$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa File: 467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa (raw, json) Hash identifier: G5t7S5MUeU3dFWlCQ/l1sCXIoxFda16olvVZWLv5bR4= Subject key identifier: 1E:22:0D:DF:72:7D:57:66:BF:DA:FF:65:E0:84:D6:7E:46:89:15:12 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B38219BD10BE4B99853449380 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 36007 IP address blocks: 43.231.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9b:d1:0b:e4:b9:98:53:44:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=fc55393a-339a-4ad8-b4d0-a81134ef1d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:54:cc:6f:6d:b9:95:55:b6:8a:af:f7:6c: 0e:29:c6:c2:07:46:64:9a:db:c3:da:5b:16:55:2a: ef:10:c6:2e:cc:0a:69:95:2e:cf:b5:bf:f2:30:3c: 38:0f:89:27:c6:49:48:8e:cf:d0:cc:52:f0:bf:1e: 48:2e:4a:e6:56:87:5c:bc:13:b7:44:80:b3:13:ec: 6e:cc:94:5b:cf:ec:22:45:b4:49:e2:4b:93:11:15: 10:e2:38:96:11:52:a8:da:9e:f7:de:1c:0a:a2:b0: d3:14:2e:c1:1a:62:6c:09:02:33:00:8d:74:e9:da: b9:43:36:b6:24:fb:cc:d6:17:07:3e:51:92:aa:e8: 7f:fb:0b:9a:3f:7e:56:50:9c:b0:c8:68:e5:b7:20: 7d:f1:f5:45:5c:1d:7f:7e:19:73:fe:de:73:88:cf: 66:ee:35:65:58:4d:6f:7d:b0:d1:37:82:27:72:c6: aa:46:c5:1d:fb:d2:f8:42:61:c4:da:77:fd:f5:d7: d4:3c:d6:e5:be:cb:64:15:c6:32:44:b6:40:1a:61: 01:34:0c:7b:8b:14:9b:c2:66:0f:b2:1c:6c:06:81: 2b:d3:ba:c0:0a:3d:84:fe:e1:a8:22:ef:cb:38:c9: 31:82:15:16:48:bb:26:d6:52:25:47:d3:74:d2:6d: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:0D:DF:72:7D:57:66:BF:DA:FF:65:E0:84:D6:7E:46:89:15:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/467a36c3-7a4e-3b23-9c41-85a7e6a13f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 43.231.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d9:0f:93:37:28:29:d4:b8:7c:cf:ff:b7:85:1a:f3:28:77: 77:cd:d2:47:ad:80:b1:f7:dd:18:6e:be:27:93:14:a2:da:88: 39:4c:a3:97:47:02:19:59:bc:8b:ea:d6:3b:a8:cd:3e:60:26: a4:56:bf:ba:99:a9:77:74:d7:68:51:32:a8:2e:44:4f:ac:ce: cb:6a:22:2d:ad:22:b2:c5:28:cd:46:ff:43:30:ed:d5:79:06: ca:d1:b1:cc:e2:b5:fa:d6:2d:20:50:8c:e4:01:ac:04:ba:d8: 84:7e:70:36:e0:d5:36:b9:11:c1:68:58:fd:b8:1a:1e:51:01: e9:d7:e4:a5:90:c0:67:fb:2f:dc:b9:73:1a:ab:16:74:59:67: 89:e0:0c:d8:ef:86:92:de:19:45:5f:a8:e1:b5:56:06:47:3d: e3:6a:6b:fa:72:28:12:09:b4:23:95:de:c4:76:d6:6b:48:d8: 88:0a:be:68:77:40:16:e6:2c:d0:cb:6f:9d:41:77:94:8f:c3: 26:f7:b8:b2:5a:b4:b3:f9:af:02:b2:78:29:45:86:cd:42:c2: bd:45:5f:1a:e1:58:45:98:c3:96:ec:3a:f6:3a:0f:99:4b:e3: 4d:fd:51:93:8f:06:c6:b7:e9:e0:ee:bc:6c:ee:d8:49:f2:ef: b2:7b:37:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZvRC+S5mFNEk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmM1NTM5M2EtMzM5YS00YWQ4LWI0ZDAtYTgxMTM0ZWYxZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaJUzG9tuZVVtoqv92wOKcbCB0ZkmtvD2lsW VSrvEMYuzApplS7Ptb/yMDw4D4knxklIjs/QzFLwvx5ILkrmVodcvBO3RICzE+xu zJRbz+wiRbRJ4kuTERUQ4jiWEVKo2p733hwKorDTFC7BGmJsCQIzAI106dq5Qza2 JPvM1hcHPlGSquh/+wuaP35WUJywyGjltyB98fVFXB1/fhlz/t5ziM9m7jVlWE1v fbDRN4IncsaqRsUd+9L4QmHE2nf99dfUPNblvstkFcYyRLZAGmEBNAx7ixSbwmYP shxsBoEr07rACj2E/uGoIu/LOMkxghUWSLsm1lIlR9N00m3MeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4iDd9yfVdmv9r/ZeCE1n5GiRUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvNDY3YTM2YzMtN2E0ZS0z YjIzLTljNDEtODVhN2U2YTEzZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+fpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHZD5M3KCnUuHzP/7eFGvMod3fN0ketgLH33RhuvieTFKLaiDlMo5dH AhlZvIvq1juozT5gJqRWv7qZqXd012hRMqguRE+szstqIi2tIrLFKM1G/0Mw7dV5 BsrRsczitfrWLSBQjOQBrAS62IR+cDbg1Ta5EcFoWP24Gh5RAenX5KWQwGf7L9y5 cxqrFnRZZ4ngDNjvhpLeGUVfqOG1VgZHPeNqa/pyKBIJtCOV3sR21mtI2IgKvmh3 QBbmLNDLb51Bd5SPwyb3uLJatLP5rwKyeClFhs1Cwr1FXxrhWEWYw5bsOvY6D5lL 4039UZOPBsa36eDuvGzu2Eny77J7N7g= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:41 2025 by rpki-client