$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa File: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (raw, json) Hash identifier: +t5VOtq4ZGc8dV5qfQOneRzg7ismvSRuQeYDNkD8Prk= Subject key identifier: 56:EB:08:B0:69:D5:28:AC:E9:C7:D4:19:2A:71:C8:18:27:35:8D:DD Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584B3126F5EFCC011282FAA16900 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 8095 IP address blocks: 23.181.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f5:ef:cc:01:12:82:fa:a1:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=db384c21-73b6-4676-9c30-67e9328d04f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:27:99:01:de:90:d0:b4:b5:5e:fe:88:82: c1:6e:28:6d:44:e0:88:9b:7b:ca:c0:fc:86:91:c2: 08:4f:ed:66:06:2a:55:68:48:b1:13:70:20:64:1b: 07:7a:a7:a5:c0:24:f8:9d:7d:e8:8e:06:05:e2:8e: a4:f8:ee:e5:be:eb:da:be:9f:51:3f:ca:5a:3e:e1: f4:fa:96:33:5a:74:1f:97:2d:c9:94:59:5e:db:c1: 71:b5:24:b0:3d:6f:02:e4:84:a9:cb:bb:fe:0a:cf: fc:5b:9a:5b:f6:3c:31:c4:a5:3f:06:5e:be:2f:2c: da:a7:72:15:1a:05:ba:11:7a:5e:9e:74:00:9e:d6: 91:11:69:52:2e:8b:c0:26:50:83:2c:62:82:f4:e1: f8:ab:18:dd:77:6c:51:2c:93:5e:0f:76:7f:d5:1e: fd:88:a7:6c:75:2f:c8:09:2a:3a:70:d6:f0:33:91: ca:23:8b:6e:a2:af:f4:a4:99:89:d5:bb:2d:d0:0c: 3f:37:d3:a7:d8:3e:07:d6:9e:95:25:35:3f:b2:aa: 99:49:b3:05:fa:30:30:56:11:50:4b:a2:d8:6f:a0: 20:58:95:e1:fb:3e:37:79:ad:83:af:0e:bf:48:68: df:54:c1:cd:37:e0:2f:bd:73:98:61:f7:85:95:1f: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EB:08:B0:69:D5:28:AC:E9:C7:D4:19:2A:71:C8:18:27:35:8D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: 23.181.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:92:6e:01:a8:f5:81:23:d4:a7:2c:55:2d:86:47:d7:91:8a: c1:40:fa:2f:6c:3e:dd:14:60:9e:93:61:f8:fe:9d:f3:3a:4b: 03:16:ef:9f:5e:d5:fd:4c:22:fc:24:b4:27:2b:21:c4:9e:39: 32:70:04:b6:3e:48:c4:d7:4c:19:8c:f1:db:7c:53:9a:9f:db: 2a:ee:7e:25:39:dd:b1:43:35:d3:40:2b:52:83:70:c6:32:d9: cd:c2:1b:ef:70:6b:72:68:42:bc:3d:f6:e6:41:f8:e2:6a:13: 63:1c:4e:c2:ba:04:be:aa:3b:1f:3e:29:a3:60:42:81:ab:0a: 18:20:ec:bf:67:76:33:d8:82:51:29:c9:4c:b8:5b:39:46:d1: a8:58:92:7f:5b:8a:65:e0:15:0e:71:a2:ff:ab:4b:30:59:00: 08:d9:57:9c:81:0d:f7:fd:a7:ee:df:7d:91:bd:b8:4f:d6:a9: 08:2b:2e:11:54:7c:e1:df:7d:b7:b7:62:03:f6:e3:d0:b1:48: d3:39:7e:16:bf:73:8d:3c:d1:81:f6:51:07:3d:34:1a:d1:81: 78:85:12:7c:1e:55:72:6f:4f:31:95:e0:3c:33:e4:a2:87:a9: f6:53:a0:ca:be:15:8c:b2:d5:11:9d:6a:9d:37:0f:aa:4d:ea: 22:a8:de:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvXvzAESgvqhaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk ZGIzODRjMjEtNzNiNi00Njc2LTljMzAtNjdlOTMyOGQwNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqInmQHekNC0tV7+iILBbihtROCIm3vKwPyG kcIIT+1mBipVaEixE3AgZBsHeqelwCT4nX3ojgYF4o6k+O7lvuvavp9RP8paPuH0 +pYzWnQfly3JlFle28FxtSSwPW8C5ISpy7v+Cs/8W5pb9jwxxKU/Bl6+Lyzap3IV GgW6EXpennQAntaREWlSLovAJlCDLGKC9OH4qxjdd2xRLJNeD3Z/1R79iKdsdS/I CSo6cNbwM5HKI4tuoq/0pJmJ1bst0Aw/N9On2D4H1p6VJTU/sqqZSbMF+jAwVhFQ S6LYb6AgWJXh+z43ea2Drw6/SGjfVMHNN+AvvXOYYfeFlR9QzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbrCLBp1Sis6cfUGSpxyBgnNY3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvOGY2OTBlZGMtNmYyMS0z M2VkLWI3NTgtZWQ2OGQ2ZWExY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiSbgGo9YEj1KcsVS2GR9eRisFA+i9sPt0UYJ6TYfj+nfM6SwMW759e 1f1MIvwktCcrIcSeOTJwBLY+SMTXTBmM8dt8U5qf2yrufiU53bFDNdNAK1KDcMYy 2c3CG+9wa3JoQrw99uZB+OJqE2McTsK6BL6qOx8+KaNgQoGrChgg7L9ndjPYglEp yUy4WzlG0ahYkn9bimXgFQ5xov+rSzBZAAjZV5yBDff9p+7ffZG9uE/WqQgrLhFU fOHffbe3YgP249CxSNM5fha/c4080YH2UQc9NBrRgXiFEnweVXJvTzGV4Dwz5KKH qfZToMq+FYyy1RGdap03D6pN6iKo3gk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:03 2025 by rpki-client