$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/03bda483-886f-35dc-9027-ce665a0d9db0.roa File: 03bda483-886f-35dc-9027-ce665a0d9db0.roa (raw, json) Hash identifier: mOjYOdByZuGHNF9iUCuHvQCLAKxjW8mvypjBlHFtub8= Subject key identifier: 43:3F:00:B0:94:D7:E9:99:91:5B:1C:84:2A:0B:B6:D3:97:21:A1:35 Certificate issuer: /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Certificate serial: 010D0C9F4328584AD3A1102611744632351650C0 Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/03bda483-886f-35dc-9027-ce665a0d9db0.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 396908 IP address blocks: 23.175.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:10:26:11:74:46:32:35:16:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=0b570c03-7383-48ec-a887-725e13c7bc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:aa:58:0a:9b:50:b9:a5:65:b6:67:35:a3: 6f:1e:49:cb:6e:2d:06:ab:d8:a4:8c:32:7f:7a:35: 1f:a1:9f:9b:7d:9e:47:d7:86:dd:17:b5:83:6d:4e: b6:5c:1a:81:92:42:d7:34:5d:74:20:3c:c8:bc:bc: 9a:d3:c5:df:29:08:7a:64:c9:2a:25:21:f0:7b:16: 64:0f:7b:3c:00:37:4c:54:c2:ae:c6:81:07:40:9f: 8b:71:a7:3c:76:55:d4:f8:06:d6:8c:a6:d9:69:40: 11:be:e3:34:2d:43:20:14:2c:b9:ab:b6:21:88:64: da:d4:ea:10:4d:e5:45:bd:dd:ed:b2:36:a2:c8:29: c2:4d:c9:b8:ba:0e:22:ac:c0:2c:b8:0f:fb:c3:5c: 6d:15:ee:0e:e6:7a:91:8c:2e:e0:fb:b7:e5:4c:4f: e4:55:5f:45:bd:a2:a6:f3:e4:09:5e:96:36:3d:aa: 8f:70:82:6a:1d:2f:01:c4:1f:65:1f:77:73:42:2d: 69:b7:3f:e2:30:46:e8:1f:df:96:15:27:d9:d4:e6: f9:e8:04:6c:2d:14:e7:32:21:68:ca:b6:62:7a:f7: 51:40:02:ee:73:5a:4b:67:6c:5a:85:f6:3f:ee:f4: d2:2a:71:18:ee:34:10:9b:8a:70:a9:f0:91:16:bc: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3F:00:B0:94:D7:E9:99:91:5B:1C:84:2A:0B:B6:D3:97:21:A1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/03bda483-886f-35dc-9027-ce665a0d9db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl X509v3 Authority Key Identifier: keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer sbgp-ipAddrBlock: critical IPv4: 23.175.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c5:f6:29:19:5c:be:ca:b7:72:50:3c:24:54:fa:49:00:10: 30:6f:3a:57:1d:99:8d:a6:39:79:74:60:1a:2e:1b:33:b0:56: a4:57:c4:61:5a:f1:fa:bb:0f:9d:70:48:41:19:55:4b:19:c1: f1:ec:1d:62:5d:e1:ad:37:0b:b3:66:ca:6b:34:e9:17:36:a7: bd:cd:01:76:0c:f9:4d:5f:4a:ab:34:91:92:38:6d:7c:9d:28: 1e:f9:5a:d7:86:9e:f9:8b:19:7d:a1:22:6d:8f:04:4d:52:89: 0f:a7:85:4c:59:61:81:01:16:ed:6d:63:3c:2a:38:d6:09:9a: 92:b6:a9:52:21:95:68:e1:25:e9:d4:f7:e0:83:01:08:7e:e7: d2:96:7f:ba:71:5c:9d:f7:b0:e8:df:30:90:97:6c:7f:4a:12: 4f:39:d7:0e:32:64:cf:9d:39:c6:24:a3:55:ae:88:c2:3a:f0: 83:9e:b4:11:31:51:78:06:30:aa:40:18:8a:5a:2f:ca:f0:1a: 98:5a:9c:c1:ec:63:fc:27:e1:f3:db:4a:57:c1:6c:24:91:57: 24:6b:1f:bc:39:53:fd:39:fa:0d:05:1c:1e:14:a7:d1:23:c0: 21:65:29:12:d1:8d:c7:1c:a5:b5:6f:97:16:d1:ea:64:ea:f1: a5:f8:16:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRAmEXRGMjUWUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0 MjYzMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MGI1NzBjMDMtNzM4My00OGVjLWE4ODctNzI1ZTEzYzdiYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS6qWAqbULmlZbZnNaNvHknLbi0Gq9ikjDJ/ ejUfoZ+bfZ5H14bdF7WDbU62XBqBkkLXNF10IDzIvLya08XfKQh6ZMkqJSHwexZk D3s8ADdMVMKuxoEHQJ+Lcac8dlXU+AbWjKbZaUARvuM0LUMgFCy5q7YhiGTa1OoQ TeVFvd3tsjaiyCnCTcm4ug4irMAsuA/7w1xtFe4O5nqRjC7g+7flTE/kVV9FvaKm 8+QJXpY2PaqPcIJqHS8BxB9lH3dzQi1ptz/iMEboH9+WFSfZ1Ob56ARsLRTnMiFo yrZievdRQALuc1pLZ2xahfY/7vTSKnEY7jQQm4pwqfCRFrwe9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM/ALCU1+mZkVschCoLttOXIaE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvMDNiZGE0ODMtODg2Zi0z NWRjLTkwMjctY2U2NjVhMGQ5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2 NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1 NGY4NjQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF69YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnF9ikZXL7Kt3JQPCRU+kkAEDBvOlcdmY2mOXl0YBouGzOwVqRXxGFa 8fq7D51wSEEZVUsZwfHsHWJd4a03C7Nmyms06Rc2p73NAXYM+U1fSqs0kZI4bXyd KB75WteGnvmLGX2hIm2PBE1SiQ+nhUxZYYEBFu1tYzwqONYJmpK2qVIhlWjhJenU 9+CDAQh+59KWf7pxXJ33sOjfMJCXbH9KEk851w4yZM+dOcYko1WuiMI68IOetBEx UXgGMKpAGIpaL8rwGphanMHsY/wn4fPbSlfBbCSRVyRrH7w5U/05+g0FHB4Up9Ej wCFlKRLRjcccpbVvlxbR6mTq8aX4Fm0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:40:51 2025 by rpki-client