$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa File: 2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa (raw, json) Hash identifier: Bzrl0yzdKgk4zcxxaa2D8yQlsXfdMWimPgQFkIHxESc= Subject key identifier: A2:2D:F1:B0:EB:A6:A4:3C:4F:87:0B:2F:7F:14:6C:CA:C2:F4:57:AD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB88D134133FB7D294212B580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20473 IP address blocks: 8.12.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:13:41:33:fb:7d:29:42:12:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=cb1edd4f-5350-4847-9a74-edc5d90bf40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:27:d0:72:51:1f:64:89:cf:ea:60:dd:9a: c9:67:3c:d7:18:52:5e:c1:9d:50:14:c8:ad:24:57: 18:5a:84:8f:e5:d1:a0:b3:2c:32:83:e2:72:dd:bd: 5a:e6:dd:92:f5:59:65:61:79:11:4d:39:f0:1d:23: 22:0c:68:21:6f:4e:dd:53:57:31:7d:9a:f0:52:9b: 85:9e:b7:53:e3:06:a8:22:04:e7:17:ab:76:4f:9f: f5:34:fe:af:c9:04:f1:31:53:84:07:f4:e4:1c:03: 9f:44:16:df:14:db:6d:67:32:58:9b:77:d9:21:b1: 47:c7:d2:98:18:24:b2:d2:86:16:3d:d5:18:5a:5e: 37:63:ec:eb:9d:ca:8a:6d:79:91:f4:20:97:b8:23: 8c:fe:e2:ad:81:95:bb:f4:95:16:5e:19:aa:dc:3b: 56:bd:85:db:49:e6:6c:43:c1:1a:87:8c:61:47:8d: fc:3d:74:66:ca:91:48:23:fc:60:11:ad:ec:2f:8c: 46:74:41:ac:14:2c:82:8d:cd:4b:a8:d5:49:eb:87: 6c:a1:d3:a8:3b:fd:2e:45:cf:a8:a1:12:d9:68:41: 3f:a7:7c:fb:e2:0d:f6:a0:5a:31:da:db:0a:e1:73: 16:05:15:87:20:1f:e4:eb:bd:23:0a:25:ee:c6:c1: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:F1:B0:EB:A6:A4:3C:4F:87:0B:2F:7F:14:6C:CA:C2:F4:57:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.12.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:14:0f:f8:6c:65:9c:30:0f:65:ce:74:5c:09:cb:84:42:6e: c4:62:7e:b2:3a:52:41:85:5c:5b:c1:6e:d3:6c:31:24:57:8e: 4b:6a:8d:54:41:1e:79:d3:02:af:86:49:43:b0:f8:32:01:b0: 40:3a:f3:43:c4:20:f9:c3:17:c2:0e:15:c2:6c:e8:f4:b8:93: f5:61:5b:57:a6:ea:f5:84:27:5f:13:51:e4:95:26:5b:62:0e: 21:d7:6e:ce:e4:02:8d:99:dd:6d:1c:e7:ad:92:b9:df:fd:7e: 34:0e:30:6d:85:0c:5d:46:20:a5:e7:40:47:b5:2b:8e:da:c6: e8:ad:02:c9:1a:cd:c5:be:a6:4e:05:cf:80:89:7c:8d:8a:26: dc:b8:d0:fb:51:4a:d8:9e:c8:28:37:13:09:b2:39:39:16:b5: 9c:b6:d7:ba:e3:da:e6:cb:d7:88:d3:e7:1d:47:42:9f:ed:3e: ec:0f:80:fb:d3:4e:42:a2:82:17:7e:4f:c8:46:13:2f:81:00: ca:64:c1:b1:24:d2:1f:4f:4f:4d:fe:36:88:b7:b4:75:cb:c3: 7e:5c:e0:0b:3e:b9:35:39:69:d2:ec:b0:30:6c:3a:f1:70:91: 0f:35:d0:80:e9:17:ce:9f:72:4e:8c:ae:69:ce:5b:09:f9:41: 34:48:73:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRNBM/t9KUIStYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2IxZWRkNGYtNTM1MC00ODQ3LTlhNzQtZWRjNWQ5MGJmNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy4n0HJRH2SJz+pg3ZrJZzzXGFJewZ1QFMit JFcYWoSP5dGgsywyg+Jy3b1a5t2S9VllYXkRTTnwHSMiDGghb07dU1cxfZrwUpuF nrdT4waoIgTnF6t2T5/1NP6vyQTxMVOEB/TkHAOfRBbfFNttZzJYm3fZIbFHx9KY GCSy0oYWPdUYWl43Y+zrncqKbXmR9CCXuCOM/uKtgZW79JUWXhmq3DtWvYXbSeZs Q8Eah4xhR438PXRmypFII/xgEa3sL4xGdEGsFCyCjc1LqNVJ64dsodOoO/0uRc+o oRLZaEE/p3z74g32oFox2tsK4XMWBRWHIB/k670jCiXuxsGCvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIt8bDrpqQ8T4cLL38UbMrC9FetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmFjNjczYTYtNDdmMS0z ZGE0LThjNWQtZWFmY2QwZTc2Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkUD/hsZZwwD2XOdFwJy4RCbsRifrI6UkGFXFvBbtNsMSRXjktqjVRB HnnTAq+GSUOw+DIBsEA680PEIPnDF8IOFcJs6PS4k/VhW1em6vWEJ18TUeSVJlti DiHXbs7kAo2Z3W0c562Sud/9fjQOMG2FDF1GIKXnQEe1K47axuitAskazcW+pk4F z4CJfI2KJty40PtRStieyCg3EwmyOTkWtZy217rj2ubL14jT5x1HQp/tPuwPgPvT TkKighd+T8hGEy+BAMpkwbEk0h9PT03+Noi3tHXLw35c4As+uTU5adLssDBsOvFw kQ810IDpF86fck6MrmnOWwn5QTRIc3s= -----END CERTIFICATE-----Generated at Tue Nov 4 18:38:44 2025 by rpki-client