$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa File: 612ea9aa-fef5-3461-89b7-4f93773ef913.roa (raw, json) Hash identifier: JAH51mv49MvSLe71tnUhnP/nS3A6nDI00QlJl+vP8iA= Subject key identifier: 80:AA:01:18:3F:46:85:46:FB:55:4A:18:3B:34:E0:46:41:F5:73:1F Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Certificate serial: 010D0C9F4328584B1F017D03BFC12C60608A2540 Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 10103 IP address blocks: 23.187.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:7d:03:bf:c1:2c:60:60:8a:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=c333fe74-06a2-4ddc-a423-1a435eb1fd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:a0:60:bf:39:d7:ff:9c:d3:a3:4d:b1:23: 5d:59:c7:81:1d:a4:77:a5:a2:d0:3f:86:02:7c:4f: 7a:1e:8c:82:2b:dd:de:9c:40:48:ce:73:1b:c9:34: 0f:cb:22:e2:4d:c9:d9:23:de:d1:b8:06:a9:76:95: cf:65:97:83:18:7d:ec:da:36:1b:13:6a:4c:dc:16: 4f:ea:6d:5e:2e:af:c4:71:14:d6:24:35:ec:b3:bd: 50:fa:40:57:86:90:57:8f:84:ae:87:c5:ce:c5:7b: 4f:2c:0a:18:3c:13:6a:30:d3:7b:85:70:27:08:e7: de:85:b5:7c:71:68:3c:d7:f7:af:ed:ed:7b:68:21: 34:2e:ab:03:df:68:3e:d6:db:14:6d:b0:97:18:4b: e0:83:32:dd:62:dd:20:24:7e:b4:5f:a5:26:0d:42: 6a:50:c4:26:f6:84:72:ee:51:db:92:20:00:02:25: af:fc:96:66:07:34:b7:89:11:b8:be:b5:40:eb:8b: 64:a3:64:53:44:f5:95:9a:a3:c9:22:10:14:67:2c: 56:72:88:6b:8f:2c:af:1a:b2:75:07:65:32:0a:17: f2:e9:3d:b9:dc:5a:c7:2a:c8:23:8f:98:ef:42:1c: 53:2a:2a:a7:01:c7:ba:d6:55:f7:11:bc:e3:1a:5d: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AA:01:18:3F:46:85:46:FB:55:4A:18:3B:34:E0:46:41:F5:73:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl X509v3 Authority Key Identifier: keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer sbgp-ipAddrBlock: critical IPv4: 23.187.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:d5:f3:40:e4:9a:11:ef:bd:5f:7b:d1:8b:bb:3d:26:dc: ed:85:63:3e:c5:fa:29:bf:38:fa:aa:d3:86:3a:85:f1:f3:28: 37:65:fd:7b:c8:d4:8f:b0:dc:35:7b:56:c9:45:bc:98:29:d2: 19:a1:06:21:2a:6c:3d:b8:4e:c7:12:13:29:30:2f:4d:c5:83: f9:83:c3:cb:35:51:ed:f3:1b:1c:ad:39:f1:22:74:87:28:91: bc:b9:7e:3a:57:4e:09:27:d8:55:3a:76:8c:f4:7f:93:27:16: 53:d5:9f:76:90:09:7c:e5:31:a2:9d:ff:d9:4b:85:30:a5:56: c8:83:74:7b:35:28:85:db:fa:64:07:bd:46:ff:85:41:73:c2: 1b:3e:b7:37:72:6f:f4:b6:11:d5:cf:aa:48:3d:a1:91:3c:77: 7b:ca:1d:ac:bd:cf:1b:2e:ac:f4:04:c8:e2:3f:ca:08:c7:ca: 2d:9a:d2:58:f5:51:49:77:14:86:dc:2d:87:6a:5f:fc:fb:f5: 14:36:8c:bb:db:17:75:51:46:a3:3c:49:97:52:67:3e:c4:0d: 3b:a8:52:26:99:b6:13:bd:68:8a:c8:b5:27:a7:6e:f9:b0:32: ec:19:7d:b7:f4:3f:1d:7d:84:03:9a:61:9f:49:6c:23:51:f4: 35:1a:de:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAX0Dv8EsYGCKJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3 NGFhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzMzM2ZlNzQtMDZhMi00ZGRjLWE0MjMtMWE0MzVlYjFmZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMmgYL851/+c06NNsSNdWceBHaR3paLQP4YC fE96HoyCK93enEBIznMbyTQPyyLiTcnZI97RuAapdpXPZZeDGH3s2jYbE2pM3BZP 6m1eLq/EcRTWJDXss71Q+kBXhpBXj4Suh8XOxXtPLAoYPBNqMNN7hXAnCOfehbV8 cWg81/ev7e17aCE0LqsD32g+1tsUbbCXGEvggzLdYt0gJH60X6UmDUJqUMQm9oRy 7lHbkiAAAiWv/JZmBzS3iRG4vrVA64tko2RTRPWVmqPJIhAUZyxWcohrjyyvGrJ1 B2UyChfy6T253FrHKsgjj5jvQhxTKiqnAce61lX3EbzjGl3ydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICqARg/RoVG+1VKGDs04EZB9XMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3 MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvNjEyZWE5YWEtZmVmNS0z NDYxLTg5YjctNGY5Mzc3M2VmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7soMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWA1fNA5JoR771fe9GLuz0m3O2FYz7F+im/OPqq04Y6hfHzKDdl/XvI 1I+w3DV7VslFvJgp0hmhBiEqbD24TscSEykwL03Fg/mDw8s1Ue3zGxytOfEidIco kby5fjpXTgkn2FU6doz0f5MnFlPVn3aQCXzlMaKd/9lLhTClVsiDdHs1KIXb+mQH vUb/hUFzwhs+tzdyb/S2EdXPqkg9oZE8d3vKHay9zxsurPQEyOI/ygjHyi2a0lj1 UUl3FIbcLYdqX/z79RQ2jLvbF3VRRqM8SZdSZz7EDTuoUiaZthO9aIrItSenbvmw MuwZfbf0Px19hAOaYZ9JbCNR9DUa3mE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:01 2025 by rpki-client