$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa File: 2d68bd01-5230-3201-bfa0-352c95678320.roa (raw, json) Hash identifier: WUk0CyLPTe75yH5QqpgGzlODKrSRo0EutkgCTGXJ/Dc= Subject key identifier: 7C:89:FE:B7:A5:60:7D:AE:5F:0E:00:40:3C:B4:25:A8:FA:EE:D1:C7 Certificate issuer: /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e Certificate serial: 010D0C9F4328584B3126F8B5600FA7F9E42AFB40 Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 8095 IP address blocks: 23.177.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f8:b5:60:0f:a7:f9:e4:2a:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=199f27be-0662-4ead-b819-a93b8ec1764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:26:a9:a2:b6:ec:be:0b:ad:0e:fc:ea:c6: 3b:79:13:05:ee:53:0e:c1:2d:a5:bd:f8:9e:75:36: f0:d0:3d:e3:d4:50:d5:6c:b2:8a:98:b7:38:42:73: 4e:c4:f5:3e:8c:b1:3f:65:4d:79:d3:34:68:2f:89: ef:56:59:d5:19:a8:bb:eb:0a:c1:e7:51:4d:78:8c: c3:a2:6a:b8:64:88:88:48:ee:24:77:2e:2a:09:66: a2:39:f8:72:0b:cb:c4:e1:1e:7a:35:fe:c3:b9:be: 7f:f2:44:2f:3f:ba:ff:d9:77:ed:52:94:b6:39:f5: f3:2b:57:88:0e:eb:12:85:5f:45:ac:fb:ed:74:d1: df:a7:9d:f8:0f:df:a5:83:e4:11:26:23:61:7c:f1: 0d:8c:7b:9f:f6:ff:8d:44:54:a9:bc:3e:36:fa:fb: 87:7a:7c:df:82:55:97:cc:33:a2:f0:d4:97:e2:57: 02:ae:01:ef:6b:51:b1:0d:d7:49:70:5c:4b:33:84: d9:4a:75:b4:1a:81:d6:42:db:55:49:9d:40:3a:85: 27:9c:7b:71:8d:05:83:35:82:6c:0a:2e:b3:51:f4: b6:e4:7b:2a:65:52:9a:25:17:48:89:fa:b3:d8:c2: 20:c4:46:52:52:42:fc:c1:6d:27:94:ee:4f:6d:2d: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:FE:B7:A5:60:7D:AE:5F:0E:00:40:3C:B4:25:A8:FA:EE:D1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl X509v3 Authority Key Identifier: keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer sbgp-ipAddrBlock: critical IPv4: 23.177.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5a:0b:85:c2:e8:6d:8d:26:54:d5:91:23:57:bd:fa:92:65: 45:56:08:6a:f4:c4:12:e4:b0:ea:2c:c1:b1:59:ba:4f:63:79: f1:36:3d:60:05:2f:6d:0c:9f:ec:fb:4c:5c:e0:fa:32:00:94: 45:bb:ab:2d:f6:f2:c2:be:90:60:bf:74:d0:42:d9:98:56:47: df:1c:4c:21:a2:e2:50:75:ae:93:30:1b:8a:b0:57:bb:c7:01: 40:02:ab:c2:7d:14:73:58:d7:21:42:15:f7:90:fe:bd:4e:1d: 43:cf:0e:8f:d5:e5:dd:56:e2:b7:69:11:63:d5:47:dc:bc:81: 53:e8:aa:2b:9a:f8:a0:11:f0:e9:4c:7c:45:2b:df:a7:b5:9e: 68:68:6b:88:70:9b:99:44:a7:38:82:17:76:62:1d:9f:82:fd: fb:b7:cc:98:3c:cc:83:81:4a:e9:e1:7e:ee:95:4f:f8:04:78: da:5e:43:38:37:50:51:60:f5:2d:71:45:1a:d5:0a:ae:42:69: 10:09:2a:dd:fe:58:13:b9:36:79:cd:f3:fc:3e:c7:d7:3c:aa: be:f8:d8:25:36:67:f5:40:99:ae:73:31:d0:46:c1:52:a5:38: b8:0d:17:08:03:34:4f:06:a5:5e:93:71:0a:40:8e:a3:8d:f0: 6d:be:c1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvi1YA+n+eQq+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmZTNmNWUtN2JiYS00NzYzLTg0YWQtNDU3NTA2NmZi NDZlMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MTk5ZjI3YmUtMDY2Mi00ZWFkLWI4MTktYTkzYjhlYzE3NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3YmqaK27L4LrQ786sY7eRMF7lMOwS2lvfie dTbw0D3j1FDVbLKKmLc4QnNOxPU+jLE/ZU150zRoL4nvVlnVGai76wrB51FNeIzD omq4ZIiISO4kdy4qCWaiOfhyC8vE4R56Nf7Dub5/8kQvP7r/2XftUpS2OfXzK1eI DusShV9FrPvtdNHfp534D9+lg+QRJiNhfPENjHuf9v+NRFSpvD42+vuHenzfglWX zDOi8NSX4lcCrgHva1GxDddJcFxLM4TZSnW0GoHWQttVSZ1AOoUnnHtxjQWDNYJs Ci6zUfS25HsqZVKaJRdIifqz2MIgxEZSUkL8wW0nlO5PbS08KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyJ/relYH2uXw4AQDy0Jaj67tHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWZl M2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1MDY2ZmI0NmUvMmQ2OGJkMDEtNTIzMC0z MjAxLWJmYTAtMzUyYzk1Njc4MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDlmZTNmNWUtN2JiYS00NzYzLTg0 YWQtNDU3NTA2NmZiNDZlL2Q5ZmUzZjVlLTdiYmEtNDc2My04NGFkLTQ1NzUwNjZm YjQ2ZS5jcmwwHwYDVR0jBBgwFoAUFzP/zEq5l7KndDtZUyAbGuFmo04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kOWZlM2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1 MDY2ZmI0NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpaC4XC6G2NJlTVkSNXvfqSZUVWCGr0xBLksOoswbFZuk9jefE2PWAF L20Mn+z7TFzg+jIAlEW7qy328sK+kGC/dNBC2ZhWR98cTCGi4lB1rpMwG4qwV7vH AUACq8J9FHNY1yFCFfeQ/r1OHUPPDo/V5d1W4rdpEWPVR9y8gVPoqiua+KAR8OlM fEUr36e1nmhoa4hwm5lEpziCF3ZiHZ+C/fu3zJg8zIOBSunhfu6VT/gEeNpeQzg3 UFFg9S1xRRrVCq5CaRAJKt3+WBO5NnnN8/w+x9c8qr742CU2Z/VAma5zMdBGwVKl OLgNFwgDNE8GpV6TcQpAjqON8G2+wZk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:53 2025 by rpki-client