$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d332b4f-e92a-3948-abab-59703a4f830e.roa File: 0d332b4f-e92a-3948-abab-59703a4f830e.roa (raw, json) Hash identifier: Y5lgxoVcB0UyJP4ClP74aBs16C+po4C33xdLcLgnclc= Subject key identifier: A9:74:73:B0:7A:5E:38:7F:0E:3B:26:38:CB:F2:B9:3B:C4:8B:73:0E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1F016DEA8F2599B0C37BC040 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d332b4f-e92a-3948-abab-59703a4f830e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 989 IP address blocks: 8.44.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6d:ea:8f:25:99:b0:c3:7b:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c7e7ce96-72dc-4285-ad2f-ee49465beaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:7a:8c:3a:04:14:35:ec:b0:0a:c8:12:18: 43:18:9c:53:ef:12:45:7b:37:a0:63:41:5a:93:00: c1:3d:58:c9:ec:64:8e:e6:e7:eb:c2:f8:61:d8:01: b2:5d:7b:4e:bc:2b:d6:77:a5:b7:a8:20:b5:5e:5b: 2d:62:d8:df:cf:fe:2b:38:c0:11:9e:c2:f6:00:5e: 3c:b3:25:85:48:06:8e:ed:f9:b8:b8:54:94:0d:1b: 14:7c:86:6d:0e:37:4a:e8:41:40:9d:7f:e8:96:19: 91:8e:de:7c:66:41:27:b9:a7:b4:37:8b:59:1c:80: f1:1c:dd:a1:b0:8b:89:d6:4f:84:b7:fc:04:a1:63: 57:7f:6b:e5:64:2d:4d:b2:c0:54:3a:e3:7e:65:dc: 79:1e:0d:7e:d1:94:71:a1:45:4b:76:ef:66:17:57: 31:14:5a:78:9d:cf:95:78:42:f4:f6:8b:11:be:e6: d5:c8:11:b8:5a:1e:97:08:b7:d7:89:59:7b:8b:db: 8e:fd:a9:3b:f9:b6:6e:ea:1b:94:fd:e2:68:42:77: c3:3a:58:f6:7d:74:3a:70:12:94:48:96:13:2b:1a: 40:25:ba:39:46:2d:c3:c9:a0:8a:1a:65:20:ea:e6: 97:73:9c:70:c8:63:2a:93:09:89:71:de:ab:1f:56: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:73:B0:7A:5E:38:7F:0E:3B:26:38:CB:F2:B9:3B:C4:8B:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d332b4f-e92a-3948-abab-59703a4f830e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.44.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:da:fd:bb:ca:5d:9d:7f:ec:76:c9:46:72:37:27:1b:04:21: 19:23:c3:5d:09:d2:6b:4a:2a:73:bd:8d:c5:e0:1b:8a:00:74: a1:a4:91:51:60:23:ea:4a:8b:36:52:61:8c:76:b6:4a:e2:14: e7:ad:df:f2:04:be:31:54:e7:a9:61:fc:92:59:4d:ba:e9:86: c7:48:00:08:78:85:cc:e4:e3:a7:d0:49:47:b8:c6:47:c6:dc: 17:48:6d:b8:08:52:d2:6a:21:e1:bf:13:a5:6a:ca:65:68:9c: e2:a1:a0:65:1c:87:7b:22:bb:7d:20:05:2c:aa:10:c2:a5:29: 27:3d:68:19:7d:2e:21:df:85:fd:25:b1:3a:5c:63:ec:aa:41: 22:aa:2b:bb:7c:3b:58:95:54:af:7f:00:35:60:e6:2c:65:45: 29:ab:83:36:da:ee:bf:52:9e:77:09:67:11:26:05:d5:1f:f8: e0:bf:77:55:2a:b4:a6:f8:cc:94:d2:a2:54:ab:9c:2a:99:ea: b3:76:b2:55:0c:dd:0d:56:05:22:f8:ef:71:b8:e1:df:42:bd: cb:c1:48:3c:b7:04:40:bd:3b:e4:26:ec:6a:ce:d6:0e:63:d6: 70:b8:10:4a:aa:a3:d0:20:bc:04:b8:a7:14:a3:a8:2e:7a:95: f1:ec:f0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAW3qjyWZsMN7wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzdlN2NlOTYtNzJkYy00Mjg1LWFkMmYtZWU0OTQ2NWJlYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1d6jDoEFDXssArIEhhDGJxT7xJFezegY0Fa kwDBPVjJ7GSO5ufrwvhh2AGyXXtOvCvWd6W3qCC1XlstYtjfz/4rOMARnsL2AF48 syWFSAaO7fm4uFSUDRsUfIZtDjdK6EFAnX/olhmRjt58ZkEnuae0N4tZHIDxHN2h sIuJ1k+Et/wEoWNXf2vlZC1NssBUOuN+Zdx5Hg1+0ZRxoUVLdu9mF1cxFFp4nc+V eEL09osRvubVyBG4Wh6XCLfXiVl7i9uO/ak7+bZu6huU/eJoQnfDOlj2fXQ6cBKU SJYTKxpAJbo5Ri3DyaCKGmUg6uaXc5xwyGMqkwmJcd6rH1YH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl0c7B6Xjh/DjsmOMvyuTvEi3MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGQzMzJiNGYtZTkyYS0z OTQ4LWFiYWItNTk3MDNhNGY4MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADva/bvKXZ1/7HbJRnI3JxsEIRkjw10J0mtKKnO9jcXgG4oAdKGkkVFg I+pKizZSYYx2tkriFOet3/IEvjFU56lh/JJZTbrphsdIAAh4hczk46fQSUe4xkfG 3BdIbbgIUtJqIeG/E6VqymVonOKhoGUch3siu30gBSyqEMKlKSc9aBl9LiHfhf0l sTpcY+yqQSKqK7t8O1iVVK9/ADVg5ixlRSmrgzba7r9SnncJZxEmBdUf+OC/d1Uq tKb4zJTSolSrnCqZ6rN2slUM3Q1WBSL473G44d9CvcvBSDy3BEC9O+Qm7GrO1g5j 1nC4EEqqo9AgvAS4pxSjqC56lfHs8Cg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:56:48 2025 by rpki-client