23.144.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:ea:28:06:74:2c:33:36:a6:c1:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538 Validity Not Before: Aug 29 08:06:55 2025 GMT Not After : Nov 27 09:06:55 2025 GMT Subject: CN=9f807477-5cdb-4bd6-bf92-ac4e5e18a228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:1a:d0:c4:df:82:1b:ef:8b:aa:5b:69:51: b2:50:74:fd:43:ca:c1:60:f7:2e:87:a6:3b:ed:1b: c0:ad:77:c3:b0:b3:d0:1d:6f:1d:65:02:3d:ab:c5: 07:9c:ac:20:c4:f2:a2:3d:e1:d1:29:7f:4b:75:c8: 50:bf:6a:5e:09:c8:a8:d9:89:47:a7:bd:63:67:17: 19:48:ef:46:0d:c5:55:dd:7d:e9:6a:1e:80:5f:00: 60:d7:df:a3:96:30:62:2c:b3:af:a9:e9:ab:6a:c1: 57:32:9b:cc:49:80:cb:ce:92:5a:97:81:4f:1e:85: de:3a:9a:e9:5a:dc:e7:30:18:51:ab:ae:98:68:12: 8c:e1:82:12:1f:4b:60:e1:8d:31:b9:5b:7b:2b:f8: f7:9c:51:99:b6:f6:31:79:6c:39:7a:a4:e2:1e:04: 53:bb:4c:dd:39:97:5a:4c:bc:1c:c9:cc:53:82:14: e7:f0:58:3d:37:30:dd:b9:96:c0:c7:3c:32:74:da: a3:b8:58:47:f0:45:59:8f:cc:a6:87:0d:0c:d1:eb: ad:d8:db:e8:c5:62:4f:e1:2c:73:c7:27:b9:97:d5: a4:25:63:8b:bd:8e:97:77:43:ea:93:43:55:2d:32: b0:48:5e:27:3a:5f:ba:36:81:a5:97:5a:00:3f:ed: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:17:6D:1C:12:A0:95:E1:71:C9:C8:85:8C:68:93:05:C7:AC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl X509v3 Authority Key Identifier: keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer sbgp-ipAddrBlock: critical IPv4: 23.144.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:94:5e:b5:72:ba:4f:17:c7:e6:8b:85:9b:4c:82:eb:8d:17: 14:77:65:30:dc:69:4f:45:a8:14:1d:b7:69:a5:6d:fc:7f:51: 85:37:93:6e:32:64:d6:44:97:0d:49:90:84:8b:b7:88:db:75: 3f:aa:b1:80:03:50:55:d0:46:4d:b5:49:be:a9:b2:e6:62:45: 7b:39:0e:de:16:af:8f:1b:66:3d:cd:62:f5:fe:b5:11:f2:90: 21:77:14:45:ec:3d:71:f2:53:0e:95:d3:13:6e:7b:e7:24:6f: 38:35:09:65:3d:9c:cb:88:dc:1d:2a:c1:72:ac:09:d1:57:ed: f9:b1:44:2a:87:15:0e:57:05:6f:fa:49:95:51:e7:31:a4:e4: 8c:2c:37:ee:5c:c0:b0:ed:de:49:e9:c2:3c:61:21:4e:bb:9b: 56:9c:1d:7a:6e:5c:ed:36:ac:9c:59:ed:d6:89:61:cf:55:33: 32:ef:cb:57:7f:34:c6:ba:b4:d0:b5:82:a4:4d:63:5f:0f:54: 9c:30:d3:46:5f:71:04:77:6e:a9:c9:c4:b9:ed:0e:e9:9a:6b: ba:39:b9:e6:24:d3:71:d3:09:db:ff:26:c0:e1:50:f9:1e:ca: 54:1e:bf:65:ab:db:6b:45:7f:e0:d3:81:36:01:20:fd:f2:bf: 33:c7:9f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsD6igGdCwzNqbBe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ1NzBjZjAtNmJlNy00ZjY2LWE1NTAtYjA0Y2ZkOTU0 NTM4MB4XDTI1MDgyOTA4MDY1NVoXDTI1MTEyNzA5MDY1NVowLzEtMCsGA1UEAxMk OWY4MDc0NzctNWNkYi00YmQ2LWJmOTItYWM0ZTVlMThhMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ka0MTfghvvi6pbaVGyUHT9Q8rBYPcuh6Y7 7RvArXfDsLPQHW8dZQI9q8UHnKwgxPKiPeHRKX9LdchQv2peCcio2YlHp71jZxcZ SO9GDcVV3X3pah6AXwBg19+jljBiLLOvqemrasFXMpvMSYDLzpJal4FPHoXeOprp WtznMBhRq66YaBKM4YISH0tg4Y0xuVt7K/j3nFGZtvYxeWw5eqTiHgRTu0zdOZda TLwcycxTghTn8Fg9NzDduZbAxzwydNqjuFhH8EVZj8ymhw0M0eut2NvoxWJP4Sxz xye5l9WkJWOLvY6Xd0Pqk0NVLTKwSF4nOl+6NoGll1oAP+0gxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkoF20cEqCV4XHJyIWMaJMFx6xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3 MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRjZmQ5NTQ1MzgvMTc1YjAxYWUtZDQ0MC0z NDY1LWE0MzAtMzU4MDAxNWU0YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjQ1NzBjZjAtNmJlNy00ZjY2LWE1 NTAtYjA0Y2ZkOTU0NTM4LzI0NTcwY2YwLTZiZTctNGY2Ni1hNTUwLWIwNGNmZDk1 NDUzOC5jcmwwHwYDVR0jBBgwFoAUCsDSE4WqCXWDl++2+1QKm3eN0v4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRj ZmQ5NTQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2UXrVyuk8Xx+aLhZtMguuNFxR3ZTDcaU9FqBQdt2mlbfx/UYU3k24y ZNZElw1JkISLt4jbdT+qsYADUFXQRk21Sb6psuZiRXs5Dt4Wr48bZj3NYvX+tRHy kCF3FEXsPXHyUw6V0xNue+ckbzg1CWU9nMuI3B0qwXKsCdFX7fmxRCqHFQ5XBW/6 SZVR5zGk5IwsN+5cwLDt3knpwjxhIU67m1acHXpuXO02rJxZ7daJYc9VMzLvy1d/ NMa6tNC1gqRNY18PVJww00ZfcQR3bqnJxLntDumaa7o5ueYk03HTCdv/JsDhUPke ylQev2Wr22tFf+DTgTYBIP3yvzPHn3U= -----END CERTIFICATE-----Generated at Mon Sep 8 16:15:44 2025 by rpki-client