$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b233a42-9e2a-3b0d-abe1-30a887ec1696.roa File: 1b233a42-9e2a-3b0d-abe1-30a887ec1696.roa (raw, json) Hash identifier: ZNGC+he++xWZ5DFBgpLWo25mA3HTzkOC62Qys2nLlvs= Subject key identifier: 31:44:DE:AF:5D:79:1D:A6:CE:58:72:E5:43:D8:10:E2:68:B4:EF:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD67B336BADD9566C96510 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b233a42-9e2a-3b0d-abe1-30a887ec1696.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 23.251.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:67:b3:36:ba:dd:95:66:c9:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2602340b-8dd0-470b-bfd7-cb061fcc3e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:32:5d:cc:85:d5:5d:84:d2:c7:8a:8e:ae: a2:d6:76:91:12:6a:09:e6:64:f9:3c:09:69:ad:ab: 87:7e:f9:ba:b0:d0:34:a4:70:3b:1e:be:0b:a3:20: 0a:93:ef:3e:59:89:e2:e2:2a:5c:49:c6:08:1f:b0: ae:83:3d:26:09:9d:63:ba:d4:9e:ab:b6:b9:da:8e: 90:e0:bc:8c:e8:41:b5:6f:ca:a0:98:2c:27:66:f2: 05:c8:c9:5e:ff:ea:90:fe:ae:d0:81:81:41:c1:f4: ac:ee:de:aa:cb:49:f1:92:e3:a7:f9:a2:75:6b:72: fd:2d:b8:48:b4:e2:ae:c8:84:13:0b:52:43:ee:55: bc:ca:15:e7:49:28:33:5a:41:9a:0f:f0:a9:c6:bf: 1a:70:f8:7a:7d:48:cb:40:7f:22:84:f9:64:26:8a: f1:61:5a:78:00:c5:5a:b8:65:72:be:82:7d:b5:3a: 6e:ae:13:8b:71:e1:5e:62:3e:79:a9:fb:89:56:7b: 02:6f:94:63:6a:8b:7f:0e:26:df:50:3f:99:57:0e: 61:ed:a6:94:5e:ef:b7:df:f5:a0:30:77:43:32:fb: e5:7f:be:b0:ae:3f:d9:dd:a5:70:7e:9f:be:19:4e: bd:24:ff:17:82:c9:a7:ce:4d:45:43:92:31:b3:33: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:DE:AF:5D:79:1D:A6:CE:58:72:E5:43:D8:10:E2:68:B4:EF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b233a42-9e2a-3b0d-abe1-30a887ec1696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:56:de:23:bc:aa:41:d1:27:29:c6:ea:a3:79:7f:fa:02:40: 56:b2:a9:55:fb:e8:ee:84:cd:e9:4a:9d:b9:ee:f7:e1:ba:1a: db:6e:fd:81:5f:36:62:8e:34:6d:9e:2f:60:c4:c9:5c:44:28: 26:a6:ba:ad:7a:73:87:ba:04:72:90:24:5a:fd:0b:74:a8:c2: a0:36:95:92:16:49:76:b1:b0:c6:d4:04:c0:cc:e0:f9:20:01: b0:be:b0:e2:7d:2e:40:87:dd:16:48:52:78:10:f8:bb:9f:90: 83:fa:58:fc:b5:e5:c1:91:21:65:59:20:87:90:8b:fb:05:54: af:1d:15:01:06:68:49:62:93:71:4d:fe:3e:0d:86:f6:8e:5f: 2b:62:19:8b:a2:1d:67:80:94:79:92:f4:08:aa:dd:4e:70:ad: aa:e7:29:7c:86:19:d4:05:0d:db:72:e6:b6:59:b5:ee:49:78: 4f:14:1d:f5:af:c8:58:44:64:b1:83:63:62:8b:81:99:78:66: 0c:73:b2:d0:84:00:ec:ea:94:46:0c:f2:e9:a6:7f:61:0f:06: 06:e4:20:dd:90:5e:52:3a:a6:e8:2d:4b:0d:8a:a0:a4:5a:a0: 3f:bb:65:0b:94:d7:ae:c6:92:08:d2:16:b5:7e:3f:27:02:56: 26:de:b8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWezNrrdlWbJZRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjYwMjM0MGItOGRkMC00NzBiLWJmZDctY2IwNjFmY2MzZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI4yXcyF1V2E0seKjq6i1naREmoJ5mT5PAlp rauHfvm6sNA0pHA7Hr4LoyAKk+8+WYni4ipcScYIH7Cugz0mCZ1jutSeq7a52o6Q 4LyM6EG1b8qgmCwnZvIFyMle/+qQ/q7QgYFBwfSs7t6qy0nxkuOn+aJ1a3L9LbhI tOKuyIQTC1JD7lW8yhXnSSgzWkGaD/Cpxr8acPh6fUjLQH8ihPlkJorxYVp4AMVa uGVyvoJ9tTpurhOLceFeYj55qfuJVnsCb5Rjaot/DibfUD+ZVw5h7aaUXu+33/Wg MHdDMvvlf76wrj/Z3aVwfp++GU69JP8Xgsmnzk1FQ5IxszPRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFE3q9deR2mzlhy5UPYEOJotO8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMzNhNDItOWUyYS0z YjBkLWFiZTEtMzBhODg3ZWMxNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxW3iO8qkHRJynG6qN5f/oCQFayqVX76O6EzelKnbnu9+G6Gttu/YFf NmKONG2eL2DEyVxEKCamuq16c4e6BHKQJFr9C3SowqA2lZIWSXaxsMbUBMDM4Pkg AbC+sOJ9LkCH3RZIUngQ+LufkIP6WPy15cGRIWVZIIeQi/sFVK8dFQEGaElik3FN /j4NhvaOXytiGYuiHWeAlHmS9Aiq3U5wrarnKXyGGdQFDdty5rZZte5JeE8UHfWv yFhEZLGDY2KLgZl4ZgxzstCEAOzqlEYM8ummf2EPBgbkIN2QXlI6pugtSw2KoKRa oD+7ZQuU167GkgjSFrV+PycCVibeuA4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:47 2025 by rpki-client