$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json) Hash identifier: DX1nYCI60C+2S3k/JGd4Ae5lfObEo6M39DLiXSvyqss= Subject key identifier: 69:19:93:BD:60:0C:6E:62:08:A9:25:1A:23:CA:5C:8F:FA:8A:99:52 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584AC2E10CD3C937E3F0E1AE1F80 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399989 IP address blocks: 23.143.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:0c:d3:c9:37:e3:f0:e1:ae:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=f83addd0-5bca-4669-a697-d5663ff01ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:17:dd:03:81:d5:53:57:16:1f:9c:fd:de: fc:b6:fe:8d:8e:30:4a:33:e1:c4:fd:3f:b1:2a:ac: 6c:5e:06:03:ad:29:95:0b:72:e4:08:4c:bb:aa:23: 6a:1d:1c:17:85:cf:46:d7:00:06:a1:e3:1d:7f:ad: 24:35:59:1e:77:2e:3c:ce:8e:9b:9f:75:e0:6b:57: d8:1a:02:9d:0b:1d:dc:99:ee:0c:ec:bc:87:6d:6a: 14:f5:ff:02:1f:2a:52:fd:99:42:90:bc:d6:92:88: 15:4f:52:91:7d:f1:57:7f:b1:1b:3e:cb:d8:09:9d: 65:16:c7:c9:60:91:85:8e:ec:e2:cb:d5:5d:43:bb: 17:1b:51:2e:1f:2b:e7:87:be:55:c7:b6:95:25:3b: b6:19:a5:99:04:9d:7a:a7:b5:11:30:59:60:8a:f6: 04:7b:8a:90:9e:cb:28:05:55:21:4d:98:8b:cb:6e: 95:db:cb:0b:2b:40:58:94:8f:2b:0a:c9:74:2f:1e: 74:8c:18:74:86:ca:a4:f2:ea:07:c4:e0:72:97:e6: f0:af:88:04:7c:b8:ae:5f:11:8c:eb:4d:b5:e6:51: 0e:55:24:c0:57:62:4e:8f:db:f8:81:4a:1c:a5:38: bc:a1:d1:0a:9c:f7:24:cc:00:f5:8c:ab:c2:97:ef: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:19:93:BD:60:0C:6E:62:08:A9:25:1A:23:CA:5C:8F:FA:8A:99:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:86:1c:bf:49:56:ac:17:e3:58:06:34:20:e0:23:a3:9e:62: 73:14:e3:7e:ac:d3:2d:35:b9:13:7c:4e:f9:32:03:7a:c0:ed: 10:e1:6e:5e:da:a3:7e:5e:90:8a:ea:7f:14:99:68:66:7c:e4: 80:38:b5:c2:78:03:50:a2:a1:a1:2e:42:78:59:38:f5:3b:9c: 8f:cc:f3:07:d7:aa:5f:82:31:95:5e:28:dd:78:2b:92:7c:b9: 4c:30:02:24:ee:5b:25:1a:be:6c:0e:f0:4a:bc:ea:d1:24:a1: 3a:d1:0d:5b:a7:c4:f7:62:61:79:82:4a:b8:b5:05:7f:60:a0: e1:3d:3a:ff:1d:cc:33:13:d5:09:55:4b:de:c5:51:9c:25:e6: a9:f9:53:fd:20:6c:af:9d:04:a6:2d:cd:93:01:ca:0a:48:ac: 09:ca:7d:9f:1b:f0:eb:38:8d:7b:1d:9a:31:9a:78:b4:ca:5c: 0a:fb:e6:3e:8f:6d:7d:80:26:53:50:63:03:70:21:4c:b0:97: 34:97:cd:e5:3b:7a:73:b3:0a:6d:13:95:ba:15:0d:a5:49:53: 1b:a3:75:10:df:ba:53:c5:7c:41:8f:35:a0:d1:5b:6f:55:ae: 34:6a:1b:f7:39:54:df:f3:cf:9f:c1:4e:69:3d:7f:80:67:d7: 07:b0:b0:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QzTyTfj8OGuH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjgzYWRkZDAtNWJjYS00NjY5LWE2OTctZDU2NjNmZjAxYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha8X3QOB1VNXFh+c/d78tv6NjjBKM+HE/T+x KqxsXgYDrSmVC3LkCEy7qiNqHRwXhc9G1wAGoeMdf60kNVkedy48zo6bn3Xga1fY GgKdCx3cme4M7LyHbWoU9f8CHypS/ZlCkLzWkogVT1KRffFXf7EbPsvYCZ1lFsfJ YJGFjuziy9VdQ7sXG1EuHyvnh75Vx7aVJTu2GaWZBJ16p7URMFlgivYEe4qQnsso BVUhTZiLy26V28sLK0BYlI8rCsl0Lx50jBh0hsqk8uoHxOByl+bwr4gEfLiuXxGM 60215lEOVSTAV2JOj9v4gUocpTi8odEKnPckzAD1jKvCl+8YOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkZk71gDG5iCKklGiPKXI/6iplSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYzUzY2I4MDYtMjdmNC0z NDNhLTlkYjgtNDFkODBhYTNmNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF49oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCGHL9JVqwX41gGNCDgI6OeYnMU436s0y01uRN8TvkyA3rA7RDhbl7a o35ekIrqfxSZaGZ85IA4tcJ4A1CioaEuQnhZOPU7nI/M8wfXql+CMZVeKN14K5J8 uUwwAiTuWyUavmwO8Eq86tEkoTrRDVunxPdiYXmCSri1BX9goOE9Ov8dzDMT1QlV S97FUZwl5qn5U/0gbK+dBKYtzZMBygpIrAnKfZ8b8Os4jXsdmjGaeLTKXAr75j6P bX2AJlNQYwNwIUywlzSXzeU7enOzCm0TlboVDaVJUxujdRDfulPFfEGPNaDRW29V rjRqG/c5VN/zz5/BTmk9f4Bn1wewsB0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:48:09 2025 by rpki-client