$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/d2bd23f0-46c7-3433-a3a6-a4a5672125c3.roa File: d2bd23f0-46c7-3433-a3a6-a4a5672125c3.roa (raw, json) Hash identifier: Nb2j6cmvi6iRFZemKit0oQBHaJE2/W9Jrhx2XhkuFjc= Subject key identifier: D6:32:C8:70:08:04:34:6E:AB:21:55:8E:9D:E0:C1:E2:44:C1:F1:F3 Certificate issuer: /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Certificate serial: 010D0C9F4328584AEFEF065C867BD43E7166AD60 Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/d2bd23f0-46c7-3433-a3a6-a4a5672125c3.roa Signing time: Fri 22 Aug 2025 04:20:34 +0000 ROA not before: Fri 22 Aug 2025 04:20:34 +0000 ROA not after: Thu 20 Nov 2025 05:20:34 +0000 asID: 8143 IP address blocks: 23.189.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:ef:06:5c:86:7b:d4:3e:71:66:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50 Validity Not Before: Aug 22 04:20:34 2025 GMT Not After : Nov 20 05:20:34 2025 GMT Subject: CN=68989eb9-3ffc-4bf7-a170-513f7cfbd675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:23:83:26:ec:33:73:19:13:83:c1:24:f2: 85:a8:7a:ec:90:68:e2:1f:ce:7b:3b:b2:8e:de:92: f6:58:ac:af:11:68:cb:56:1c:93:27:b2:79:56:40: ae:bb:ae:8c:9f:84:0b:b8:40:07:cd:05:7f:99:42: c3:3b:21:d7:f3:0b:a2:08:70:f4:5a:e8:4f:17:e0: fe:8e:27:8f:f3:46:e0:7b:20:ff:b8:e1:1e:5c:4a: 84:d9:db:a0:87:7d:df:9a:47:cd:33:8a:a0:6e:bf: 6f:da:02:35:64:2b:9b:9c:d4:93:2c:1d:33:ed:d2: 9d:a3:09:5f:e2:13:25:52:8a:19:39:4e:12:54:ab: 63:1b:df:58:df:d6:e6:3c:d6:c1:d2:d2:d0:a3:5f: cf:84:30:02:2a:7a:a4:ad:08:06:99:10:aa:db:2a: 5e:a2:12:7a:b4:ce:17:f1:52:ef:aa:6c:f0:57:01: aa:ad:4b:58:b7:67:8f:10:cf:86:01:19:2b:4e:f2: ba:64:f1:79:2f:39:8a:c9:cf:5d:45:0e:29:47:c2: 71:7a:8b:fe:76:50:d2:72:5b:c6:ca:ed:22:fb:28: ac:95:2b:75:33:79:b9:f5:e0:5a:85:f1:2d:84:15: 8e:c9:22:16:46:27:c6:0f:cc:65:4e:01:1c:e6:3e: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:32:C8:70:08:04:34:6E:AB:21:55:8E:9D:E0:C1:E2:44:C1:F1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/d2bd23f0-46c7-3433-a3a6-a4a5672125c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl X509v3 Authority Key Identifier: keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer sbgp-ipAddrBlock: critical IPv4: 23.189.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:24:b6:02:56:b2:4d:a2:7b:a4:cf:82:b9:49:0e:3d:6e:7c: cb:64:5a:c1:97:db:d8:7f:55:8e:97:38:a6:01:1f:fd:e2:07: 61:35:81:b2:4e:4f:c8:b3:80:3c:7b:ae:75:55:c3:36:b6:75: 44:04:ae:a3:82:cc:93:48:93:34:99:5e:9b:5c:3d:0b:0b:9b: 18:8c:f1:ef:8c:d8:63:39:b7:4c:d3:af:d8:7f:1c:1b:55:bc: 4b:23:f0:fc:27:d4:e0:b2:e0:2a:d1:4d:c4:c4:9c:1b:53:e5: 6a:36:8f:69:9f:00:3e:18:b8:02:8a:9b:c8:d2:e0:d6:8a:2d: 5e:2e:65:d0:94:c5:ae:df:e9:2d:82:07:f2:90:14:9a:64:96: 74:35:2d:43:cc:6b:33:20:f4:86:d2:e0:3c:63:96:64:94:c1: a3:1a:8a:d0:80:8a:50:85:f0:25:ca:15:4d:0c:44:6e:e5:6c: 8e:b3:a2:74:58:6e:e1:c1:82:17:4b:5c:61:71:2c:15:87:2b: 48:5a:75:39:1c:03:54:38:af:11:c6:3b:6b:bf:c7:44:15:8b: b8:9b:4f:bb:bd:fe:59:58:3c:cc:65:05:97:9b:68:cf:23:d6: db:ed:46:95:96:47:d2:6b:9e:2e:27:bd:3f:c2:4d:c9:65:eb: 20:c2:a3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErv7wZchnvUPnFmrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAwMTBkOTItMzVhNy00ZGJhLTgwN2ItMGYyMjliM2Uy ZTUwMB4XDTI1MDgyMjA0MjAzNFoXDTI1MTEyMDA1MjAzNFowLzEtMCsGA1UEAxMk Njg5ODllYjktM2ZmYy00YmY3LWExNzAtNTEzZjdjZmJkNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfYjgybsM3MZE4PBJPKFqHrskGjiH857O7KO 3pL2WKyvEWjLVhyTJ7J5VkCuu66Mn4QLuEAHzQV/mULDOyHX8wuiCHD0WuhPF+D+ jieP80bgeyD/uOEeXEqE2dugh33fmkfNM4qgbr9v2gI1ZCubnNSTLB0z7dKdowlf 4hMlUooZOU4SVKtjG99Y39bmPNbB0tLQo1/PhDACKnqkrQgGmRCq2ypeohJ6tM4X 8VLvqmzwVwGqrUtYt2ePEM+GARkrTvK6ZPF5LzmKyc9dRQ4pR8Jxeov+dlDSclvG yu0i+yislSt1M3m59eBahfEthBWOySIWRifGD8xlTgEc5j4lNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYyyHAIBDRuqyFVjp3gweJEwfHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAx MGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIyOWIzZTJlNTAvZDJiZDIzZjAtNDZjNy0z NDMzLWEzYTYtYTRhNTY3MjEyNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTAwMTBkOTItMzVhNy00ZGJhLTgw N2ItMGYyMjliM2UyZTUwL2UwMDEwZDkyLTM1YTctNGRiYS04MDdiLTBmMjI5YjNl MmU1MC5jcmwwHwYDVR0jBBgwFoAUqA2k2Q2qmoR4RhwApXXSCNAaPpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDAxMGQ5Mi0zNWE3LTRkYmEtODA3Yi0wZjIy OWIzZTJlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF734MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ktgJWsk2ie6TPgrlJDj1ufMtkWsGX29h/VY6XOKYBH/3iB2E1gbJO T8izgDx7rnVVwza2dUQErqOCzJNIkzSZXptcPQsLmxiM8e+M2GM5t0zTr9h/HBtV vEsj8Pwn1OCy4CrRTcTEnBtT5Wo2j2mfAD4YuAKKm8jS4NaKLV4uZdCUxa7f6S2C B/KQFJpklnQ1LUPMazMg9IbS4DxjlmSUwaMaitCAilCF8CXKFU0MRG7lbI6zonRY buHBghdLXGFxLBWHK0hadTkcA1Q4rxHGO2u/x0QVi7ibT7u9/llYPMxlBZebaM8j 1tvtRpWWR9Jrni4nvT/CTcll6yDCo3M= -----END CERTIFICATE-----Generated at Sun Aug 24 02:54:17 2025 by rpki-client