$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa File: 535a32ab-3dd9-3d77-84e0-1305e35edb43.roa (raw, json) Hash identifier: i+BPa/TqG6hXEjMPIPEW/PnpvTo9+v3aX2oQx3fJfas= Subject key identifier: 71:C5:AA:17:66:3B:97:5C:87:4E:68:38:31:10:23:84:AE:A6:9A:AD Certificate issuer: /CN=ea182918-fbda-4bd7-9427-e289276ef48c Certificate serial: 010D0C9F4328584AFAB68D130F1074A81FE15F00 Authority key identifier: F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 21868 IP address blocks: 23.168.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8d:13:0f:10:74:a8:1f:e1:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea182918-fbda-4bd7-9427-e289276ef48c Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=2399690d-03d4-44f7-b762-aeed66a9aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:4e:3e:db:a5:d8:26:92:38:1b:cd:0a:e7: 54:f8:6b:e0:cc:b9:33:98:97:04:8a:dd:83:d3:e5: 10:b6:65:21:25:9f:ed:22:28:56:25:6e:9b:c8:4d: dd:08:3b:35:d1:c6:58:c4:c4:ca:76:20:26:72:4c: f2:18:6c:7e:ff:57:9d:cd:97:6b:7e:e4:82:df:75: 67:51:72:ee:9b:c4:8f:07:16:3b:eb:21:79:71:aa: 3b:95:dd:0e:38:75:0a:be:4a:92:80:f5:99:4b:43: e5:d0:ba:8d:08:5d:67:8b:3c:90:65:f2:ce:db:ca: e2:ed:1d:54:8e:56:9a:36:18:ee:e1:96:62:ab:c4: 59:4d:43:9c:72:45:a4:98:e0:b7:c1:0b:4b:a0:14: 5f:54:19:7f:4e:b0:58:64:81:b2:8d:8f:3f:d3:cc: c7:02:a0:5f:70:d0:31:e2:63:25:b6:76:21:1d:f7: 91:f9:10:0c:ed:38:e7:ff:d2:99:95:2b:0d:4e:f4: df:4f:50:79:fc:11:4c:97:dc:53:ef:b2:e1:a6:06: 21:27:bb:cb:d3:a9:52:b1:fc:43:f3:9c:82:f6:6f: 26:2b:ca:ad:1a:a5:a6:80:95:98:9f:04:9b:35:a8: 27:4e:2a:d3:1d:c0:3c:7c:ca:0d:75:21:6c:d4:56: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C5:AA:17:66:3B:97:5C:87:4E:68:38:31:10:23:84:AE:A6:9A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/535a32ab-3dd9-3d77-84e0-1305e35edb43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c/ea182918-fbda-4bd7-9427-e289276ef48c.crl X509v3 Authority Key Identifier: keyid:F4:EE:97:6B:CE:0C:49:07:0C:32:C2:B0:E0:F3:27:89:C8:21:7A:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea182918-fbda-4bd7-9427-e289276ef48c.cer sbgp-ipAddrBlock: critical IPv4: 23.168.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4b:01:00:90:e7:93:8f:d6:a0:02:ce:48:c7:0f:aa:e1:4a: 0a:bf:7c:2d:3b:a8:dd:09:4f:c5:32:7f:01:ac:43:bf:d5:c9: 92:7b:a6:b0:66:f0:7d:85:56:49:3c:b1:cb:d2:a6:dc:b7:d8: 19:82:0a:d5:6d:22:b2:e0:f6:61:20:a4:42:c3:78:96:fd:d3: 68:a2:1e:87:ab:e3:29:0a:ed:56:27:d7:d3:d6:1a:ef:6b:62: 33:f8:3e:84:f6:9f:66:bb:02:4f:50:ad:0e:5f:f4:55:2d:03: d9:d6:d9:25:73:f6:31:c0:54:cd:32:7f:ce:ce:70:bd:ce:ef: f0:52:a1:46:d4:d2:49:6d:99:ef:0a:5a:19:48:bd:78:42:6f: c7:0e:21:ea:fe:ca:c3:25:30:3b:cd:d4:94:76:98:d9:b6:83: 77:9b:90:72:de:9a:35:1b:50:bf:e7:52:33:94:da:c4:08:b6: ee:fa:cd:fd:12:1c:85:c8:bb:05:f3:2e:44:35:93:76:52:56: 17:14:74:9f:e8:19:c2:4f:7a:39:44:4d:6e:a9:e3:56:a1:07: e0:67:a2:af:b5:52:55:f3:a3:43:f4:85:2d:2b:72:80:5c:e2: b5:e8:3e:b2:e2:cf:86:62:0c:c8:52:f7:5e:03:1a:d1:37:a7: a3:61:6b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6to0TDxB0qB/hXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWExODI5MTgtZmJkYS00YmQ3LTk0MjctZTI4OTI3NmVm NDhjMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MjM5OTY5MGQtMDNkNC00NGY3LWI3NjItYWVlZDY2YTlhYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VOPtul2CaSOBvNCudU+GvgzLkzmJcEit2D 0+UQtmUhJZ/tIihWJW6byE3dCDs10cZYxMTKdiAmckzyGGx+/1edzZdrfuSC33Vn UXLum8SPBxY76yF5cao7ld0OOHUKvkqSgPWZS0Pl0LqNCF1nizyQZfLO28ri7R1U jlaaNhju4ZZiq8RZTUOcckWkmOC3wQtLoBRfVBl/TrBYZIGyjY8/08zHAqBfcNAx 4mMltnYhHfeR+RAM7Tjn/9KZlSsNTvTfT1B5/BFMl9xT77LhpgYhJ7vL06lSsfxD 85yC9m8mK8qtGqWmgJWYnwSbNagnTirTHcA8fMoNdSFs1FbwKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHFqhdmO5dch05oODEQI4SuppqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4 MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5Mjc2ZWY0OGMvNTM1YTMyYWItM2RkOS0z ZDc3LTg0ZTAtMTMwNWUzNWVkYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWExODI5MTgtZmJkYS00YmQ3LTk0 MjctZTI4OTI3NmVmNDhjL2VhMTgyOTE4LWZiZGEtNGJkNy05NDI3LWUyODkyNzZl ZjQ4Yy5jcmwwHwYDVR0jBBgwFoAU9O6Xa84MSQcMMsKw4PMnicgheowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTE4MjkxOC1mYmRhLTRiZDctOTQyNy1lMjg5 Mjc2ZWY0OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6h4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtLAQCQ55OP1qACzkjHD6rhSgq/fC07qN0JT8UyfwGsQ7/VyZJ7prBm 8H2FVkk8scvSpty32BmCCtVtIrLg9mEgpELDeJb902iiHoer4ykK7VYn19PWGu9r YjP4PoT2n2a7Ak9QrQ5f9FUtA9nW2SVz9jHAVM0yf87OcL3O7/BSoUbU0kltme8K WhlIvXhCb8cOIer+ysMlMDvN1JR2mNm2g3ebkHLemjUbUL/nUjOU2sQItu76zf0S HIXIuwXzLkQ1k3ZSVhcUdJ/oGcJPejlETW6p41ahB+Bnoq+1UlXzo0P0hS0rcoBc 4rXoPrLiz4ZiDMhS914DGtE3p6Nhazg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:48 2025 by rpki-client