$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa File: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json) Hash identifier: iY8zVJ3JCnIDu1jvCFwgmo5OfzaV3W7MQyyA2TMxe9o= Subject key identifier: 70:ED:27:4A:32:61:40:CD:36:AB:12:62:AF:B5:CF:65:59:ED:38:AC Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584B41E71DE24442B44F1F8B3EC0 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396423 IP address blocks: 23.132.8.0/24 maxlen: 24 198.62.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1d:e2:44:42:b4:4f:1f:8b:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=56c44c72-5547-43ac-8cca-ddac0ac4766d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:44:82:79:a8:e2:bc:e5:63:4d:c5:97:b2: a7:db:20:d7:ef:47:71:fd:52:7c:3b:c0:c9:bf:76: d0:40:82:98:c9:f7:a2:8d:02:97:a6:76:d4:23:5f: 5a:5f:39:7d:ba:c8:7a:3c:04:55:1d:2f:d6:f3:da: 8c:b5:bd:f5:2c:2d:e7:25:fa:19:93:fc:0e:3d:91: 72:41:35:a4:9f:68:73:ba:0a:2a:43:7f:9f:c0:7e: e8:43:3c:d5:97:03:fc:f8:34:76:36:c3:cb:95:56: 41:30:cb:08:bf:ad:8e:ff:5f:72:80:fd:f0:ac:1d: 94:52:61:3e:98:d6:1a:98:6a:83:4f:db:24:31:b7: dc:48:78:7d:82:f7:e2:28:26:ab:f1:f9:0b:01:65: fe:c6:c7:b8:26:0d:1d:03:85:92:1b:0d:03:ee:38: 88:e2:90:0a:8f:ea:a1:d1:f5:79:9d:e9:a8:67:93: d0:1d:e2:e3:77:c3:62:af:a1:39:37:30:8d:4c:02: 16:e2:e2:5c:dd:ad:71:8b:74:d9:71:f5:19:82:92: 48:6b:13:e2:b6:92:4b:74:ef:79:9f:59:67:e3:8f: 00:3c:8d:72:25:d5:a5:9a:17:1c:f5:40:d3:ce:76: a1:d0:8e:36:1d:b9:9a:6f:38:ec:4c:b5:71:2f:6c: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:ED:27:4A:32:61:40:CD:36:AB:12:62:AF:B5:CF:65:59:ED:38:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 198.62.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:28:c1:a7:89:8d:8e:02:6b:03:d6:db:22:c5:03:4b:23:2b: 1f:ab:41:94:a9:77:bc:f8:1e:17:a5:dd:05:a2:e9:a0:78:5d: 90:f8:f3:a9:fb:dc:42:ad:23:37:a9:f0:04:23:d7:9d:dd:9f: 7c:de:6f:99:20:c5:de:12:72:e5:28:ca:73:ad:02:75:b5:22: d7:c0:b8:11:41:e7:83:7d:40:49:a5:da:27:3c:03:dd:95:2e: 30:b7:58:de:90:d2:71:44:4b:00:f4:5e:b9:cb:38:d9:ba:03: 48:ec:40:95:42:c9:9d:5a:64:06:58:1d:c6:0f:12:b9:b3:11: b3:4d:3c:d0:6b:a4:97:04:0f:57:19:1b:e0:c6:1c:26:04:fe: ab:3b:8b:64:2f:20:c8:8d:42:08:57:4e:ea:06:a9:30:47:a4: 6a:9e:ce:61:18:57:8c:f0:04:63:42:96:c5:e5:09:aa:69:bd: c1:9e:45:d8:2c:45:35:50:38:97:9f:25:fc:4d:71:66:97:5b: 2c:fc:61:5a:7d:7a:7a:30:2c:12:47:3b:ef:31:80:5f:ce:63: 4b:6d:27:a5:e6:90:de:b7:dd:15:d7:fc:70:ec:be:80:4d:3f: cf:1a:d4:44:7b:28:13:ed:17:f4:38:b2:42:d8:09:68:e5:84: 10:48:b1:48 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtB5x3iREK0Tx+LPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTZjNDRjNzItNTU0Ny00M2FjLThjY2EtZGRhYzBhYzQ3NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXZEgnmo4rzlY03Fl7Kn2yDX70dx/VJ8O8DJ v3bQQIKYyfeijQKXpnbUI19aXzl9ush6PARVHS/W89qMtb31LC3nJfoZk/wOPZFy QTWkn2hzugoqQ3+fwH7oQzzVlwP8+DR2NsPLlVZBMMsIv62O/19ygP3wrB2UUmE+ mNYamGqDT9skMbfcSHh9gvfiKCar8fkLAWX+xse4Jg0dA4WSGw0D7jiI4pAKj+qh 0fV5nemoZ5PQHeLjd8Nir6E5NzCNTAIW4uJc3a1xi3TZcfUZgpJIaxPitpJLdO95 n1ln448API1yJdWlmhcc9UDTznah0I42HbmabzjsTLVxL2z0uQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHDtJ0oyYUDNNqsSYq+1z2VZ7TisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADkowaeJjY4CawPW2yLFA0sjKx+rQZSpd7z4Hhel3QWi6aB4 XZD486n73EKtIzep8AQj153dn3zeb5kgxd4ScuUoynOtAnW1ItfAuBFB54N9QEml 2ic8A92VLjC3WN6Q0nFESwD0XrnLONm6A0jsQJVCyZ1aZAZYHcYPErmzEbNNPNBr pJcED1cZG+DGHCYE/qs7i2QvIMiNQghXTuoGqTBHpGqezmEYV4zwBGNClsXlCapp vcGeRdgsRTVQOJefJfxNcWaXWyz8YVp9enowLBJHO+8xgF/OY0ttJ6XmkN633RXX /HDsvoBNP88a1ER7KBPtF/Q4skLYCWjlhBBIsUg= -----END CERTIFICATE-----Generated at Sat Oct 11 12:35:21 2025 by rpki-client