$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/bf1b9349-97f8-3f13-9874-7ac4f7d48d7c.roa File: bf1b9349-97f8-3f13-9874-7ac4f7d48d7c.roa (raw, json) Hash identifier: ytOszYwdll/PMv/jfnIIUhyRGatWKBgAKiZhME9P5As= Subject key identifier: E9:1E:25:D0:10:7E:D6:B9:57:CD:E9:EF:C5:44:53:1C:2A:7E:0E:28 Certificate issuer: /CN=deaf388e-6941-424e-9f96-abe06598e29c Certificate serial: 010D0C9F4328584AFD813035212CAD6B8E3FBB10 Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/bf1b9349-97f8-3f13-9874-7ac4f7d48d7c.roa Signing time: Wed 27 Aug 2025 01:00:32 +0000 ROA not before: Wed 27 Aug 2025 01:00:32 +0000 ROA not after: Tue 25 Nov 2025 02:00:32 +0000 asID: 135883 IP address blocks: 23.138.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:81:30:35:21:2c:ad:6b:8e:3f:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c Validity Not Before: Aug 27 01:00:32 2025 GMT Not After : Nov 25 02:00:32 2025 GMT Subject: CN=be8c294c-524c-4bb3-a3b3-1118ff276a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:07:ac:5a:9e:4f:08:48:52:6f:8b:10:e0: aa:94:00:dc:6c:e4:b5:2a:f0:6c:67:65:d8:ec:b7: e8:af:b3:28:2d:fb:58:9f:ae:d4:12:1b:f4:74:55: 8e:be:66:47:ee:13:f9:a1:b5:33:8e:14:28:fe:ba: a5:d6:a6:d8:c1:49:9d:2f:58:68:f0:66:18:7a:08: 7a:5b:36:d0:5d:76:b1:67:a7:5d:2f:d6:3f:95:d5: 83:bd:bb:f7:be:2d:ee:c8:c7:1c:3d:de:2b:c6:66: bd:60:28:ab:de:54:3f:f9:f8:a7:1b:54:88:d7:f4: bd:74:8f:9e:8c:b5:3e:f7:b9:79:34:a6:f3:78:5a: 2f:c1:1b:1b:cb:bc:49:02:ae:62:e7:30:1f:d3:f1: 18:a2:a2:cf:cd:6e:66:1d:8d:46:fa:2a:13:53:b1: 58:db:2a:6a:c0:46:70:b2:36:11:62:f7:b5:30:b6: 9a:ce:72:53:c9:b4:66:e7:6d:75:bf:1b:b1:76:eb: 0c:ff:6c:ca:02:22:25:e2:10:e9:e7:bd:76:2b:a4: 7c:64:a5:8b:b7:d7:a1:c3:5d:5a:53:a1:06:29:c4: 93:78:f0:70:a6:6a:f9:48:9f:38:65:8b:7f:de:98: 77:63:20:74:06:2d:5b:df:10:13:9e:4f:59:69:ed: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1E:25:D0:10:7E:D6:B9:57:CD:E9:EF:C5:44:53:1C:2A:7E:0E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/bf1b9349-97f8-3f13-9874-7ac4f7d48d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl X509v3 Authority Key Identifier: keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer sbgp-ipAddrBlock: critical IPv4: 23.138.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f5:42:b9:66:e5:de:4e:f3:39:e2:8b:50:ab:41:4e:21:b2: f3:4a:3d:88:3b:d7:71:e5:bf:41:51:45:86:43:1c:79:0a:3a: a0:19:ad:a0:6b:2f:8b:5f:cb:64:55:a3:dc:70:0a:0c:17:25: 30:af:3d:a2:92:86:8e:b7:89:9a:ba:03:d6:7b:a0:56:ea:a1: 38:ad:1f:45:17:6b:2c:a7:8f:ee:6c:00:7c:b5:e6:5d:cc:68: 45:1e:05:23:dc:e1:ff:55:24:a6:fb:79:55:eb:de:dc:9a:3d: 2f:3d:3c:ff:59:70:be:40:fc:d2:8d:12:b2:12:aa:39:be:73: 9a:31:9e:06:76:c6:4c:eb:fa:6b:a3:2f:63:8c:ee:81:4e:78: 4a:3d:49:8d:f6:43:74:ee:08:41:9c:da:bd:b7:a2:51:9b:b4: b5:18:2e:03:ea:46:07:23:ce:8e:f0:70:f7:c0:fa:aa:b7:db: a9:4f:81:d5:f4:0e:65:6f:60:21:c2:29:7e:cb:fb:df:55:96: e6:3b:86:3d:ce:e5:7c:6c:6c:ed:03:72:2e:09:4d:57:ad:16: d5:51:c8:5a:d4:2b:5c:73:07:22:9e:20:d3:bd:6e:08:72:3a: b1:0f:f8:2d:2a:a2:02:fd:c9:6f:22:59:35:fc:cd:86:90:49: 8b:4f:ee:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9gTA1ISyta44/uxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThl MjljMB4XDTI1MDgyNzAxMDAzMloXDTI1MTEyNTAyMDAzMlowLzEtMCsGA1UEAxMk YmU4YzI5NGMtNTI0Yy00YmIzLWEzYjMtMTExOGZmMjc2YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0oHrFqeTwhIUm+LEOCqlADcbOS1KvBsZ2XY 7Lfor7MoLftYn67UEhv0dFWOvmZH7hP5obUzjhQo/rql1qbYwUmdL1ho8GYYegh6 WzbQXXaxZ6ddL9Y/ldWDvbv3vi3uyMccPd4rxma9YCir3lQ/+finG1SI1/S9dI+e jLU+97l5NKbzeFovwRsby7xJAq5i5zAf0/EYoqLPzW5mHY1G+ioTU7FY2ypqwEZw sjYRYve1MLaaznJTybRm5211vxuxdusM/2zKAiIl4hDp5712K6R8ZKWLt9ehw11a U6EGKcSTePBwpmr5SJ84ZYt/3ph3YyB0Bi1b3xATnk9Zae3T9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkeJdAQfta5V83p78VEUxwqfg4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFm Mzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvYmYxYjkzNDktOTdmOC0z ZjEzLTk4NzQtN2FjNGY3ZDQ4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVhZjM4OGUtNjk0MS00MjRlLTlm OTYtYWJlMDY1OThlMjljL2RlYWYzODhlLTY5NDEtNDI0ZS05Zjk2LWFiZTA2NTk4 ZTI5Yy5jcmwwHwYDVR0jBBgwFoAU08yKMqfd0vAFIgVggYqZufYSxWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUw NjU5OGUyOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH31Qrlm5d5O8znii1CrQU4hsvNKPYg713Hlv0FRRYZDHHkKOqAZraBr L4tfy2RVo9xwCgwXJTCvPaKSho63iZq6A9Z7oFbqoTitH0UXayynj+5sAHy15l3M aEUeBSPc4f9VJKb7eVXr3tyaPS89PP9ZcL5A/NKNErISqjm+c5oxngZ2xkzr+muj L2OM7oFOeEo9SY32Q3TuCEGc2r23olGbtLUYLgPqRgcjzo7wcPfA+qq326lPgdX0 DmVvYCHCKX7L+99VluY7hj3O5XxsbO0Dci4JTVetFtVRyFrUK1xzByKeINO9bghy OrEP+C0qogL9yW8iWTX8zYaQSYtP7hU= -----END CERTIFICATE-----Generated at Tue Oct 21 05:11:32 2025 by rpki-client