$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97f78edb-e48e-31da-8422-42a9ab9bac30.roa File: 97f78edb-e48e-31da-8422-42a9ab9bac30.roa (raw, json) Hash identifier: QNM76oBeF7T3LY9/lgL+qo8OvJlQ60J94b3YaKwBsPw= Subject key identifier: 76:D5:FD:6F:7D:D7:30:BA:57:D6:80:2F:F4:F9:FE:A8:EF:D0:E5:32 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B3DB6EE02EC22EF86C168D800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97f78edb-e48e-31da-8422-42a9ab9bac30.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 23.230.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:ee:02:ec:22:ef:86:c1:68:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=38072aaa-fff5-469b-968a-fc297e482312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:65:d3:5f:45:e4:92:ff:92:d0:eb:3d:1c: c4:99:fa:21:42:28:25:77:68:44:a9:28:a9:ab:61: 7f:71:52:be:d1:01:8c:16:bf:7f:9a:7e:a9:49:4f: a6:de:63:c0:fd:4b:32:03:68:ce:cd:4e:f7:50:1a: ba:e4:40:f1:52:42:b4:ec:81:78:40:6d:00:6d:99: c3:b4:b4:6d:97:30:86:f6:f4:5b:ba:67:20:0d:23: 6e:b7:e1:fc:4e:2e:5b:d7:21:4e:a5:e5:e6:f2:6d: 99:20:d8:88:c2:12:16:4d:c1:ee:36:61:46:4e:86: 47:f3:48:b4:d1:57:42:cf:c0:02:0e:15:f3:70:ec: 40:30:61:38:e6:cd:d9:6a:7c:6a:77:0e:b5:61:98: 7a:e8:9d:b7:42:bf:13:c4:d1:af:46:24:75:11:f6: d9:dc:47:9b:81:6b:6e:bf:e3:d6:70:13:06:30:7b: f5:8d:62:11:76:d6:dd:62:ae:6d:d0:48:ec:50:ec: 99:9d:0c:f1:c8:42:e0:a9:60:32:44:f2:6d:6c:6f: f8:6b:82:cf:8c:31:9f:eb:3d:c8:96:6c:37:e5:46: 01:3b:35:7a:6f:18:29:50:6a:0a:10:75:6e:bb:c5: c0:74:1f:4c:d2:d8:0c:b4:5d:7a:21:84:a8:f6:ed: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:FD:6F:7D:D7:30:BA:57:D6:80:2F:F4:F9:FE:A8:EF:D0:E5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97f78edb-e48e-31da-8422-42a9ab9bac30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0a:c3:1d:2d:5e:32:4a:15:16:a8:f7:7f:31:27:26:2b:2f: fe:e1:6a:dd:d8:3f:6e:be:bd:92:c8:43:8c:20:f9:8b:6e:99: 98:f2:57:65:0d:4b:95:24:5c:c7:4d:cb:8b:21:63:3b:ac:3e: 03:a2:cf:26:70:ce:68:57:73:13:6f:82:f8:eb:c3:c3:97:a9: 9a:82:56:75:43:0d:2f:78:8b:39:ad:f3:4a:03:30:f3:3f:a4: d8:fa:7c:5b:b2:41:32:61:3e:e9:c5:53:4f:70:29:0f:f2:c6: fb:0a:da:dd:9b:57:9a:8d:a4:97:ed:14:03:99:91:74:9a:de: 09:47:76:d5:81:1d:ed:d4:37:16:91:6d:20:21:63:11:51:09: 3d:0d:b4:76:6e:fa:6d:6b:e7:d3:f1:76:a0:2e:73:38:3b:19: 9b:39:d5:4d:48:63:0b:2d:f0:81:ee:e8:a6:d7:12:05:ea:0c: 8b:da:3a:11:2f:5a:ad:67:49:d1:72:d6:a8:03:f4:eb:c1:87: 16:2e:fa:5b:1c:bd:49:43:88:6d:b7:7c:66:11:dd:60:fb:7b: 4a:75:e6:aa:37:c8:c9:21:ad:b7:3b:6d:fd:a7:31:4e:72:64: 72:af:02:84:34:33:10:e0:c0:47:12:bb:2e:74:8a:2e:e2:b6: 55:ca:82:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tu4C7CLvhsFo2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzgwNzJhYWEtZmZmNS00NjliLTk2OGEtZmMyOTdlNDgyMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Nl019F5JL/ktDrPRzEmfohQigld2hEqSip q2F/cVK+0QGMFr9/mn6pSU+m3mPA/UsyA2jOzU73UBq65EDxUkK07IF4QG0AbZnD tLRtlzCG9vRbumcgDSNut+H8Ti5b1yFOpeXm8m2ZINiIwhIWTcHuNmFGToZH80i0 0VdCz8ACDhXzcOxAMGE45s3Zanxqdw61YZh66J23Qr8TxNGvRiR1EfbZ3EebgWtu v+PWcBMGMHv1jWIRdtbdYq5t0EjsUOyZnQzxyELgqWAyRPJtbG/4a4LPjDGf6z3I lmw35UYBOzV6bxgpUGoKEHVuu8XAdB9M0tgMtF16IYSo9u1eOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbV/W991zC6V9aAL/T5/qjv0OUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTdmNzhlZGItZTQ4ZS0z MWRhLTg0MjItNDJhOWFiOWJhYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+a/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkKwx0tXjJKFRao938xJyYrL/7hat3YP26+vZLIQ4wg+YtumZjyV2UN S5UkXMdNy4shYzusPgOizyZwzmhXcxNvgvjrw8OXqZqCVnVDDS94izmt80oDMPM/ pNj6fFuyQTJhPunFU09wKQ/yxvsK2t2bV5qNpJftFAOZkXSa3glHdtWBHe3UNxaR bSAhYxFRCT0NtHZu+m1r59PxdqAuczg7GZs51U1IYwst8IHu6KbXEgXqDIvaOhEv Wq1nSdFy1qgD9OvBhxYu+lscvUlDiG23fGYR3WD7e0p15qo3yMkhrbc7bf2nMU5y ZHKvAoQ0MxDgwEcSuy50ii7itlXKgog= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:02 2025 by rpki-client