$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/45aa377a-3d00-3e26-8da7-c82b97550b69.roa File: 45aa377a-3d00-3e26-8da7-c82b97550b69.roa (raw, json) Hash identifier: Q34jGNJaY7qlJmY7dwsJNVEl3MY/VQMQDC3zOo2QWdI= Subject key identifier: 17:33:A3:7B:E6:AB:4C:53:2B:59:15:64:33:AA:97:B9:9F:86:56:E8 Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584AECC121AAC9C51EC71B4DB3C0 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/45aa377a-3d00-3e26-8da7-c82b97550b69.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 395214 IP address blocks: 23.137.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:aa:c9:c5:1e:c7:1b:4d:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=72d9e1ee-95f4-4442-b795-75eff08226bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:8f:b0:6a:9c:43:76:d3:81:d7:b9:19:03: fd:cb:7f:e4:3e:02:8d:42:51:73:54:31:9f:7b:0b: a6:9b:e2:a4:06:04:60:13:2b:07:fa:ff:57:7d:83: 4c:86:f0:64:95:c9:5c:5d:80:30:7f:40:50:e4:c3: 08:49:21:93:14:d8:98:62:31:f4:cd:28:80:41:3e: 8e:22:82:85:0c:b4:e9:ee:5d:7e:0f:fb:90:dd:ae: 5b:15:a0:2e:f2:53:9d:4e:c0:12:78:4b:2f:45:2c: 83:30:6f:df:a3:4f:1e:56:5a:f4:d0:1c:c5:59:4f: 65:14:10:ec:aa:a9:21:49:a1:a8:e0:97:bc:48:a3: 9c:7c:3b:55:14:4a:1e:1d:8f:33:7b:3e:1a:8d:f6: cb:bc:9a:c5:26:71:26:bc:04:e3:88:ee:d5:dc:5a: 56:29:0d:09:51:fc:32:71:ac:20:f8:94:02:c3:16: e0:ef:ad:c6:4c:ca:d3:14:fa:e5:fa:e5:20:57:76: 4c:9e:1d:b0:da:3f:42:c5:93:4d:d0:85:5c:57:3b: ad:24:e5:be:df:96:0b:3e:b2:1c:7a:92:c0:9d:c9: 13:d6:a6:8d:b4:95:22:e7:e2:89:18:69:81:f8:7d: 05:00:df:88:4b:25:de:66:a2:23:61:39:26:a4:42: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:A3:7B:E6:AB:4C:53:2B:59:15:64:33:AA:97:B9:9F:86:56:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/45aa377a-3d00-3e26-8da7-c82b97550b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv4: 23.137.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:21:32:71:ce:ec:32:f4:07:3c:0a:96:fc:6a:94:7a:7e:b3: a3:a5:b5:8c:cf:85:f2:60:bd:9b:42:bd:e2:25:0c:f1:4a:5d: e4:8b:89:c1:09:64:ef:f4:9c:36:ed:a5:cc:16:32:25:4a:02: 5b:a6:82:9a:da:63:ab:bb:50:fe:24:27:e4:43:f7:c2:ab:15: 4b:3d:05:9a:0d:91:c7:c8:d1:0c:96:8c:1c:7d:e4:5e:ce:bd: 71:4d:96:34:c8:83:bc:eb:5e:6c:7c:49:66:55:30:f0:32:e6: 09:34:ba:af:95:c1:55:60:ab:7e:99:23:60:c1:a1:a8:06:28: 64:43:0b:03:7e:e6:47:66:9c:17:52:22:7c:fe:8b:0b:9f:07: 33:de:1c:ca:79:d4:d2:9b:f9:21:3a:e9:0c:0e:21:a9:fa:7f: 02:6c:f9:8e:ed:3f:44:3c:40:73:22:cd:47:c1:c6:ef:a1:77: a4:0a:8a:dd:71:1a:de:0b:8f:d5:fa:05:89:2c:78:bb:84:ee: eb:68:a5:a1:99:77:5f:46:dd:4a:d4:6c:79:36:24:c3:bc:3d: 5a:56:a6:aa:85:8f:61:4f:ba:26:4b:36:02:a1:66:bc:9f:11: 04:74:75:c8:3b:e8:e9:21:ee:e3:ed:1c:2d:69:c9:f0:c1:81: c2:34:13:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSGqycUexxtNs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzJkOWUxZWUtOTVmNC00NDQyLWI3OTUtNzVlZmYwODIyNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGaPsGqcQ3bTgde5GQP9y3/kPgKNQlFzVDGf ewumm+KkBgRgEysH+v9XfYNMhvBklclcXYAwf0BQ5MMISSGTFNiYYjH0zSiAQT6O IoKFDLTp7l1+D/uQ3a5bFaAu8lOdTsASeEsvRSyDMG/fo08eVlr00BzFWU9lFBDs qqkhSaGo4Je8SKOcfDtVFEoeHY8zez4ajfbLvJrFJnEmvATjiO7V3FpWKQ0JUfwy cawg+JQCwxbg763GTMrTFPrl+uUgV3ZMnh2w2j9CxZNN0IVcVzutJOW+35YLPrIc epLAnckT1qaNtJUi5+KJGGmB+H0FAN+ISyXeZqIjYTkmpEL1fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBczo3vmq0xTK1kVZDOql7mfhlboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvNDVhYTM3N2EtM2QwMC0z ZTI2LThkYTctYzgyYjk3NTUwYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIhMnHO7DL0BzwKlvxqlHp+s6OltYzPhfJgvZtCveIlDPFKXeSLicEJ ZO/0nDbtpcwWMiVKAlumgpraY6u7UP4kJ+RD98KrFUs9BZoNkcfI0QyWjBx95F7O vXFNljTIg7zrXmx8SWZVMPAy5gk0uq+VwVVgq36ZI2DBoagGKGRDCwN+5kdmnBdS Inz+iwufBzPeHMp51NKb+SE66QwOIan6fwJs+Y7tP0Q8QHMizUfBxu+hd6QKit1x Gt4Lj9X6BYkseLuE7utopaGZd19G3UrUbHk2JMO8PVpWpqqFj2FPuiZLNgKhZryf EQR0dcg76Okh7uPtHC1pyfDBgcI0E2o= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:42 2025 by rpki-client