$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa File: 391fae6e-c374-3d34-84aa-27f280411df1.roa (raw, json) Hash identifier: cwn8vmdZPryNUujhulcXV2sEi31gZwCiXFy6P98OKuY= Subject key identifier: 82:4F:61:91:1E:E8:C3:91:B6:EC:E5:D5:42:BC:DE:E3:61:51:57:C6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB88D12DC577DE3BF7DB40330 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20473 IP address blocks: 8.9.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:12:dc:57:7d:e3:bf:7d:b4:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=11ac775e-837f-4d59-b9c3-957a69f87488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:cb:68:c4:be:1e:f3:34:df:a2:ff:e1:38:a3: 3d:f2:74:20:ce:89:c4:94:78:d2:60:f2:5d:09:53: 85:92:39:21:a2:27:ed:98:98:1b:0d:34:5f:4a:37: e4:db:3b:21:dc:99:b5:f4:bf:a1:0a:4d:cb:43:a8: 82:48:ae:4d:31:42:c6:97:3a:90:2e:14:f5:5b:ef: 2f:2d:c6:77:c7:09:d3:21:1c:e8:ce:33:54:ff:da: 81:27:7e:85:3a:6d:6f:da:df:89:a1:e0:ce:f4:a5: d1:2f:81:4d:18:b5:80:91:4a:91:7f:ca:ce:9a:25: 11:33:92:90:d0:d1:79:4d:2e:76:d3:cc:6a:20:20: 71:24:07:41:bb:fd:15:60:51:8a:3e:2c:e4:89:83: 14:94:f5:13:3d:0b:b5:25:3a:45:73:76:da:eb:35: 6e:b3:a0:30:31:74:39:f1:f7:7e:d3:e8:f6:b0:1c: 17:4e:bf:65:4a:9b:dc:04:63:62:48:b4:a1:94:be: 66:10:db:95:63:8e:e3:b4:5d:a7:1e:1e:17:c0:50: 8e:f9:65:a9:22:60:20:81:05:ee:2d:be:2f:05:bb: c2:b6:e1:de:4f:95:a5:33:50:68:c5:71:68:a0:eb: b6:ed:34:95:bd:ab:fc:15:a3:83:ad:61:73:33:e3: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4F:61:91:1E:E8:C3:91:B6:EC:E5:D5:42:BC:DE:E3:61:51:57:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:52:92:08:5d:bf:ac:b8:90:5c:d5:33:a8:7c:00:e5:98:15: 06:24:81:4e:b1:9a:fc:0e:61:85:62:a0:b9:e2:de:f7:e7:51: b9:21:7d:c4:8f:fe:1d:ed:0d:19:48:3d:33:45:5c:89:c5:b4: d4:b6:c9:1d:8d:b1:17:19:83:21:c2:46:10:bf:92:41:a2:b9: 08:87:84:90:89:e5:05:ec:4f:df:79:1b:b3:88:80:e4:76:b8: af:df:7e:86:7f:48:17:cd:63:b7:ba:1a:3a:bb:0e:ce:6e:a0: de:75:30:cb:0d:7d:2e:ef:bc:97:7e:49:2c:f0:f7:ce:fc:06: 7f:8f:6e:ed:e7:3c:d5:ad:1b:9c:1d:f0:94:be:29:d4:c1:22: 01:14:a5:85:88:01:97:33:55:5d:e3:f9:11:cf:21:28:62:fd: 4d:9b:6a:19:60:3e:8f:28:c8:79:0c:a0:6a:8f:19:62:78:bc: f5:e0:85:6c:d0:87:13:9f:c0:4a:24:7d:c5:b6:52:5d:87:bf: 9a:03:62:51:0a:13:91:ec:42:33:47:19:a2:c4:b4:c7:c4:b1: c2:e0:0b:69:b0:e9:08:eb:0e:a9:d4:d2:e8:66:66:8f:15:07: cf:89:1f:d0:1c:56:2b:42:1f:90:b1:e1:ad:1e:78:a6:08:5e: 06:cc:9a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRLcV33jv320AzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTFhYzc3NWUtODM3Zi00ZDU5LWI5YzMtOTU3YTY5Zjg3NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+stoxL4e8zTfov/hOKM98nQgzonElHjSYPJd CVOFkjkhoiftmJgbDTRfSjfk2zsh3Jm19L+hCk3LQ6iCSK5NMULGlzqQLhT1W+8v LcZ3xwnTIRzozjNU/9qBJ36FOm1v2t+JoeDO9KXRL4FNGLWAkUqRf8rOmiURM5KQ 0NF5TS5208xqICBxJAdBu/0VYFGKPizkiYMUlPUTPQu1JTpFc3ba6zVus6AwMXQ5 8fd+0+j2sBwXTr9lSpvcBGNiSLShlL5mENuVY47jtF2nHh4XwFCO+WWpImAggQXu Lb4vBbvCtuHeT5WlM1BoxXFooOu27TSVvav8FaODrWFzM+MFXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJPYZEe6MORtuzl1UK83uNhUVfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzkxZmFlNmUtYzM3NC0z ZDM0LTg0YWEtMjdmMjgwNDExZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExSkghdv6y4kFzVM6h8AOWYFQYkgU6xmvwOYYVioLni3vfnUbkhfcSP /h3tDRlIPTNFXInFtNS2yR2NsRcZgyHCRhC/kkGiuQiHhJCJ5QXsT995G7OIgOR2 uK/ffoZ/SBfNY7e6Gjq7Ds5uoN51MMsNfS7vvJd+SSzw9878Bn+Pbu3nPNWtG5wd 8JS+KdTBIgEUpYWIAZczVV3j+RHPIShi/U2bahlgPo8oyHkMoGqPGWJ4vPXghWzQ hxOfwEokfcW2Ul2Hv5oDYlEKE5HsQjNHGaLEtMfEscLgC2mw6QjrDqnU0uhmZo8V B8+JH9AcVitCH5Cx4a0eeKYIXgbMmsU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:35 2025 by rpki-client