$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa File: d58af5c4-ef02-3f65-8896-f19f84091c13.roa (raw, json) Hash identifier: 8O2GmA2qXYpxSOi3UknPZ+rgt+YBFgmDtchO5C6j7Ro= Subject key identifier: 35:F9:CB:29:F1:8C:D7:C1:E5:A9:34:F8:D0:01:E2:6B:28:69:26:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD7295A6103CE575362A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 23.251.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:72:95:a6:10:3c:e5:75:36:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9191cb2c-f2ee-4c5e-b722-f2954f7648f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:81:51:41:d6:ab:3c:23:23:42:5e:04:dd: f6:4b:e3:a3:83:dd:e0:d5:c6:36:25:8c:59:02:45: 0c:9b:40:9b:ef:d6:ae:1b:64:b8:ed:04:4f:af:71: 9d:aa:b0:21:e7:2a:80:79:a8:0c:51:55:96:90:93: 17:28:98:32:e8:21:51:29:57:73:86:ba:00:a1:f8: 32:0a:cc:a4:ae:b4:dc:45:f8:96:5e:08:e1:69:bc: 88:18:b6:1b:8d:bb:75:6d:5e:cc:9b:76:84:ee:3c: c1:1c:76:fe:c6:57:38:8e:5d:42:76:bc:9d:72:6a: 10:5e:bd:29:ad:c3:52:45:ac:db:19:b7:b3:d6:02: 8b:db:a1:51:3a:86:3b:6a:d4:70:a4:33:36:3e:99: fb:c4:cc:27:67:8a:7e:b0:20:1e:73:25:98:78:33: ca:9f:e4:89:78:71:98:69:fb:b4:04:0f:c8:7c:79: 99:ac:96:7c:96:d8:c8:67:e4:4d:c9:77:0a:e6:35: eb:5f:c1:5c:91:ad:43:4a:c1:ec:5c:e0:aa:9d:ed: 47:29:3e:44:43:00:a4:e1:89:4b:ed:e2:81:39:99: 1a:32:cf:a2:5c:ac:d0:68:82:f9:91:8c:cd:79:80: 2a:98:da:e0:32:83:dd:4f:b4:27:e9:f0:a1:55:84: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:CB:29:F1:8C:D7:C1:E5:A9:34:F8:D0:01:E2:6B:28:69:26:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d58af5c4-ef02-3f65-8896-f19f84091c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5b:7d:aa:06:46:e2:4f:02:92:97:f4:0d:5a:4b:a8:40:ec: b9:d6:bb:01:55:f8:4b:ed:55:44:9e:35:31:e3:4d:1e:90:90: 56:42:fb:30:a5:b5:bf:dc:1d:bb:33:86:9e:f9:a6:4f:07:46: 4d:8b:ad:a5:97:30:5c:44:3d:ce:c1:44:0c:4d:bb:d0:bc:6e: 9d:e9:df:e9:f8:d5:30:ef:e9:be:24:f5:a4:af:43:fa:5e:59: 16:e6:5c:ef:b9:d9:7d:2c:43:49:94:53:f5:04:95:ba:61:64: 31:02:45:a7:75:32:fe:14:16:0b:48:2c:95:12:34:97:9e:41: de:75:56:00:1e:ba:2d:fd:5f:7b:9d:a1:be:5d:a6:f7:32:fe: 16:17:6a:e7:32:d6:64:95:e1:de:01:3c:72:e7:38:18:ca:08: 05:d0:0c:c3:87:6d:6c:2a:34:dc:92:93:cb:51:62:ee:bd:70: 2a:db:4f:b1:f7:89:bf:7a:cf:f0:5d:1f:33:20:f0:8f:bf:12: 99:44:f6:54:51:48:02:90:a6:51:57:40:09:45:25:6d:24:46: 5f:5f:a0:98:45:b2:22:37:08:3f:16:73:04:04:8a:21:ad:6e: 88:81:8e:ec:88:cc:63:17:6c:01:09:3f:32:68:6a:8a:8e:a2: a3:59:d5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXKVphA85XU2KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTE5MWNiMmMtZjJlZS00YzVlLWI3MjItZjI5NTRmNzY0OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQWBUUHWqzwjI0JeBN32S+Ojg93g1cY2JYxZ AkUMm0Cb79auG2S47QRPr3GdqrAh5yqAeagMUVWWkJMXKJgy6CFRKVdzhroAofgy CsykrrTcRfiWXgjhabyIGLYbjbt1bV7Mm3aE7jzBHHb+xlc4jl1CdrydcmoQXr0p rcNSRazbGbez1gKL26FROoY7atRwpDM2Ppn7xMwnZ4p+sCAecyWYeDPKn+SJeHGY afu0BA/IfHmZrJZ8ltjIZ+RNyXcK5jXrX8Fcka1DSsHsXOCqne1HKT5EQwCk4YlL 7eKBOZkaMs+iXKzQaIL5kYzNeYAqmNrgMoPdT7Qn6fChVYSaGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX5yynxjNfB5ak0+NAB4msoaSY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDU4YWY1YzQtZWYwMi0z ZjY1LTg4OTYtZjE5Zjg0MDkxYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1bfaoGRuJPApKX9A1aS6hA7LnWuwFV+EvtVUSeNTHjTR6QkFZC+zCl tb/cHbszhp75pk8HRk2LraWXMFxEPc7BRAxNu9C8bp3p3+n41TDv6b4k9aSvQ/pe WRbmXO+52X0sQ0mUU/UElbphZDECRad1Mv4UFgtILJUSNJeeQd51VgAeui39X3ud ob5dpvcy/hYXaucy1mSV4d4BPHLnOBjKCAXQDMOHbWwqNNySk8tRYu69cCrbT7H3 ib96z/BdHzMg8I+/EplE9lRRSAKQplFXQAlFJW0kRl9foJhFsiI3CD8WcwQEiiGt boiBjuyIzGMXbAEJPzJoaoqOoqNZ1R0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:02 2025 by rpki-client