$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa File: f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa (raw, json) Hash identifier: Hx5zGs5u70MsgvA9hs2AAdjaq5TbaHuEe9zBDI/Rw/A= Subject key identifier: 77:05:12:7D:EB:E5:A5:E4:E3:9E:98:38:BC:13:60:B9:B2:1A:12:23 Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584B21CC2C9FEB1D27426ACE2E80 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 54552 IP address blocks: 23.138.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2c:9f:eb:1d:27:42:6a:ce:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d495f997-c51a-4e2d-839f-308038620766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:5a:e2:08:55:ea:e9:26:80:ec:7a:79:b6: 85:40:39:b6:21:a1:62:9e:cb:15:88:72:50:1c:25: 96:34:07:46:be:e2:24:ca:e0:6b:2a:fb:72:c5:37: 63:0c:76:58:1b:57:11:64:68:49:b7:c5:f9:fd:1c: d6:45:23:b9:c9:4e:6e:00:3e:63:03:86:3d:2c:0d: a9:2e:8f:f2:84:d5:3c:72:45:05:ee:40:df:26:9e: 50:eb:22:af:db:71:50:bb:3c:92:d4:ff:96:52:74: 9f:01:19:e6:20:dc:45:46:be:83:a7:03:e9:1a:e5: ce:69:e2:bd:7e:2e:80:c3:bb:88:d4:d5:f2:b4:cb: 6c:65:27:75:97:80:48:4f:74:ba:56:b0:e2:a3:4e: 60:7f:45:b5:cc:17:91:d9:72:b4:99:29:22:0f:13: cd:d7:20:f5:dd:b9:2f:32:66:b6:62:32:45:71:53: 76:6d:e7:66:bd:17:34:6f:50:3f:67:9c:65:6d:4c: 86:fa:82:57:31:0f:89:d9:48:58:f4:fc:68:3e:ab: 6d:e9:c1:32:d3:54:07:29:7d:44:da:72:11:8f:d3: 1f:1a:78:8c:f2:a2:72:b3:85:d9:2a:5d:e6:47:44: e5:80:b3:ba:4d:df:3b:12:47:44:bd:8b:1c:e7:be: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:05:12:7D:EB:E5:A5:E4:E3:9E:98:38:BC:13:60:B9:B2:1A:12:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/f07cede1-aba9-36ee-902d-7cd75fbcbc82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 23.138.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e4:40:c0:ae:87:e8:b6:4a:90:25:fb:7d:d8:e2:b2:0c:53: bb:4f:be:57:d3:f3:ff:6c:cd:49:2d:45:15:ae:e2:f4:58:ec: e9:3f:3e:d5:29:fe:26:22:9b:5d:63:c9:df:29:4c:96:a7:48: 5b:71:5a:db:cf:8f:a8:22:41:ca:95:72:4c:44:b1:53:c4:81: a7:e4:be:32:b6:33:1d:45:11:dc:6b:a2:84:9d:da:48:64:a4: 91:10:38:3e:d2:ed:35:e2:45:b7:d0:74:12:15:54:9d:c3:a9: db:98:5b:57:2b:66:c3:48:ad:57:e5:16:74:1e:68:36:4b:67: df:7e:3c:b1:34:b4:17:bd:a2:c4:0b:59:6e:fa:f7:70:36:5f: 79:94:91:e0:b9:68:00:9d:e6:8f:22:45:c0:0a:0f:ac:01:de: fb:27:15:0f:e4:00:35:8a:1d:39:b5:f0:6d:61:e4:19:80:0f: 5a:cf:e6:c7:f2:22:f0:b3:ef:9b:3c:e1:9a:57:d3:4f:57:fb: 39:f2:bb:ac:c3:80:ed:b4:1f:e3:dc:ef:97:9c:ca:e5:85:ff: 3f:e2:5e:75:58:0d:44:f3:46:6f:da:42:00:03:d4:20:8e:f9: ac:7f:43:73:6d:41:dc:33:7a:44:66:7e:1a:d4:8f:97:76:60: 00:f0:66:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCyf6x0nQmrOLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ5NWY5OTctYzUxYS00ZTJkLTgzOWYtMzA4MDM4NjIwNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jha4ghV6ukmgOx6ebaFQDm2IaFinssViHJQ HCWWNAdGvuIkyuBrKvtyxTdjDHZYG1cRZGhJt8X5/RzWRSO5yU5uAD5jA4Y9LA2p Lo/yhNU8ckUF7kDfJp5Q6yKv23FQuzyS1P+WUnSfARnmINxFRr6DpwPpGuXOaeK9 fi6Aw7uI1NXytMtsZSd1l4BIT3S6VrDio05gf0W1zBeR2XK0mSkiDxPN1yD13bkv Mma2YjJFcVN2bedmvRc0b1A/Z5xlbUyG+oJXMQ+J2UhY9PxoPqtt6cEy01QHKX1E 2nIRj9MfGniM8qJys4XZKl3mR0TlgLO6Td87EkdEvYsc576RBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcFEn3r5aXk456YOLwTYLmyGhIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZjA3Y2VkZTEtYWJhOS0z NmVlLTkwMmQtN2NkNzVmYmNiYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/kQMCuh+i2SpAl+33Y4rIMU7tPvlfT8/9szUktRRWu4vRY7Ok/PtUp /iYim11jyd8pTJanSFtxWtvPj6giQcqVckxEsVPEgafkvjK2Mx1FEdxrooSd2khk pJEQOD7S7TXiRbfQdBIVVJ3DqduYW1crZsNIrVflFnQeaDZLZ99+PLE0tBe9osQL WW7693A2X3mUkeC5aACd5o8iRcAKD6wB3vsnFQ/kADWKHTm18G1h5BmAD1rP5sfy IvCz75s84ZpX009X+znyu6zDgO20H+Pc75ecyuWF/z/iXnVYDUTzRm/aQgAD1CCO +ax/Q3NtQdwzekRmfhrUj5d2YADwZlo= -----END CERTIFICATE-----Generated at Wed Oct 22 00:12:00 2025 by rpki-client