$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa File: d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa (raw, json) Hash identifier: 1TtT0jmERUki0PfUj/DvEdp+wUEzOW5U3ur3dGt4dfU= Subject key identifier: B5:39:F7:A5:6F:6A:42:C5:A0:2A:9E:C8:6B:E9:83:68:25:7E:FF:7F Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584AD7D11CC02D7D3AC4A9413E20 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 40081 IP address blocks: 23.175.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:1c:c0:2d:7d:3a:c4:a9:41:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=ba571980-70be-4d7a-8085-1021f668d143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:d0:e3:c6:5f:86:1f:3d:5f:e6:6b:53:31: 43:5b:44:e5:5f:35:47:d8:e1:a7:19:fd:16:06:28: 2d:45:8c:8e:4e:50:6d:94:11:8b:00:d5:45:b0:cb: 57:99:e0:f6:d0:33:db:c5:6c:9b:4f:0c:37:32:2a: 10:61:f0:0c:2c:bc:9b:18:e8:bb:54:66:0e:bc:61: 34:d1:64:8f:38:e7:17:07:6d:4e:f3:ca:16:2c:da: d4:6a:36:32:b9:96:ab:e1:6e:87:a5:8a:a9:31:e5: e5:7a:b1:ee:6e:c7:91:d7:0d:ce:b7:82:be:38:d7: 19:39:71:2f:7f:1e:89:23:db:8b:af:68:b6:b7:0d: 37:50:f8:f1:94:f2:25:5a:fb:66:70:75:ef:25:8c: 0a:20:55:e6:0c:bf:ff:84:51:c7:2a:b7:e6:35:da: 0f:68:1b:a5:ac:29:bc:57:ab:29:87:d3:fb:1b:a9: 18:52:3f:69:5a:29:63:46:8b:c2:25:1b:4d:71:76: 19:42:1d:78:5e:fb:2c:08:7e:89:dd:9f:8b:7c:f8: b2:6b:95:71:2e:0e:82:34:f6:d4:5f:b0:5e:27:a2: 9f:81:08:a0:c6:3c:78:c5:4b:7f:d8:4d:f4:7a:b3: 21:68:79:a5:fb:72:c9:ff:64:c6:f5:e5:de:1b:f9: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:F7:A5:6F:6A:42:C5:A0:2A:9E:C8:6B:E9:83:68:25:7E:FF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv4: 23.175.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:73:8b:e5:f1:01:e9:6d:51:5a:65:8b:83:81:50:3d:1f:4f: d3:8e:67:96:35:1f:16:fc:42:68:fa:cf:2a:ea:a9:1a:fc:bd: 35:28:36:6e:50:74:fa:30:62:c3:f3:fc:5a:c6:40:f3:5e:3a: 87:5a:c6:67:74:a1:6f:10:89:e8:aa:c3:c5:2c:a5:36:99:e5: d9:71:f8:c3:dc:d5:42:06:bb:e6:17:d8:a5:12:0e:91:4b:be: e2:de:1b:5c:57:d2:59:c0:a8:0a:e3:4f:7e:58:2c:8d:f0:a4: 47:b9:43:ab:fa:1e:f5:25:de:66:1e:a0:b9:2b:aa:6a:f9:c9: a7:85:27:60:79:c4:f9:b9:5c:46:4b:4e:97:dd:e8:25:f7:1e: 6d:0a:df:94:4c:20:41:51:6d:db:19:1a:e3:7b:63:5a:8f:72: b5:86:75:34:62:1f:54:c5:59:d6:eb:e0:c2:c5:31:86:e5:04: 8b:cb:a8:35:25:05:98:c1:6b:0d:fc:b1:82:0c:e6:3b:a4:8d: 65:b5:99:f2:fa:ff:75:c0:75:b2:c8:93:55:7f:f9:31:5d:78: 4e:95:b0:87:fd:b0:01:1b:74:f2:37:da:cf:d3:06:83:09:d2: d6:c9:3b:1f:49:0f:59:94:ab:9e:29:90:bc:e6:df:0d:86:6d: 9e:a1:47:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RzALX06xKlBPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YmE1NzE5ODAtNzBiZS00ZDdhLTgwODUtMTAyMWY2NjhkMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TnQ48Zfhh89X+ZrUzFDW0TlXzVH2OGnGf0W BigtRYyOTlBtlBGLANVFsMtXmeD20DPbxWybTww3MioQYfAMLLybGOi7VGYOvGE0 0WSPOOcXB21O88oWLNrUajYyuZar4W6HpYqpMeXlerHubseR1w3Ot4K+ONcZOXEv fx6JI9uLr2i2tw03UPjxlPIlWvtmcHXvJYwKIFXmDL//hFHHKrfmNdoPaBulrCm8 V6sph9P7G6kYUj9pWiljRovCJRtNcXYZQh14XvssCH6J3Z+LfPiya5VxLg6CNPbU X7BeJ6KfgQigxjx4xUt/2E30erMhaHml+3LJ/2TG9eXeG/kMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU596VvakLFoCqeyGvpg2glfv9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZDY4OWUxZDQtYTU1ZS0z NzFlLWJhOWEtNGExMmFkNGJlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1zi+XxAeltUVpli4OBUD0fT9OOZ5Y1Hxb8Qmj6zyrqqRr8vTUoNm5Q dPowYsPz/FrGQPNeOodaxmd0oW8Qieiqw8UspTaZ5dlx+MPc1UIGu+YX2KUSDpFL vuLeG1xX0lnAqArjT35YLI3wpEe5Q6v6HvUl3mYeoLkrqmr5yaeFJ2B5xPm5XEZL Tpfd6CX3Hm0K35RMIEFRbdsZGuN7Y1qPcrWGdTRiH1TFWdbr4MLFMYblBIvLqDUl BZjBaw38sYIM5jukjWW1mfL6/3XAdbLIk1V/+TFdeE6VsIf9sAEbdPI32s/TBoMJ 0tbJOx9JD1mUq54pkLzm3w2GbZ6hR78= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:03 2025 by rpki-client