$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c9e9a37-003b-3feb-a868-cfee36e5daf1.roa File: 3c9e9a37-003b-3feb-a868-cfee36e5daf1.roa (raw, json) Hash identifier: Bf+rmBYHLLOONAEXk34wZugQZ/0BFBt891sN+eMTuXU= Subject key identifier: A5:70:76:D9:6E:BC:54:83:29:FB:71:74:74:E2:54:E9:E9:1C:8C:52 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D194437159479EE3CD480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c9e9a37-003b-3feb-a868-cfee36e5daf1.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 23.230.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:19:44:37:15:94:79:ee:3c:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=18efc8cf-ed05-4a26-a250-997c8a50bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:cb:60:d4:9b:31:81:9e:b0:ef:65:e4:2e: 48:b9:ca:a6:88:d2:b7:a3:18:2a:4a:1e:20:ed:ee: 26:cc:48:eb:80:82:5b:6c:76:d6:a8:a4:51:ca:fb: 50:75:90:6e:45:65:f4:6c:be:1a:26:69:3c:38:64: 5a:16:15:93:28:7b:fd:f1:24:74:21:08:34:5a:53: a1:b4:1c:4f:42:bd:36:9e:94:18:2b:2c:f7:3e:4a: 1f:b3:42:b1:79:79:e5:ee:71:c1:37:99:9b:2a:a5: 75:e3:ff:43:a6:2b:dc:81:24:80:ac:54:b2:f9:bd: 73:22:c0:96:cc:a9:2e:c7:24:52:1c:ed:35:ef:08: b2:37:5b:6c:2e:42:66:3c:02:4b:9e:32:e9:3b:b4: f6:ce:d5:39:99:e3:e0:2f:bd:37:bf:b3:be:5f:ba: 37:6d:1c:aa:a3:82:7d:09:45:fa:02:f6:60:b7:f7: a0:7b:57:c2:2f:e0:03:b1:0a:e2:b2:77:72:d2:99: 07:95:b0:32:01:30:39:b4:86:4b:bf:f6:55:3c:9d: 7e:0f:d0:24:3e:8e:92:06:70:9d:11:c8:6e:f1:6e: 72:18:f2:66:69:5f:74:a1:72:61:ef:46:e3:a9:c3: 3c:2c:d1:da:7e:56:be:95:b1:82:08:ba:cc:52:86: 9e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:76:D9:6E:BC:54:83:29:FB:71:74:74:E2:54:E9:E9:1C:8C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c9e9a37-003b-3feb-a868-cfee36e5daf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2a:f8:fb:41:be:88:90:1f:c9:19:a3:16:17:a5:f7:a8:4f: 00:6d:2c:d8:e8:91:cb:7e:aa:6d:41:63:2e:df:b5:69:57:47: 31:d7:d1:d3:93:3f:3b:dd:43:5f:e2:cf:60:b4:76:12:8d:82: 68:3b:c7:82:1e:81:81:17:ca:9f:7c:c8:5a:2b:db:aa:ec:0a: 65:ef:95:6a:aa:57:be:7c:b6:81:79:86:10:24:4e:ec:77:b4: 42:20:ce:93:cc:71:f9:89:ac:b6:40:79:ec:cf:19:ba:75:6a: 91:4b:b2:ff:fc:25:ff:9a:df:02:ae:26:3f:bb:80:01:e1:dc: ab:6e:15:af:ae:fd:86:6d:0c:83:b2:9f:fc:4e:b8:89:76:8b: c7:04:dd:56:2c:8d:c8:e1:48:86:71:8b:7d:0e:17:27:a9:f8: 0e:5f:92:83:00:0d:c9:98:12:1d:79:53:cd:13:86:82:f6:f8: f4:da:5f:e0:bc:e4:0d:32:1a:1a:d8:86:ca:4d:8f:4f:11:a0: 77:38:36:64:b7:63:56:51:93:74:21:49:a5:df:b7:d4:b7:62: 9a:7f:e1:b7:f5:a8:bd:ec:06:76:ef:82:46:fc:d6:53:84:1a: 51:03:5e:9d:22:30:39:8a:3c:ef:7e:be:60:23:dd:a1:5e:a1: a2:8f:8a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRlENxWUee481IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MThlZmM4Y2YtZWQwNS00YTI2LWEyNTAtOTk3YzhhNTBiYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQPLYNSbMYGesO9l5C5IucqmiNK3oxgqSh4g 7e4mzEjrgIJbbHbWqKRRyvtQdZBuRWX0bL4aJmk8OGRaFhWTKHv98SR0IQg0WlOh tBxPQr02npQYKyz3Pkofs0KxeXnl7nHBN5mbKqV14/9DpivcgSSArFSy+b1zIsCW zKkuxyRSHO017wiyN1tsLkJmPAJLnjLpO7T2ztU5mePgL703v7O+X7o3bRyqo4J9 CUX6AvZgt/ege1fCL+ADsQrisndy0pkHlbAyATA5tIZLv/ZVPJ1+D9AkPo6SBnCd Echu8W5yGPJmaV90oXJh70bjqcM8LNHafla+lbGCCLrMUoaeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVwdtluvFSDKftxdHTiVOnpHIxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2M5ZTlhMzctMDAzYi0z ZmViLWE4NjgtY2ZlZTM2ZTVkYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4q+PtBvoiQH8kZoxYXpfeoTwBtLNjokct+qm1BYy7ftWlXRzHX0dOT PzvdQ1/iz2C0dhKNgmg7x4IegYEXyp98yFor26rsCmXvlWqqV758toF5hhAkTux3 tEIgzpPMcfmJrLZAeezPGbp1apFLsv/8Jf+a3wKuJj+7gAHh3KtuFa+u/YZtDIOy n/xOuIl2i8cE3VYsjcjhSIZxi30OFyep+A5fkoMADcmYEh15U80ThoL2+PTaX+C8 5A0yGhrYhspNj08RoHc4NmS3Y1ZRk3QhSaXft9S3Ypp/4bf1qL3sBnbvgkb81lOE GlEDXp0iMDmKPO9+vmAj3aFeoaKPig0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:51 2025 by rpki-client