$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa File: c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa (raw, json) Hash identifier: qdSCjuwClTbGAB4pG9o4Jv3Fi7yBDHd4f3g5UwoKm3Q= Subject key identifier: F1:10:C4:B9:D0:D8:A2:94:27:B0:CE:F6:BC:60:AF:37:56:B2:DF:46 Certificate issuer: /CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a Certificate serial: 010D0C9F4328584B03EBF7988189D1A84B7F1C90 Authority key identifier: 02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa Signing time: Fri 29 Aug 2025 08:10:34 +0000 ROA not before: Fri 29 Aug 2025 08:10:34 +0000 ROA not after: Thu 27 Nov 2025 09:10:34 +0000 asID: 64079 IP address blocks: 23.144.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:eb:f7:98:81:89:d1:a8:4b:7f:1c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a Validity Not Before: Aug 29 08:10:34 2025 GMT Not After : Nov 27 09:10:34 2025 GMT Subject: CN=411353f7-4c2a-468e-9530-5262cfed21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:aa:2c:b5:64:01:c4:ef:db:99:95:f6:1c: 8d:db:43:96:c5:bc:f4:4c:46:3c:e9:8e:6d:fd:6f: 09:8a:49:94:70:98:3f:81:cf:90:69:b9:bc:93:01: ba:82:6f:fb:70:07:89:20:d8:ad:a0:01:fd:84:78: 13:a4:e9:6f:03:4e:9e:78:3c:42:2a:bd:58:46:41: a8:f6:29:67:93:2a:67:12:6d:90:ba:9b:e8:69:49: f6:c5:ca:80:d4:e6:0a:2f:a6:cb:c4:76:04:da:b7: 16:25:12:78:57:79:23:a9:fc:e7:55:87:85:22:80: 28:88:82:44:d7:09:6d:ff:ba:9f:90:cb:1c:c7:08: eb:90:fb:ed:c2:7e:2b:32:f7:30:9a:63:6e:b1:4f: ed:da:dc:ed:a2:86:13:4a:89:cb:9b:b5:b4:c5:6b: bb:e8:85:b7:94:b8:e8:41:b3:d6:52:26:34:ff:ce: c0:35:1f:19:5b:5b:7d:30:dd:62:b4:d5:0e:67:4b: 87:0a:73:f9:c4:0e:2b:e9:65:0e:b8:38:b1:e3:64: f2:1e:57:55:b1:bc:64:79:92:d7:44:a0:14:08:88: bf:61:78:1c:0a:84:1b:51:9a:b7:1f:ae:40:97:d4: 5b:ef:a2:74:4c:71:78:41:a3:19:f8:da:6e:29:3b: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:10:C4:B9:D0:D8:A2:94:27:B0:CE:F6:BC:60:AF:37:56:B2:DF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl X509v3 Authority Key Identifier: keyid:02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer sbgp-ipAddrBlock: critical IPv4: 23.144.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f3:57:64:fd:6b:3c:74:e1:fc:95:60:2f:77:14:0b:71:e1: 42:f3:5c:9e:fd:32:60:01:43:9a:a3:df:21:aa:f8:84:22:c8: 47:56:ad:a5:4a:69:90:74:ad:27:71:59:42:18:fc:22:b2:a3: fa:7b:a0:ef:af:e2:3b:21:a5:d7:2c:57:db:a2:01:f5:32:d7: 2a:73:30:d5:d5:22:5b:22:ab:7c:e4:30:cd:ca:e7:3a:6d:60: 82:ae:76:d7:60:db:71:a3:16:89:68:dd:4d:cf:dc:37:5b:23: 8f:c1:34:b9:68:dc:b1:85:59:0c:6d:1d:19:30:9a:38:c5:09: 9b:e6:a6:5f:a8:d9:ae:bd:31:00:c8:f5:71:ab:3e:1b:bc:87: 8f:41:44:9c:ce:d4:14:8c:0a:c1:26:a8:03:89:ef:18:d7:10: 51:ae:ae:a0:4d:ac:de:4f:2a:d1:60:58:d4:b6:3a:7d:93:d9: 6f:f2:41:8c:c9:86:69:5c:c1:a1:cc:88:a8:38:db:80:a9:1d: 38:80:c3:b7:83:55:ea:2c:cc:ad:54:69:16:dd:5e:da:5c:4a: 98:a2:d4:fd:22:8d:b9:1f:36:44:8e:26:c4:32:65:a3:7b:8c: 5f:cb:7d:f4:60:a5:89:76:d6:ec:95:d1:af:1f:f7:86:f9:cd: 89:e3:85:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsD6/eYgYnRqEt/HJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgxZjg5ZWMtODczOS00YjlhLTliMzgtN2U0NTIzMjcx ZDJhMB4XDTI1MDgyOTA4MTAzNFoXDTI1MTEyNzA5MTAzNFowLzEtMCsGA1UEAxMk NDExMzUzZjctNGMyYS00NjhlLTk1MzAtNTI2MmNmZWQyMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsGqLLVkAcTv25mV9hyN20OWxbz0TEY86Y5t /W8JikmUcJg/gc+Qabm8kwG6gm/7cAeJINitoAH9hHgTpOlvA06eeDxCKr1YRkGo 9ilnkypnEm2QupvoaUn2xcqA1OYKL6bLxHYE2rcWJRJ4V3kjqfznVYeFIoAoiIJE 1wlt/7qfkMscxwjrkPvtwn4rMvcwmmNusU/t2tztooYTSonLm7W0xWu76IW3lLjo QbPWUiY0/87ANR8ZW1t9MN1itNUOZ0uHCnP5xA4r6WUOuDix42TyHldVsbxkeZLX RKAUCIi/YXgcCoQbUZq3H65Al9Rb76J0THF4QaMZ+NpuKTt6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEQxLnQ2KKUJ7DO9rxgrzdWst9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODFm ODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1MjMyNzFkMmEvYzM5N2NkNzgtM2VkNC0z Yzc2LWI1MzMtZjVjYTZiYzI0YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgxZjg5ZWMtODczOS00YjlhLTli MzgtN2U0NTIzMjcxZDJhL2Q4MWY4OWVjLTg3MzktNGI5YS05YjM4LTdlNDUyMzI3 MWQyYS5jcmwwHwYDVR0jBBgwFoAUAiu16ALDLe9X91hrz4PUxDYVgVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODFmODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1 MjMyNzFkMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3zV2T9azx04fyVYC93FAtx4ULzXJ79MmABQ5qj3yGq+IQiyEdWraVK aZB0rSdxWUIY/CKyo/p7oO+v4jshpdcsV9uiAfUy1ypzMNXVIlsiq3zkMM3K5zpt YIKudtdg23GjFolo3U3P3DdbI4/BNLlo3LGFWQxtHRkwmjjFCZvmpl+o2a69MQDI 9XGrPhu8h49BRJzO1BSMCsEmqAOJ7xjXEFGurqBNrN5PKtFgWNS2On2T2W/yQYzJ hmlcwaHMiKg424CpHTiAw7eDVeoszK1UaRbdXtpcSpii1P0ijbkfNkSOJsQyZaN7 jF/LffRgpYl21uyV0a8f94b5zYnjhUo= -----END CERTIFICATE-----Generated at Mon Sep 8 16:08:47 2025 by rpki-client