$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: rEgNJcgAHXrnjH58nT2Ad1vVzkNqogODpOD/IYA/SUI= Subject key identifier: 30:2C:AE:F7:88:AB:02:C9:73:16:C5:2E:AE:E7:13:D3:FE:A4:65:86 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F4328584B477C66932B06F6AA43645740 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:66:93:2b:06:f6:aa:43:64:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=f0350bf8-e927-4b4f-926a-04d22c9efc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:67:26:cb:3d:fb:57:17:41:31:e7:9c:67: 96:aa:d5:46:41:84:d6:ad:77:42:81:87:51:3d:2e: 6e:bc:51:6b:fd:7d:57:12:d0:0d:85:c4:df:93:70: 52:d2:e9:17:d2:4c:5c:39:27:cf:c0:af:91:9f:1d: 73:01:ea:97:5f:87:9b:89:f7:e7:b1:6d:ba:0d:57: 30:4a:8b:d8:9b:f3:3f:af:9a:26:81:17:29:ed:6f: 02:68:a1:49:f3:bb:87:3e:1d:21:d1:a7:7b:84:d9: 26:b6:75:68:fb:a7:f0:77:f1:ec:83:75:bf:df:69: b2:56:e1:c4:7f:f8:ea:83:81:16:f4:8e:25:b7:93: 08:0a:c1:55:b9:62:14:ae:de:58:21:69:1c:a1:1a: 22:7b:da:ad:79:6a:54:84:df:9b:c0:fc:74:9b:c5: ee:de:b0:b2:6f:6f:e2:e7:60:f9:9e:19:72:e8:01: 2c:fe:c4:25:49:a4:ac:e4:fa:1e:ba:aa:a0:42:d4: 36:25:35:f1:52:d6:fd:96:8d:8e:d2:5c:94:3b:3e: 15:a7:e5:b3:62:4d:ae:29:ee:04:90:31:ca:0d:db: 86:20:b0:3a:bb:cc:5f:f5:72:97:ca:f3:44:99:b3: 52:46:77:a3:64:bc:c8:dc:5b:b0:9d:d9:bd:29:0d: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2C:AE:F7:88:AB:02:C9:73:16:C5:2E:AE:E7:13:D3:FE:A4:65:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:43:e7:7b:47:fa:47:98:51:7a:1b:20:24:64:bb:0a:0d:0f: 5a:d7:44:f9:c6:f0:30:cc:c1:7d:25:32:e0:93:2e:47:f6:d0: 16:fe:ef:95:3d:7e:70:9c:9d:1a:7c:39:22:15:d4:f7:52:5f: 2a:e7:d0:ab:78:18:8a:ec:a1:13:c3:0c:e8:88:f2:24:14:51: f7:8f:9a:d8:ee:17:70:c6:7a:f1:b6:31:37:18:e0:a0:e2:26: 96:7e:81:f0:44:ba:e4:53:93:54:51:ac:fe:ad:ad:8f:7c:3c: 6a:79:aa:1f:8b:79:eb:25:4b:72:e8:3f:35:02:5c:78:03:af: 3a:f9:30:7f:ea:82:52:d1:cf:ae:c1:d9:ff:db:72:c6:ea:a9: fd:65:8b:52:ec:a4:db:8c:03:2f:04:51:3d:4f:41:1a:b9:c5: ab:21:0f:3d:74:83:5c:d3:9c:22:98:ad:df:63:77:14:b2:25: b6:7c:c4:ab:6c:e3:3a:c0:dc:c0:ce:80:28:85:b3:f1:54:1e: 60:d5:1e:60:2c:85:47:ac:2e:ba:dc:09:24:fa:db:66:fc:14: c5:88:13:74:2b:3b:f5:20:b1:81:eb:1b:c3:46:92:4e:43:44: 22:e5:47:5f:9a:b4:0d:5a:7a:97:f3:3d:cb:09:7c:1c:40:2a: 21:98:89:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGaTKwb2qkNkV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZjAzNTBiZjgtZTkyNy00YjRmLTkyNmEtMDRkMjJjOWVmYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFnJss9+1cXQTHnnGeWqtVGQYTWrXdCgYdR PS5uvFFr/X1XEtANhcTfk3BS0ukX0kxcOSfPwK+Rnx1zAeqXX4ebiffnsW26DVcw SovYm/M/r5omgRcp7W8CaKFJ87uHPh0h0ad7hNkmtnVo+6fwd/Hsg3W/32myVuHE f/jqg4EW9I4lt5MICsFVuWIUrt5YIWkcoRoie9qteWpUhN+bwPx0m8Xu3rCyb2/i 52D5nhly6AEs/sQlSaSs5PoeuqqgQtQ2JTXxUtb9lo2O0lyUOz4Vp+WzYk2uKe4E kDHKDduGILA6u8xf9XKXyvNEmbNSRnejZLzI3Fuwndm9KQ2M3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAsrveIqwLJcxbFLq7nE9P+pGWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxD53tH+keYUXobICRkuwoND1rXRPnG8DDMwX0lMuCTLkf20Bb+75U9 fnCcnRp8OSIV1PdSXyrn0Kt4GIrsoRPDDOiI8iQUUfePmtjuF3DGevG2MTcY4KDi JpZ+gfBEuuRTk1RRrP6trY98PGp5qh+LeeslS3LoPzUCXHgDrzr5MH/qglLRz67B 2f/bcsbqqf1li1LspNuMAy8EUT1PQRq5xashDz10g1zTnCKYrd9jdxSyJbZ8xKts 4zrA3MDOgCiFs/FUHmDVHmAshUesLrrcCST622b8FMWIE3QrO/UgsYHrG8NGkk5D RCLlR1+atA1aepfzPcsJfBxAKiGYif0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:15 2025 by rpki-client