$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa File: 8e2b994c-1b4c-3add-91c2-76c003453ce8.roa (raw, json) Hash identifier: pxXSaikYlnCujloHS8kLTdeD/nVged30DrSheyLUFNs= Subject key identifier: EC:9D:E3:49:D4:E8:AE:E5:DE:B7:20:FA:D9:B4:F1:84:6B:B1:55:69 Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F4328584B0CDC1BF16E30F6AFE7447280 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 401401 IP address blocks: 23.191.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1b:f1:6e:30:f6:af:e7:44:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=98ef3b68-6434-4163-b20d-d4b16bc93b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:bc:77:b8:50:1d:45:76:36:ef:e4:55:60: 32:42:e4:74:97:a8:2b:86:0e:5b:3b:eb:6e:ec:12: 76:37:79:66:d3:92:68:be:51:8c:7f:26:32:84:cd: 21:69:19:9b:50:f8:1c:e7:ae:92:f2:e6:0b:97:09: 82:27:d9:a6:56:eb:84:60:02:e5:6d:3a:a2:ed:e0: 73:8e:ca:0b:1f:5c:26:49:77:af:5e:4c:8a:da:ef: 08:69:91:4e:88:48:5f:86:53:44:07:88:b1:1a:ed: 73:9c:50:29:84:cd:b1:a0:cc:1f:f1:7b:d0:7d:e6: b2:a8:c4:e0:cd:20:c6:03:47:1f:dd:76:ec:6f:a1: bb:67:9f:2e:33:75:49:dc:0c:a3:ce:2d:54:f9:29: 9f:be:27:10:4f:4c:5b:c2:2c:5c:1c:df:5b:ce:c4: 84:cb:33:1a:46:35:46:b4:4a:e4:d1:45:1e:84:68: 23:03:76:ba:6c:6b:3c:8d:17:7a:48:27:5a:14:06: e5:70:5f:1b:ab:41:ab:60:39:c7:40:59:30:95:82: 11:3b:ee:ff:7b:12:de:37:12:dd:62:05:b4:e7:9d: bc:9f:c2:bd:db:aa:39:ce:78:96:3c:4c:1d:1e:87: cb:fc:9e:01:b2:83:aa:45:da:aa:95:42:ef:13:59: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:E3:49:D4:E8:AE:E5:DE:B7:20:FA:D9:B4:F1:84:6B:B1:55:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv4: 23.191.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dc:10:dd:55:31:70:53:34:68:ce:53:79:26:69:05:bc:e4: ba:23:1c:eb:42:46:73:dc:ec:b1:a3:49:0b:6b:89:45:5c:fe: ed:72:33:dc:e7:ce:6c:b9:d1:59:08:5e:7d:0a:06:86:91:97: fb:1e:14:fd:ca:06:64:e4:f5:e0:ed:dc:f3:3c:ab:3b:ef:72: 6c:18:55:24:6f:52:12:ed:01:f6:f7:c5:63:08:46:32:2c:b6: 92:0c:a2:f1:3f:73:2b:04:99:be:23:0f:e1:58:8e:96:bd:df: 2b:47:7e:ac:1f:ec:7d:1c:6c:6b:fb:f2:3f:75:79:7a:7e:73: 2d:5e:f3:cb:06:29:89:ed:01:80:34:3f:f3:eb:99:6a:4d:b5: 89:62:b1:04:6e:40:c2:b5:de:b3:d1:26:f8:aa:ed:c4:cc:44: 0b:1a:c0:ed:1d:e2:c0:c1:65:f9:89:b8:35:26:fb:99:9d:d2: e6:69:cf:e9:70:b3:64:db:ee:1d:bb:68:5b:69:26:07:b4:f1: a8:b2:a9:7f:79:06:1b:bb:ad:95:1d:03:77:b1:09:a0:99:da: 6e:03:f3:7f:3d:27:d0:7f:59:a4:95:c8:43:44:aa:2e:56:92: 15:20:19:82:ed:0f:c5:fd:a7:4b:d1:da:3e:2c:eb:37:86:a0: 54:b8:70:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BvxbjD2r+dEcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OThlZjNiNjgtNjQzNC00MTYzLWIyMGQtZDRiMTZiYzkzYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW28d7hQHUV2Nu/kVWAyQuR0l6grhg5bO+tu 7BJ2N3lm05JovlGMfyYyhM0haRmbUPgc566S8uYLlwmCJ9mmVuuEYALlbTqi7eBz jsoLH1wmSXevXkyK2u8IaZFOiEhfhlNEB4ixGu1znFAphM2xoMwf8XvQfeayqMTg zSDGA0cf3Xbsb6G7Z58uM3VJ3Ayjzi1U+SmfvicQT0xbwixcHN9bzsSEyzMaRjVG tErk0UUehGgjA3a6bGs8jRd6SCdaFAblcF8bq0GrYDnHQFkwlYIRO+7/exLeNxLd YgW05528n8K926o5zniWPEwdHofL/J4BsoOqRdqqlULvE1mMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyd40nU6K7l3rcg+tm08YRrsVVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvOGUyYjk5NGMtMWI0Yy0z YWRkLTkxYzItNzZjMDAzNDUzY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjcEN1VMXBTNGjOU3kmaQW85LojHOtCRnPc7LGjSQtriUVc/u1yM9zn zmy50VkIXn0KBoaRl/seFP3KBmTk9eDt3PM8qzvvcmwYVSRvUhLtAfb3xWMIRjIs tpIMovE/cysEmb4jD+FYjpa93ytHfqwf7H0cbGv78j91eXp+cy1e88sGKYntAYA0 P/PrmWpNtYlisQRuQMK13rPRJviq7cTMRAsawO0d4sDBZfmJuDUm+5md0uZpz+lw s2Tb7h27aFtpJge08aiyqX95Bhu7rZUdA3exCaCZ2m4D8389J9B/WaSVyENEqi5W khUgGYLtD8X9p0vR2j4s6zeGoFS4cHA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:04 2025 by rpki-client