$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa File: 340b93af-d882-36e8-acb4-1af84b9fcca3.roa (raw, json) Hash identifier: 5t4rvW/BmfE8Y9XPWH0psPazIvjyIQj61Xtwgr1DKBA= Subject key identifier: C5:0C:2B:59:45:79:02:E8:22:69:9E:C6:BE:C7:BF:51:6F:C9:EC:45 Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Certificate serial: 010D0C9F4328584B2FC198293BD40D1EA8C6E4C0 Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 395886 IP address blocks: 23.185.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:98:29:3b:d4:0d:1e:a8:c6:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=3430adce-a247-412d-aa29-43cbb6b19cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:36:ab:68:ce:f9:b1:58:cd:b0:cc:5c:24: ef:22:9d:50:8d:e4:8a:58:f5:a9:70:73:6d:56:83: 8b:2b:5c:be:80:73:66:18:52:f9:b2:4e:20:0c:ff: 06:88:ab:01:ab:61:14:04:37:8e:35:7e:53:31:e5: 4e:11:b7:79:7c:a8:99:ad:c4:11:47:3d:84:6d:da: 17:3e:5a:a7:82:2e:8e:04:1b:8c:f5:04:b6:60:f3: 12:c7:68:e3:8f:50:25:7b:a0:fd:21:bf:7e:2a:89: a5:fb:13:4a:8d:33:c7:5a:4f:7a:ef:90:e7:06:8f: 88:30:ea:93:58:78:22:ad:ba:89:da:9c:21:72:36: a4:75:cc:1c:a0:ae:63:43:be:c6:29:e0:98:71:70: 4f:e0:d6:9f:09:e7:e6:77:65:6f:4e:a5:36:7e:21: 06:44:bd:b1:49:3d:dd:e5:29:ec:a1:d3:c5:ec:8c: cd:1b:d1:fe:20:7d:71:67:e1:f4:e2:43:2e:5f:1c: df:9a:95:71:37:96:c5:80:0f:dd:5b:f0:2b:ea:38: 69:e6:f3:68:24:b3:1e:31:b3:9e:1c:9f:9f:e1:ab: 73:43:63:4c:38:ee:e8:80:e9:5a:7a:1b:e6:e6:00: 1e:d9:83:9d:4b:90:b8:b5:9d:ec:df:0c:cf:03:43: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0C:2B:59:45:79:02:E8:22:69:9E:C6:BE:C7:BF:51:6F:C9:EC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl X509v3 Authority Key Identifier: keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer sbgp-ipAddrBlock: critical IPv4: 23.185.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:99:85:e2:24:68:09:83:dd:a7:44:19:69:f4:57:a8:41:3a: bc:6d:f5:02:b8:83:63:8e:2d:53:e7:9c:78:a5:df:ac:bb:c3: d9:72:93:5a:dd:e2:48:8f:4c:d1:21:39:a2:45:8a:73:82:f5: 32:d0:23:06:6c:27:43:cb:c7:16:2b:13:a0:3e:51:0f:b1:9d: df:ef:4b:7a:0d:75:28:ca:9f:a2:26:f5:57:8b:be:35:5f:eb: 24:5d:28:40:ad:8a:21:4b:f3:b9:bd:ec:1b:f7:28:1c:83:eb: 99:7e:9e:b8:9d:ae:d8:bf:83:f0:4d:91:3f:83:ba:c0:1f:fe: 84:dd:b6:67:cf:14:7d:c0:43:50:f4:f6:7b:93:62:49:51:35: 33:e6:50:b4:bb:9c:8f:a3:94:af:00:1d:c2:3f:89:4d:92:7e: f9:f9:21:9c:de:f1:ae:4a:8e:68:45:1f:af:d6:59:84:d2:c9: 8c:10:f3:63:52:bf:9e:98:38:6b:8e:72:ff:6c:6d:f1:4f:ef: 7e:33:6f:81:88:41:2d:02:7a:09:2f:21:c2:ab:4c:21:99:99: a7:46:27:49:86:38:ab:71:8c:59:80:c4:f6:b3:f3:27:44:22: 2a:51:56:59:23:f5:3f:d2:c0:c1:7b:38:24:32:8c:87:6b:4a: 49:e3:de:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZgpO9QNHqjG5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5 MTY5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MzQzMGFkY2UtYTI0Ny00MTJkLWFhMjktNDNjYmI2YjE5Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcg2q2jO+bFYzbDMXCTvIp1QjeSKWPWpcHNt VoOLK1y+gHNmGFL5sk4gDP8GiKsBq2EUBDeONX5TMeVOEbd5fKiZrcQRRz2EbdoX Plqngi6OBBuM9QS2YPMSx2jjj1Ale6D9Ib9+Koml+xNKjTPHWk9675DnBo+IMOqT WHgirbqJ2pwhcjakdcwcoK5jQ77GKeCYcXBP4NafCefmd2VvTqU2fiEGRL2xST3d 5SnsodPF7IzNG9H+IH1xZ+H04kMuXxzfmpVxN5bFgA/dW/Ar6jhp5vNoJLMeMbOe HJ+f4atzQ2NMOO7ogOlaehvm5gAe2YOdS5C4tZ3s3wzPA0MwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUMK1lFeQLoImmexr7Hv1FvyexFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvMzQwYjkzYWYtZDg4Mi0z NmU4LWFjYjQtMWFmODRiOWZjY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5 YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqZheIkaAmD3adEGWn0V6hBOrxt9QK4g2OOLVPnnHil36y7w9lyk1rd 4kiPTNEhOaJFinOC9TLQIwZsJ0PLxxYrE6A+UQ+xnd/vS3oNdSjKn6Im9VeLvjVf 6yRdKECtiiFL87m97Bv3KByD65l+nridrti/g/BNkT+DusAf/oTdtmfPFH3AQ1D0 9nuTYklRNTPmULS7nI+jlK8AHcI/iU2Sfvn5IZze8a5KjmhFH6/WWYTSyYwQ82NS v56YOGuOcv9sbfFP734zb4GIQS0CegkvIcKrTCGZmadGJ0mGOKtxjFmAxPaz8ydE IipRVlkj9T/SwMF7OCQyjIdrSknj3v4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:36:27 2025 by rpki-client