$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa File: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (raw, json) Hash identifier: 2EO/iiaMqNbBSRv6Huu5RS9UxTTwroYawZhr+Aaly+M= Subject key identifier: FB:8D:38:B9:A1:85:7A:ED:E4:23:0A:07:32:B2:25:D5:A1:9D:97:E7 Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584B609C8DF48A1A707A01E05040 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 26554 IP address blocks: 65.23.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8d:f4:8a:1a:70:7a:01:e0:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=93b10f38-4689-43f8-9e53-315ccc03e9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:b1:77:9c:4e:38:06:24:3f:1b:5f:7c:e3: a4:1f:70:64:3d:ca:19:23:55:13:96:4f:f7:b6:4a: 77:d3:2a:af:f5:b1:81:74:79:d7:8f:ed:8d:a7:02: 7c:2e:19:37:4d:3a:fa:e8:04:42:70:f9:45:1b:7b: 4f:12:b0:3d:73:b3:1f:ba:47:7a:a1:5c:89:11:0d: fe:e2:9a:ba:0e:20:22:6f:15:86:0e:76:6f:da:2a: 30:18:83:fa:ab:7c:29:21:60:94:68:b5:7a:33:a4: 04:db:0b:f0:ce:7f:47:1d:df:09:36:c7:32:d7:93: ac:86:86:03:e9:ee:61:58:39:8c:49:a9:0a:fc:69: 2d:2e:a7:51:bd:fc:7b:a8:ee:0f:ae:2f:fc:8b:49: 75:94:34:19:31:8a:10:bd:20:c4:8d:f8:50:1d:d8: 8d:be:63:f1:09:f8:99:60:1f:ed:a3:60:8c:95:71: 5a:bf:4b:38:ef:b5:3e:ac:3f:f8:10:e8:75:e6:74: 51:a1:1c:fe:d0:c2:a0:09:2f:53:91:c3:c7:8a:85: fa:17:d8:08:45:5c:44:3a:6f:1e:86:2b:5c:4b:39: 3d:9b:89:c5:bf:15:47:11:a3:77:90:c6:d3:f6:9e: 50:2a:a6:7c:03:c9:e5:07:7c:6a:21:80:b0:42:72: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8D:38:B9:A1:85:7A:ED:E4:23:0A:07:32:B2:25:D5:A1:9D:97:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 65.23.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ee:37:9e:03:72:28:8d:da:5f:72:50:7f:40:95:4f:22:30: 64:76:6a:6e:cd:50:7e:ef:cd:6c:20:5d:75:30:b3:49:5c:59: e5:04:05:c3:18:4f:77:a6:c1:68:81:59:1e:4e:3d:0d:e8:19: fc:b1:6f:ec:5b:3b:f7:f3:c7:04:2c:de:08:b6:02:95:ed:c8: c3:7a:d6:43:2d:71:70:2c:43:5f:e5:75:6b:b5:91:5e:3b:82: fe:4c:3b:41:7e:0c:ce:1b:67:5e:a0:99:68:df:5b:6e:47:1f: f4:2c:f0:d1:5c:fd:6a:9f:e4:83:18:52:59:73:47:0c:08:04: 1b:ca:98:73:94:8a:39:54:07:eb:68:de:07:1a:50:f0:37:ac: 62:18:6d:e4:b0:bf:85:8f:7f:65:50:e9:27:d8:44:25:9d:f4: ca:4a:79:dd:fa:97:66:12:0c:24:2f:1b:ab:5a:d9:05:0f:80: 4c:5c:89:6e:81:ca:fe:04:c0:0f:b5:a4:26:31:ff:a4:bd:55: da:56:15:fe:d3:d3:eb:67:8c:78:8b:08:c2:22:50:30:ea:6c: 9e:7c:83:1b:8c:3a:2e:c0:e5:38:ea:1c:17:10:59:e3:81:f6: 74:b5:82:cf:df:45:4f:56:77:7f:86:f6:69:0e:63:b9:44:e3: 8d:53:76:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI30ihpwegHgUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OTNiMTBmMzgtNDY4OS00M2Y4LTllNTMtMzE1Y2NjMDNlOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfGxd5xOOAYkPxtffOOkH3BkPcoZI1UTlk/3 tkp30yqv9bGBdHnXj+2NpwJ8Lhk3TTr66ARCcPlFG3tPErA9c7Mfukd6oVyJEQ3+ 4pq6DiAibxWGDnZv2iowGIP6q3wpIWCUaLV6M6QE2wvwzn9HHd8JNscy15OshoYD 6e5hWDmMSakK/GktLqdRvfx7qO4Pri/8i0l1lDQZMYoQvSDEjfhQHdiNvmPxCfiZ YB/to2CMlXFav0s477U+rD/4EOh15nRRoRz+0MKgCS9TkcPHioX6F9gIRVxEOm8e hitcSzk9m4nFvxVHEaN3kMbT9p5QKqZ8A8nlB3xqIYCwQnIjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuNOLmhhXrt5CMKBzKyJdWhnZfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMTRhNjE5ZDAtNDc1MS0z ZGQwLTgzNTctZGE3NzUwNDljN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHuN54DciiN2l9yUH9AlU8iMGR2am7NUH7vzWwgXXUws0lcWeUEBcMY T3emwWiBWR5OPQ3oGfyxb+xbO/fzxwQs3gi2ApXtyMN61kMtcXAsQ1/ldWu1kV47 gv5MO0F+DM4bZ16gmWjfW25HH/Qs8NFc/Wqf5IMYUllzRwwIBBvKmHOUijlUB+to 3gcaUPA3rGIYbeSwv4WPf2VQ6SfYRCWd9MpKed36l2YSDCQvG6ta2QUPgExciW6B yv4EwA+1pCYx/6S9VdpWFf7T0+tnjHiLCMIiUDDqbJ58gxuMOi7A5TjqHBcQWeOB 9nS1gs/fRU9Wd3+G9mkOY7lE441TdsA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:33 2025 by rpki-client