$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa File: 99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json) Hash identifier: efmpTHteEsM4t8HCSfHYm5Q4131fIaJlQbiT1TLdYU4= Subject key identifier: 22:47:18:E1:88:77:F0:B1:64:EA:BA:00:47:2C:FD:F7:F4:CE:D5:12 Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Certificate serial: 010D0C9F4328584A963692F22192079932F7C8C0 Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 63101 IP address blocks: 23.188.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:92:f2:21:92:07:99:32:f7:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=dcbeb2da-2a44-45fc-ad76-96a945ba9dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:e6:2f:b6:ff:f6:68:0f:08:39:55:15:27: cb:3e:81:c9:24:c3:01:d9:9a:25:28:b2:db:fc:2e: 76:24:43:57:37:02:82:b1:e9:89:a4:87:0b:4d:28: 9e:22:05:99:3f:b8:07:f0:88:10:7b:17:c4:12:78: 5e:2e:c0:30:9b:55:38:29:1b:61:3f:2c:4a:3a:4d: 10:3a:67:2f:5c:bb:d4:65:5a:e9:5c:6a:5b:ac:05: ed:b5:66:be:77:c8:51:71:ed:bc:42:31:91:dc:bd: 26:17:d5:be:91:97:07:2c:5b:aa:cb:90:df:69:8e: 04:00:cd:4a:60:ea:17:a1:33:8a:4d:36:de:20:52: 4f:90:7c:53:9d:20:3b:41:3a:ba:44:37:d0:1f:3c: d4:13:df:40:49:a0:98:b1:68:38:62:10:d3:6e:58: d1:b4:b1:16:d4:f7:c1:57:c3:50:06:fd:71:38:7f: a8:34:a2:ca:59:ef:22:58:03:91:3b:0e:37:a4:6e: e5:f5:62:57:1d:04:ad:57:83:9c:b5:e1:4e:e3:dc: 9d:d0:24:2e:1f:16:71:a7:17:28:bd:d4:a0:09:5c: 5d:dc:d7:1d:74:9e:9e:42:5d:fd:75:a2:17:a1:9f: 7f:60:e3:cd:ff:6c:b1:3a:07:2d:06:3b:27:71:09: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:47:18:E1:88:77:F0:B1:64:EA:BA:00:47:2C:FD:F7:F4:CE:D5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl X509v3 Authority Key Identifier: keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer sbgp-ipAddrBlock: critical IPv4: 23.188.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a5:68:74:0f:a7:2d:49:a2:71:f1:63:64:01:aa:9f:7f:bb: a4:32:45:35:55:f5:ee:0f:15:b2:bc:ce:ed:08:40:fe:a5:88: f1:50:cb:2c:20:a6:62:e3:cf:75:b2:7d:dc:ca:f7:87:c0:11: a7:77:6a:4d:97:8a:fe:a3:e6:b3:f9:29:96:ad:5d:5b:69:4a: 01:ca:b2:d3:ce:03:5e:41:ca:6f:58:83:50:7a:47:b7:ed:95: ee:37:ec:c4:30:d4:98:6e:d4:41:07:4c:36:49:ad:99:be:f9: 0d:d9:51:dd:cb:34:0c:0d:b7:94:a4:03:12:34:30:e9:3b:08: ed:d4:9d:6c:0b:c6:c3:66:df:94:86:22:ce:bb:95:c0:8b:c4: ff:5f:ef:03:0b:bf:1d:f0:6b:4f:11:28:a1:40:b0:2b:c4:6a: 45:38:8d:65:df:d0:8f:c1:a3:3a:71:91:d1:d4:84:e9:0f:37: f0:03:39:6d:b7:4c:f5:b8:25:c1:bc:dc:5f:49:0e:8e:61:5d: 0e:be:9c:27:51:2a:b0:88:66:b8:68:07:84:60:dc:55:a5:de: af:2d:d9:b7:4b:97:43:7f:7f:5b:4b:6d:ab:e8:f6:31:d3:e7: 7c:2a:ec:2b:77:00:1d:3a:6f:5b:e3:ad:2c:79:ce:ad:3c:a8: cd:f5:8e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpLyIZIHmTL3yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx YzY2MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGNiZWIyZGEtMmE0NC00NWZjLWFkNzYtOTZhOTQ1YmE5ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfLmL7b/9mgPCDlVFSfLPoHJJMMB2ZolKLLb /C52JENXNwKCsemJpIcLTSieIgWZP7gH8IgQexfEEnheLsAwm1U4KRthPyxKOk0Q OmcvXLvUZVrpXGpbrAXttWa+d8hRce28QjGR3L0mF9W+kZcHLFuqy5DfaY4EAM1K YOoXoTOKTTbeIFJPkHxTnSA7QTq6RDfQHzzUE99ASaCYsWg4YhDTbljRtLEW1PfB V8NQBv1xOH+oNKLKWe8iWAOROw43pG7l9WJXHQStV4OcteFO49yd0CQuHxZxpxco vdSgCVxd3NcddJ6eQl39daIXoZ9/YOPN/2yxOgctBjsncQlz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJHGOGId/CxZOq6AEcs/ff0ztUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvOTlkZDlkZjEtODVjOC0z MTU2LTllYWQtYzgzNmJlM2M2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1 MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0 MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj MDFmNDFjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOlaHQPpy1JonHxY2QBqp9/u6QyRTVV9e4PFbK8zu0IQP6liPFQyywg pmLjz3WyfdzK94fAEad3ak2Xiv6j5rP5KZatXVtpSgHKstPOA15Bym9Yg1B6R7ft le437MQw1Jhu1EEHTDZJrZm++Q3ZUd3LNAwNt5SkAxI0MOk7CO3UnWwLxsNm35SG Is67lcCLxP9f7wMLvx3wa08RKKFAsCvEakU4jWXf0I/BozpxkdHUhOkPN/ADOW23 TPW4JcG83F9JDo5hXQ6+nCdRKrCIZrhoB4Rg3FWl3q8t2bdLl0N/f1tLbavo9jHT 53wq7Ct3AB06b1vjrSx5zq08qM31jlg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:36:41 2025 by rpki-client