$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa File: f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa (raw, json) Hash identifier: NdE6n8Yb5DwfUhG7AYQIslW+RPOOu+R1UlITpSBOfa0= Subject key identifier: 34:80:D8:63:BC:E2:09:A2:1A:45:31:1C:86:7E:AB:83:34:F1:75:15 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B0CDC1063B790A4285151CE80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13445 IP address blocks: 23.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:10:63:b7:90:a4:28:51:51:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f05f35b3-a06d-442c-9816-0450290ed21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:ac:b3:96:17:c4:38:63:f9:a9:9f:1c:b5: fe:13:6c:90:1d:38:4c:4a:22:6d:46:79:90:b5:b9: 36:cc:61:db:bd:c4:65:01:7a:f2:59:fa:dc:f5:5a: 8b:c4:6d:f6:06:0f:f3:bd:89:ca:1a:fa:b5:3b:9f: 4f:69:6a:0d:20:00:e2:38:cb:b2:be:9f:55:ab:3e: a5:81:42:eb:28:e6:5b:2a:c8:49:88:ee:d5:e4:c3: 0b:ff:16:36:85:48:b6:b4:78:3d:4f:b2:f3:69:b6: 03:b9:67:32:22:5a:5c:55:f9:7c:ad:40:b0:64:7b: c4:5c:11:3c:42:20:dc:46:72:88:37:ce:a8:9e:70: 9c:49:eb:69:71:41:64:30:e0:cf:25:88:f3:da:4b: dd:04:2d:2e:51:26:99:7b:fc:5b:d7:a1:d6:5a:e1: 2f:ad:26:a1:9f:b0:27:96:68:8b:93:86:da:05:7e: 8b:21:34:1f:84:06:44:a3:d7:0f:f4:a2:b5:13:54: 4d:66:79:bb:34:b2:5d:a2:98:6b:3b:19:cf:ed:a5: 8b:03:79:6f:da:d2:4d:1f:90:92:82:e0:dc:52:f7: 1f:d3:87:69:50:b7:39:08:60:4e:23:04:75:c0:eb: 7f:9f:87:b9:69:53:13:11:de:e7:5f:b1:ea:16:05: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:80:D8:63:BC:E2:09:A2:1A:45:31:1C:86:7E:AB:83:34:F1:75:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b9:8e:80:50:54:da:49:13:0b:f7:71:f7:0d:4c:04:1a:6b: d1:75:30:4f:0d:cb:11:c6:d0:ec:b8:91:c3:17:47:33:d7:38: 2f:9e:c9:e7:96:65:8c:b9:7a:fb:c9:4e:93:ae:e8:4a:85:73: c4:a7:80:8f:39:41:80:df:81:5e:5f:b4:b5:30:c1:36:fa:5a: 58:24:65:6b:0f:81:2a:76:36:5b:ba:b7:17:e8:6d:a7:5a:7a: 63:c9:42:0a:6e:f2:8d:03:64:6b:0b:26:01:36:4d:39:74:52: cc:1f:2b:28:90:73:1a:93:ac:3b:12:d4:71:1d:6b:89:bd:50: ce:c0:11:0d:39:fc:35:9a:f7:4c:1e:2e:28:f8:99:e5:40:32: 12:b3:9b:72:75:b3:3a:60:ea:21:34:1c:be:bf:79:7c:bf:b1: ac:f6:1d:4b:28:5c:59:ed:6c:6d:58:b7:e0:b3:e9:56:8b:3f: f5:a1:63:82:07:78:ba:11:ab:a6:89:e7:69:64:50:7e:f6:12: c4:0a:de:75:dd:5f:7c:d0:c8:0d:72:e6:26:f5:94:7f:d3:d2: ff:d4:88:73:49:e2:b3:b0:a1:78:13:32:b5:bc:50:ed:45:7a: 39:5d:55:db:0e:da:d7:17:d3:5a:bb:67:e0:7d:51:b8:85:dc: 79:d4:97:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsM3BBjt5CkKFFRzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjA1ZjM1YjMtYTA2ZC00NDJjLTk4MTYtMDQ1MDI5MGVkMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Oss5YXxDhj+amfHLX+E2yQHThMSiJtRnmQ tbk2zGHbvcRlAXryWfrc9VqLxG32Bg/zvYnKGvq1O59PaWoNIADiOMuyvp9Vqz6l gULrKOZbKshJiO7V5MML/xY2hUi2tHg9T7LzabYDuWcyIlpcVfl8rUCwZHvEXBE8 QiDcRnKIN86onnCcSetpcUFkMODPJYjz2kvdBC0uUSaZe/xb16HWWuEvrSahn7An lmiLk4baBX6LITQfhAZEo9cP9KK1E1RNZnm7NLJdophrOxnP7aWLA3lv2tJNH5CS guDcUvcf04dpULc5CGBOIwR1wOt/n4e5aVMTEd7nX7HqFgWmBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDSA2GO84gmiGkUxHIZ+q4M08XUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjg4ZmZiYjktZjg2YS0z NmMzLWFkMjAtMzMzZTdmYTg0MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAF1kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkbmOgFBU2kkTC/dx9w1MBBpr0XUwTw3LEcbQ7LiRwxdHM9c4L57J55Zl jLl6+8lOk67oSoVzxKeAjzlBgN+BXl+0tTDBNvpaWCRlaw+BKnY2W7q3F+htp1p6 Y8lCCm7yjQNkawsmATZNOXRSzB8rKJBzGpOsOxLUcR1rib1QzsARDTn8NZr3TB4u KPiZ5UAyErObcnWzOmDqITQcvr95fL+xrPYdSyhcWe1sbVi34LPpVos/9aFjggd4 uhGrponnaWRQfvYSxAredd1ffNDIDXLmJvWUf9PS/9SIc0nis7CheBMytbxQ7UV6 OV1V2w7a1xfTWrtn4H1RuIXcedSXeA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:32:02 2025 by rpki-client