$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17f6d607-e63c-3872-9b63-f2579300b387.roa File: 17f6d607-e63c-3872-9b63-f2579300b387.roa (raw, json) Hash identifier: E99u514W5GxkbDT6aRWTy+ogUGgb0//iH+4oxfvH0d0= Subject key identifier: 84:87:D2:48:81:B2:17:5D:5E:C5:1B:B6:28:B0:95:08:CF:40:E1:36 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B1AD1B15077CE7BE761D29720 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17f6d607-e63c-3872-9b63-f2579300b387.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35554 IP address blocks: 23.230.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b1:50:77:ce:7b:e7:61:d2:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=bed0f785-3541-4302-a041-475b9ea34e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:3a:1a:a9:4c:be:df:2b:c1:54:21:6f:73: 46:71:26:3a:df:40:42:d2:80:d7:34:c7:83:c8:50: cf:96:94:cd:65:28:47:30:1c:4d:cf:24:d8:d7:41: f8:21:a6:f0:da:eb:b9:e1:f2:4a:05:cf:22:23:8b: ff:8f:ce:1c:a1:e6:e4:cb:d0:94:a1:f7:d2:15:85: cc:ab:82:b5:32:82:73:2f:1a:0d:10:cc:93:29:ce: b0:43:12:e7:48:7b:2d:2c:58:ff:eb:57:a8:28:b5: dc:db:ac:cc:56:e1:2b:e5:97:d2:c6:a9:cd:3e:ac: 7a:41:4e:ad:41:32:dd:3b:e1:5a:33:89:96:03:e4: 4e:49:0f:95:df:a0:76:d6:8e:c7:44:1c:9d:54:eb: 6f:12:29:d1:ee:09:69:34:d9:39:25:53:4d:7a:c3: ff:18:3f:3f:59:9a:bf:1b:d9:4e:d8:e5:83:02:e2: 30:c0:1c:a5:b2:a9:9e:20:6d:3b:bc:f8:d3:39:0c: 0f:71:aa:91:90:7e:ae:2a:1a:e6:61:9c:42:ee:42: 59:b9:4e:82:60:5b:c9:16:90:6c:da:79:3a:e6:53: d2:40:0d:58:9f:1d:f5:c7:74:56:e7:92:4a:08:ab: f2:f4:3e:3e:7c:f2:e6:04:48:10:45:ac:dc:ba:d9: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:D2:48:81:B2:17:5D:5E:C5:1B:B6:28:B0:95:08:CF:40:E1:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17f6d607-e63c-3872-9b63-f2579300b387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c3:9f:07:55:86:81:7a:97:04:d7:ee:d5:10:0f:71:9f:c3: da:a3:d5:3c:65:4a:a0:3f:5f:13:47:29:89:69:91:99:5c:a8: c4:fc:67:4f:9b:35:eb:08:fc:68:e7:44:9b:50:e9:c0:4e:ad: eb:71:e0:6b:1b:02:27:a5:18:36:a2:d3:06:3c:f6:f1:d6:37: 71:33:c8:11:0c:1a:8e:b9:a7:fa:91:2a:ab:0a:25:1e:18:38: 7f:76:8f:ec:a3:2b:b6:3d:72:cd:b2:cf:f6:2c:b0:2f:b7:7d: bc:d3:1c:d2:31:48:71:58:fe:e1:dc:35:51:8f:1b:a5:c6:2a: 83:a6:d8:4d:f4:55:77:57:74:25:b0:18:bf:b6:99:11:f6:d1: 88:51:22:97:e2:16:89:15:b5:32:dc:f0:3a:ca:60:7b:7b:1a: 2c:3b:ee:8a:ed:b6:60:ef:6a:79:f1:47:7c:8f:f2:d8:2d:dc: 7a:79:ed:79:e4:48:d9:0e:ff:b2:54:de:85:bf:57:7d:2d:cd: fe:fc:2d:01:d5:24:5d:0f:ff:de:e3:3d:21:8f:06:7d:1f:37: 09:ba:f1:d4:eb:df:f9:82:0f:fc:c9:2a:0e:0d:65:8c:80:8a: 19:06:00:d4:c6:8d:07:ad:b5:c6:22:a4:3c:ec:fb:0a:68:e5: 0b:ba:e0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bFQd85752HSlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YmVkMGY3ODUtMzU0MS00MzAyLWEwNDEtNDc1YjllYTM0ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLw6GqlMvt8rwVQhb3NGcSY630BC0oDXNMeD yFDPlpTNZShHMBxNzyTY10H4Iabw2uu54fJKBc8iI4v/j84coebky9CUoffSFYXM q4K1MoJzLxoNEMyTKc6wQxLnSHstLFj/61eoKLXc26zMVuEr5ZfSxqnNPqx6QU6t QTLdO+FaM4mWA+ROSQ+V36B21o7HRBydVOtvEinR7glpNNk5JVNNesP/GD8/WZq/ G9lO2OWDAuIwwBylsqmeIG07vPjTOQwPcaqRkH6uKhrmYZxC7kJZuU6CYFvJFpBs 2nk65lPSQA1Ynx31x3RW55JKCKvy9D4+fPLmBEgQRazcutmZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISH0kiBshddXsUbtiiwlQjPQOE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTdmNmQ2MDctZTYzYy0z ODcyLTliNjMtZjI1NzkzMDBiMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHDnwdVhoF6lwTX7tUQD3Gfw9qj1TxlSqA/XxNHKYlpkZlcqMT8Z0+b NesI/GjnRJtQ6cBOretx4GsbAielGDai0wY89vHWN3EzyBEMGo65p/qRKqsKJR4Y OH92j+yjK7Y9cs2yz/YssC+3fbzTHNIxSHFY/uHcNVGPG6XGKoOm2E30VXdXdCWw GL+2mRH20YhRIpfiFokVtTLc8DrKYHt7Giw77orttmDvannxR3yP8tgt3Hp57Xnk SNkO/7JU3oW/V30tzf78LQHVJF0P/97jPSGPBn0fNwm68dTr3/mCD/zJKg4NZYyA ihkGANTGjQettcYipDzs+wpo5Qu64M0= -----END CERTIFICATE-----Generated at Wed Nov 5 06:33:55 2025 by rpki-client