$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa File: b8277726-63a8-3672-9533-c44e9d028822.roa (raw, json) Hash identifier: aqnP3g0pTzRVKMzVx6h5Ax6bwD4JE5ylQ9KCOmC4Ctg= Subject key identifier: 4F:B6:A6:3D:E1:45:EB:66:E2:0B:3F:CE:79:06:9F:94:FE:A4:39:D3 Certificate issuer: /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2 Certificate serial: 010D0C9F4328584B0B76A3F321A281B8A594BA80 Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 988 IP address blocks: 23.138.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a3:f3:21:a2:81:b8:a5:94:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ec4d0ae4-43b4-4d20-ac8f-d187a7060898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:32:fc:7f:62:aa:66:7b:42:ad:17:d0:d0: c9:b0:8b:a0:2e:9f:8d:10:cb:aa:cc:ee:9a:c9:67: 64:26:e7:5c:d8:d6:43:18:69:5b:43:72:d1:74:4a: 84:a8:b1:ce:8b:25:0c:86:dd:e1:fe:3e:43:b0:27: db:fe:f9:d7:27:e8:a4:91:22:1f:46:1f:0a:a6:a5: 6a:f9:61:26:6a:d0:25:24:91:cd:7c:ba:28:2d:71: 26:f4:4e:08:2d:7a:10:1d:e6:ca:11:6a:3b:de:15: aa:93:18:05:2c:98:ea:c2:37:08:e1:81:6c:9c:76: 34:de:09:8c:2b:c6:3e:51:9b:7e:56:89:fb:59:96: da:de:de:39:c6:1c:94:eb:2e:33:5b:da:a8:a8:14: 04:b7:0a:3a:0e:1a:87:6f:48:f6:de:b6:ff:03:3f: c0:2f:3c:f6:ef:a9:db:51:02:4b:67:9b:b5:14:a9: 8c:cf:f4:9d:b2:2f:4b:36:aa:cc:10:6f:1f:6d:5d: 08:5a:92:dd:22:4b:92:4d:51:bb:bd:f3:82:74:dc: cb:73:3a:af:42:e9:83:7c:5f:f0:7d:72:89:ed:fe: 90:36:f9:68:14:65:35:a6:70:6f:22:25:9f:87:27: e4:fa:84:d7:ee:f4:85:93:c5:e6:13:5a:09:c4:a8: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:A6:3D:E1:45:EB:66:E2:0B:3F:CE:79:06:9F:94:FE:A4:39:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl X509v3 Authority Key Identifier: keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer sbgp-ipAddrBlock: critical IPv4: 23.138.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:a7:b6:10:a7:e5:0f:0d:0b:ed:6e:6b:18:1b:1a:2d:6a:ec: 80:0f:c3:f5:54:2a:9e:87:f3:04:83:b0:7f:47:19:07:de:5b: 2d:d5:3e:8a:9f:01:5d:1b:3e:69:15:29:f9:bc:ec:04:3f:20: 3f:c0:3d:3a:29:fe:bf:5d:b6:3a:4f:23:c3:c4:c7:b6:86:79: fc:7f:f6:0d:06:1a:da:a0:cf:14:c0:2d:ce:33:60:bb:f4:e3: 49:dd:55:75:d8:3f:4d:52:a1:13:06:08:f5:e6:a9:45:fb:cb: e7:8e:86:07:a5:42:39:1e:9b:ce:9e:8f:46:f8:45:50:5a:b0: fd:1c:55:1d:8c:22:57:11:31:03:2b:04:20:62:05:15:96:10: af:7b:85:1c:bc:92:1e:7a:94:80:0c:db:d5:de:b1:a0:f9:4f: 51:b3:ed:d1:ad:50:7b:c4:b5:c4:b1:72:30:08:27:76:5e:b0: 54:84:27:56:2e:b3:9b:2e:25:95:5f:af:03:39:37:c4:fe:89: ed:32:fd:50:d8:85:e2:98:cb:d7:70:36:94:b5:a6:ca:c2:e8: 95:4d:99:9e:c5:1f:4c:08:7c:30:f3:5e:49:17:ff:45:d2:4a: 0a:21:1b:d4:c1:cd:0d:9e:3d:8d:50:68:4c:73:65:81:0f:9f: ea:f1:9f:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqPzIaKBuKWUuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNWY2MTgtNWI2NC00ODA0LTg4ZWYtZTEyNWRkOTBk N2UyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWM0ZDBhZTQtNDNiNC00ZDIwLWFjOGYtZDE4N2E3MDYwODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqUy/H9iqmZ7Qq0X0NDJsIugLp+NEMuqzO6a yWdkJudc2NZDGGlbQ3LRdEqEqLHOiyUMht3h/j5DsCfb/vnXJ+ikkSIfRh8KpqVq +WEmatAlJJHNfLooLXEm9E4ILXoQHebKEWo73hWqkxgFLJjqwjcI4YFsnHY03gmM K8Y+UZt+Von7WZba3t45xhyU6y4zW9qoqBQEtwo6DhqHb0j23rb/Az/ALzz276nb UQJLZ5u1FKmMz/Sdsi9LNqrMEG8fbV0IWpLdIkuSTVG7vfOCdNzLczqvQumDfF/w fXKJ7f6QNvloFGU1pnBvIiWfhyfk+oTX7vSFk8XmE1oJxKj3DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+2pj3hRetm4gs/znkGn5T+pDnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1 ZjYxOC01YjY0LTQ4MDQtODhlZi1lMTI1ZGQ5MGQ3ZTIvYjgyNzc3MjYtNjNhOC0z NjcyLTk1MzMtYzQ0ZTlkMDI4ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJkNWY2MTgtNWI2NC00ODA0LTg4 ZWYtZTEyNWRkOTBkN2UyLzIyZDVmNjE4LTViNjQtNDgwNC04OGVmLWUxMjVkZDkw ZDdlMi5jcmwwHwYDVR0jBBgwFoAUUfO0Xatzo37smkd7BXQFtzlt6SwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1ZjYxOC01YjY0LTQ4MDQtODhlZi1lMTI1 ZGQ5MGQ3ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN+nthCn5Q8NC+1uaxgbGi1q7IAPw/VUKp6H8wSDsH9HGQfeWy3VPoqf AV0bPmkVKfm87AQ/ID/APTop/r9dtjpPI8PEx7aGefx/9g0GGtqgzxTALc4zYLv0 40ndVXXYP01SoRMGCPXmqUX7y+eOhgelQjkem86ej0b4RVBasP0cVR2MIlcRMQMr BCBiBRWWEK97hRy8kh56lIAM29XesaD5T1Gz7dGtUHvEtcSxcjAIJ3ZesFSEJ1Yu s5suJZVfrwM5N8T+ie0y/VDYheKYy9dwNpS1psrC6JVNmZ7FH0wIfDDzXkkX/0XS SgohG9TBzQ2ePY1QaExzZYEPn+rxn4U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:17 2025 by rpki-client