$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa File: 2777582d-66eb-3ff0-9d65-00628aec15bc.roa (raw, json) Hash identifier: ka5AiidhcozS6CYc428NmQbYc4x04Z9ikJ8zPZ0p3nk= Subject key identifier: 4D:05:02:43:70:7E:18:E5:8B:0C:E1:E8:AD:6E:F6:35:68:4B:6D:78 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BBE405DB707F5432F2C6F8D20 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 25623 IP address blocks: 8.20.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5d:b7:07:f5:43:2f:2c:6f:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=b44365cb-ec04-47ad-9628-1924aaf99a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:a1:6b:97:59:9a:8d:02:17:df:ab:53:c5: 34:24:d2:22:50:59:33:f1:48:b0:8e:3f:20:fb:55: 52:1b:ee:96:49:96:1a:e2:8f:58:2c:99:fe:e1:b3: a3:67:13:cd:1c:03:48:bc:59:2d:14:ac:55:e1:cf: e7:99:b8:e7:fa:fc:b3:8f:29:43:ae:5b:9e:fd:c2: da:ef:6b:b9:8f:28:ac:65:5f:a3:4b:0e:07:4a:cd: 43:e1:13:02:dd:66:ad:41:57:79:e1:68:4e:53:b2: 8e:cd:58:15:2e:ba:6c:e8:da:6a:65:53:ac:1b:f4: ed:7e:0e:c9:b1:69:64:51:18:5f:f3:02:a8:57:0d: 7b:7f:87:eb:db:3a:35:15:0b:c5:41:e9:96:9a:9e: 94:15:44:42:b9:28:8c:b2:21:e8:30:fe:02:ca:38: 4d:99:e4:ba:d6:cc:7f:58:14:77:1d:45:39:57:d6: b8:c8:db:e6:47:6d:6a:3f:d8:83:c1:05:dd:9a:ef: a7:b0:bd:31:9e:8f:9c:f9:e6:d4:59:33:58:5a:8b: 61:18:50:47:69:c8:bc:2a:5f:95:ce:eb:6a:77:45: 69:7a:b5:08:a1:7b:40:3a:f7:2d:ec:46:ab:d5:5f: 62:68:5f:05:4d:17:55:4a:d5:67:d0:6e:de:42:5a: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:02:43:70:7E:18:E5:8B:0C:E1:E8:AD:6E:F6:35:68:4B:6D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2777582d-66eb-3ff0-9d65-00628aec15bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d9:11:8c:ce:a7:a2:46:7b:c4:66:e3:d2:de:72:9f:31:07: b9:44:21:56:14:ae:5c:ea:4d:f1:0c:cd:18:16:a9:92:17:a4: 25:4d:1a:59:f7:36:ec:af:7c:db:3e:3b:22:0a:39:a8:53:4e: 48:81:e4:31:43:73:81:55:36:bd:aa:4e:e3:8a:3d:4e:83:c8: 1b:3e:c8:36:10:b0:44:63:17:9c:3b:72:f3:42:25:9f:f2:63: ea:05:76:e9:a0:95:82:8a:b7:65:b5:bc:51:c1:81:b6:bf:d7: 0d:65:37:ca:4c:8d:d8:65:ce:d8:7c:c3:ea:93:6a:5b:b4:dc: b2:ee:ae:3c:bd:f3:f8:64:36:2a:7d:8a:79:c0:fa:dd:70:6e: 51:8a:17:47:e5:de:03:a8:22:88:19:5c:1e:99:c4:f5:67:39: b2:e9:34:e2:76:c0:b9:2e:46:3f:4d:0a:22:6d:20:eb:88:28: 0d:fc:0c:13:a8:61:49:92:54:22:52:97:37:2f:6a:cf:84:f4: 91:33:46:bb:95:cc:a5:f0:e4:78:51:bf:fc:22:bf:ed:67:e4: f9:92:e1:d3:20:4f:0d:4a:77:f4:e2:d7:06:cb:b7:ed:59:65: 76:64:ee:63:bd:ac:f9:cf:6f:86:6f:a0:05:ed:36:d4:ce:50: 49:c3:67:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF23B/VDLyxvjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjQ0MzY1Y2ItZWMwNC00N2FkLTk2MjgtMTkyNGFhZjk5YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRyha5dZmo0CF9+rU8U0JNIiUFkz8Uiwjj8g +1VSG+6WSZYa4o9YLJn+4bOjZxPNHANIvFktFKxV4c/nmbjn+vyzjylDrlue/cLa 72u5jyisZV+jSw4HSs1D4RMC3WatQVd54WhOU7KOzVgVLrps6NpqZVOsG/Ttfg7J sWlkURhf8wKoVw17f4fr2zo1FQvFQemWmp6UFURCuSiMsiHoMP4CyjhNmeS61sx/ WBR3HUU5V9a4yNvmR21qP9iDwQXdmu+nsL0xno+c+ebUWTNYWothGFBHaci8Kl+V zutqd0VperUIoXtAOvct7Ear1V9iaF8FTRdVStVn0G7eQlo6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0FAkNwfhjliwzh6K1u9jVoS214MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjc3NzU4MmQtNjZlYi0z ZmYwLTlkNjUtMDA2MjhhZWMxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBS/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHZEYzOp6JGe8Rm49Lecp8xB7lEIVYUrlzqTfEMzRgWqZIXpCVNGln3 NuyvfNs+OyIKOahTTkiB5DFDc4FVNr2qTuOKPU6DyBs+yDYQsERjF5w7cvNCJZ/y Y+oFdumglYKKt2W1vFHBgba/1w1lN8pMjdhlzth8w+qTalu03LLurjy98/hkNip9 innA+t1wblGKF0fl3gOoIogZXB6ZxPVnObLpNOJ2wLkuRj9NCiJtIOuIKA38DBOo YUmSVCJSlzcvas+E9JEzRruVzKXw5HhRv/wiv+1n5PmS4dMgTw1Kd/Ti1wbLt+1Z ZXZk7mO9rPnPb4ZvoAXtNtTOUEnDZ7M= -----END CERTIFICATE-----Generated at Tue Nov 4 15:59:12 2025 by rpki-client