$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa File: 9305f653-4589-3b05-9b07-a986191aeaaa.roa (raw, json) Hash identifier: SOIjsLpK56QF4AdNHrBpnbxRCgCJD6ik09QtouteLGo= Subject key identifier: FA:AF:24:4D:8A:C9:3F:4C:7D:59:D5:CE:DD:27:F2:C8:F2:3D:D1:8F Certificate issuer: /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2 Certificate serial: 010D0C9F4328584ADD66633BB3E05A0109EFB600 Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 216360 IP address blocks: 23.185.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:63:3b:b3:e0:5a:01:09:ef:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=27ba5694-6070-47f6-a849-1a5e598e7ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:4a:7e:fa:13:1a:3d:8f:db:f5:32:ec:27: b0:22:c3:48:ff:09:1f:13:22:88:c2:3d:5b:77:51: 80:9f:e8:2f:45:47:6a:93:41:f7:fc:1f:7c:56:29: 67:7c:4a:68:63:3d:87:b1:1f:ad:8e:29:bc:ce:c7: 12:bf:c9:cb:f7:05:bb:86:91:73:32:19:6c:71:b1: 33:af:df:02:ca:0b:9c:35:54:a3:de:9a:89:dd:9a: ba:0a:0a:03:bb:6b:6f:2b:d0:14:42:8f:5f:e5:51: 68:18:49:3f:5c:29:02:fa:8e:6d:11:b1:96:34:62: 10:86:22:7d:d1:c3:89:af:9a:a6:50:7f:29:74:08: fc:e9:41:a0:5e:ca:40:a1:c8:ff:e4:bd:7e:c3:5a: 6c:a9:a0:27:21:65:70:8b:97:5c:9b:88:13:e0:20: b4:3f:3e:78:18:15:ec:6a:0a:9c:0d:d0:78:1a:59: 4e:60:df:c3:31:04:cd:01:d4:9d:e9:9f:ec:0b:9b: 0a:0c:1b:fb:e1:ab:0f:e0:6e:ea:cb:8b:1c:d1:03: 00:ff:10:e4:d2:e6:34:cc:36:3a:78:fa:c1:68:7d: 27:26:e2:ed:97:0f:fa:80:15:6a:5e:7f:67:ee:5d: f9:44:e7:0d:45:51:3a:7c:d0:d4:37:11:97:04:2b: 11:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:24:4D:8A:C9:3F:4C:7D:59:D5:CE:DD:27:F2:C8:F2:3D:D1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/9305f653-4589-3b05-9b07-a986191aeaaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl X509v3 Authority Key Identifier: keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer sbgp-ipAddrBlock: critical IPv4: 23.185.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6c:e2:a1:ff:97:98:90:5e:27:68:65:22:62:57:b7:1d:b4: 6a:b0:e6:ac:70:4d:d5:85:54:0f:4a:41:1a:61:d0:7e:5e:dc: ed:00:72:b5:8c:a5:43:0b:a3:87:4d:f5:a1:c0:c1:25:cb:0a: 85:3b:b9:e8:1a:92:64:00:3f:1e:6d:95:f6:d2:ba:0f:29:1a: da:24:33:8d:92:c7:c7:8f:09:36:01:80:60:d8:5d:f1:7c:3d: ce:ae:dd:d9:52:de:eb:a8:94:46:9d:a9:16:cd:2e:16:b8:b9: 0b:6f:73:ba:a6:ef:a7:b5:04:c3:16:7c:ae:00:53:c3:b3:b4: 28:40:5d:c9:a7:d8:b8:59:79:2c:68:43:03:de:0e:1b:fe:53: 6a:3c:a7:30:fe:6b:d7:cd:a5:0f:f8:df:51:8f:a8:92:b5:bc: 07:a7:6a:bd:8c:11:30:e8:c4:b0:6d:84:93:39:e0:6b:01:67: c7:e3:e2:88:ba:3e:67:ce:97:b7:d4:87:46:70:d7:aa:ef:53: 6d:0b:bd:ef:43:af:5c:42:4a:45:20:bd:ea:38:ce:cb:a8:f7: e7:5e:dc:7c:16:4d:04:fb:b9:c5:b6:f4:2b:0a:f4:24:d9:78: 56:72:07:5f:65:f2:66:cb:b8:45:3a:b1:f8:42:85:c0:b3:b6: 93:33:08:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmM7s+BaAQnvtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M2NjQ2ODMtZDU4ZS00ZDI2LThjZjEtZTVmNWM1ZGMy NGMyMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MjdiYTU2OTQtNjA3MC00N2Y2LWE4NDktMWE1ZTU5OGU3ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5KfvoTGj2P2/Uy7CewIsNI/wkfEyKIwj1b d1GAn+gvRUdqk0H3/B98VilnfEpoYz2HsR+tjim8zscSv8nL9wW7hpFzMhlscbEz r98CygucNVSj3pqJ3Zq6CgoDu2tvK9AUQo9f5VFoGEk/XCkC+o5tEbGWNGIQhiJ9 0cOJr5qmUH8pdAj86UGgXspAocj/5L1+w1psqaAnIWVwi5dcm4gT4CC0Pz54GBXs agqcDdB4GllOYN/DMQTNAdSd6Z/sC5sKDBv74asP4G7qy4sc0QMA/xDk0uY0zDY6 ePrBaH0nJuLtlw/6gBVqXn9n7l35ROcNRVE6fNDUNxGXBCsRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqvJE2KyT9MfVnVzt0n8sjyPdGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2 NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1YzVkYzI0YzIvOTMwNWY2NTMtNDU4OS0z YjA1LTliMDctYTk4NjE5MWFlYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2M2NjQ2ODMtZDU4ZS00ZDI2LThj ZjEtZTVmNWM1ZGMyNGMyL2NjNjY0NjgzLWQ1OGUtNGQyNi04Y2YxLWU1ZjVjNWRj MjRjMi5jcmwwHwYDVR0jBBgwFoAU0GW5Gote3fP6GpwXPbrG4dvkab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzY2NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1 YzVkYzI0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRs4qH/l5iQXidoZSJiV7cdtGqw5qxwTdWFVA9KQRph0H5e3O0AcrWM pUMLo4dN9aHAwSXLCoU7uegakmQAPx5tlfbSug8pGtokM42Sx8ePCTYBgGDYXfF8 Pc6u3dlS3uuolEadqRbNLha4uQtvc7qm76e1BMMWfK4AU8OztChAXcmn2LhZeSxo QwPeDhv+U2o8pzD+a9fNpQ/431GPqJK1vAenar2METDoxLBthJM54GsBZ8fj4oi6 PmfOl7fUh0Zw16rvU20Lve9Dr1xCSkUgveo4zsuo9+de3HwWTQT7ucW29CsK9CTZ eFZyB19l8mbLuEU6sfhChcCztpMzCIo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:06:44 2025 by rpki-client