$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa File: 40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa (raw, json) Hash identifier: MZhX6sk1PNMu9kyHTNMy4B8+Ld4IvTHHn45gXeFXdpo= Subject key identifier: 27:DA:47:5C:9C:42:6E:92:A6:E7:FA:0A:16:E9:AA:1C:0E:C0:00:08 Certificate issuer: /CN=9e180184-106e-41ea-a049-5451e20c2840 Certificate serial: 010D0C9F4328584AEEBF8C0817DFE7E4DF2A9400 Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa Signing time: Wed 13 Aug 2025 21:03:20 +0000 ROA not before: Wed 13 Aug 2025 21:03:20 +0000 ROA not after: Tue 11 Nov 2025 22:03:20 +0000 asID: 401511 IP address blocks: 23.129.228.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:bf:8c:08:17:df:e7:e4:df:2a:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840 Validity Not Before: Aug 13 21:03:20 2025 GMT Not After : Nov 11 22:03:20 2025 GMT Subject: CN=d0b71f3f-fa68-4450-9a17-9eab7ba4be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:5c:a3:c6:d2:0a:e0:7d:1f:2d:3e:c1:42: 14:a4:a3:ad:37:28:55:2e:00:44:be:9f:8b:28:ab: 0b:a0:a4:27:ee:6b:2d:36:16:da:4f:79:c3:2e:90: 42:a0:dd:ac:7e:ca:b5:87:d1:e0:f5:56:86:db:e4: 50:bc:41:be:0b:c0:11:88:7c:93:7a:0e:83:57:b3: e6:40:ad:bd:cb:d6:28:e2:1f:77:02:d0:2e:f6:54: 72:87:bf:fd:03:ae:05:eb:f1:98:77:f2:fa:09:33: f7:31:51:57:f6:46:28:04:87:bf:0e:7b:46:ac:c8: 08:10:59:a1:d3:ef:cd:f1:b6:e6:fa:ac:1c:d4:e5: 01:de:de:48:5b:0e:53:5b:36:bd:93:f8:e2:ac:66: 8c:83:3b:55:d5:cd:ba:29:13:f4:67:41:9a:45:3f: 71:06:5e:3d:65:93:bf:fd:20:02:0f:35:25:64:91: fd:a2:0f:7c:7a:e5:aa:0f:97:7c:77:25:b9:65:b6: 6e:ed:ae:08:07:b8:47:ef:ed:2c:56:86:41:32:35: f8:63:06:59:18:7b:35:85:b1:10:b4:a1:a3:3b:88: a1:33:7f:65:6b:b0:3a:44:a3:ae:15:1a:ea:80:fa: 12:53:b7:b9:cc:96:51:e7:37:8f:f8:88:4d:3f:c7: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:47:5C:9C:42:6E:92:A6:E7:FA:0A:16:E9:AA:1C:0E:C0:00:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl X509v3 Authority Key Identifier: keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer sbgp-ipAddrBlock: critical IPv4: 23.129.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:45:6f:b2:f9:09:f4:57:15:7c:c6:d2:45:34:26:0b:da:b9: 47:2f:8f:f6:18:77:fc:b1:01:06:a4:f5:50:ba:fb:cc:6e:e0: 85:29:fb:ba:f5:b5:55:21:f5:3d:06:41:d3:6e:c0:1a:5f:88: 7d:b4:7b:f0:63:a6:ea:1b:43:3f:4b:25:ea:35:a6:4e:48:aa: 89:90:08:63:a6:b6:40:08:f8:10:3b:de:a2:06:90:8a:1b:67: 85:6a:37:c4:3a:c8:36:de:44:97:5c:56:06:5f:da:d8:52:3a: 0e:08:71:eb:cb:15:ed:04:4c:55:33:6d:72:89:44:0d:71:e9: 95:b2:16:ad:73:b3:df:26:f1:f6:46:6a:f2:8c:a3:b1:91:a6: 6e:90:f6:5a:1e:8e:96:e7:0a:c6:69:2b:fc:af:d0:11:30:48: 6c:a0:e7:9d:76:3b:cb:91:f4:4a:58:8c:7f:bf:32:18:85:f8: 07:57:03:dd:94:89:94:7f:5e:ef:5e:c2:27:20:a6:36:07:18: bd:f6:f6:4c:c7:2c:40:24:73:dc:8d:f1:2a:e3:de:ce:bb:ee: b8:83:09:7c:e3:df:3e:58:9b:32:64:ac:a0:c7:60:9b:b6:63: 38:4e:58:90:28:9b:4d:3a:6c:58:91:01:49:e9:d0:ad:73:48: 79:12:fb:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruv4wIF9/n5N8qlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxODAxODQtMTA2ZS00MWVhLWEwNDktNTQ1MWUyMGMy ODQwMB4XDTI1MDgxMzIxMDMyMFoXDTI1MTExMTIyMDMyMFowLzEtMCsGA1UEAxMk ZDBiNzFmM2YtZmE2OC00NDUwLTlhMTctOWVhYjdiYTRiZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmltco8bSCuB9Hy0+wUIUpKOtNyhVLgBEvp+L KKsLoKQn7mstNhbaT3nDLpBCoN2sfsq1h9Hg9VaG2+RQvEG+C8ARiHyTeg6DV7Pm QK29y9Yo4h93AtAu9lRyh7/9A64F6/GYd/L6CTP3MVFX9kYoBIe/DntGrMgIEFmh 0+/N8bbm+qwc1OUB3t5IWw5TWza9k/jirGaMgztV1c26KRP0Z0GaRT9xBl49ZZO/ /SACDzUlZJH9og98euWqD5d8dyW5ZbZu7a4IB7hH7+0sVoZBMjX4YwZZGHs1hbEQ tKGjO4ihM39la7A6RKOuFRrqgPoSU7e5zJZR5zeP+IhNP8cWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfaR1ycQm6Spuf6ChbpqhwOwAAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4 MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUxZTIwYzI4NDAvNDBiY2VhNzAtOGZjZC0z ODVhLWEzYzItMmM1ZmE1ZTU1ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWUxODAxODQtMTA2ZS00MWVhLWEw NDktNTQ1MWUyMGMyODQwLzllMTgwMTg0LTEwNmUtNDFlYS1hMDQ5LTU0NTFlMjBj Mjg0MC5jcmwwHwYDVR0jBBgwFoAUrAovZ/llPONnk2cyleKZDUGKhh0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUx ZTIwYzI4NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9Fb7L5CfRXFXzG0kU0JgvauUcvj/YYd/yxAQak9VC6+8xu4IUp+7r1 tVUh9T0GQdNuwBpfiH20e/BjpuobQz9LJeo1pk5IqomQCGOmtkAI+BA73qIGkIob Z4VqN8Q6yDbeRJdcVgZf2thSOg4IcevLFe0ETFUzbXKJRA1x6ZWyFq1zs98m8fZG avKMo7GRpm6Q9loejpbnCsZpK/yv0BEwSGyg5512O8uR9EpYjH+/MhiF+AdXA92U iZR/Xu9ewicgpjYHGL329kzHLEAkc9yN8Srj3s677riDCXzj3z5YmzJkrKDHYJu2 YzhOWJAom006bFiRAUnp0K1zSHkS+74= -----END CERTIFICATE-----Generated at Sun Aug 24 10:51:41 2025 by rpki-client