$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa File: 85f13155-42f7-31a3-917f-c70710547a23.roa (raw, json) Hash identifier: 6esqXBTUUjnX9G6ZjGQUhMM41ocNdrkqJx0mv2+h5aI= Subject key identifier: E6:E1:8F:31:DC:5C:F5:15:49:9F:F5:D4:38:9E:F8:A5:97:FD:00:20 Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Certificate serial: 010D0C9F4328584B477C7DFFE8133737A55EBF80 Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 399870 IP address blocks: 23.144.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7d:ff:e8:13:37:37:a5:5e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=2ecf795d-e140-472e-9b43-0431e569d974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:f4:c5:42:64:14:59:4d:30:7f:89:66:1a: 5d:f2:ee:bf:66:f0:41:a1:05:53:16:07:74:d0:a1: 2a:7c:16:86:06:7c:17:40:03:d2:fb:02:44:80:49: ad:25:be:9d:57:9e:ad:95:fc:cf:3b:81:2f:50:37: fb:6f:3e:ee:b3:78:9c:55:24:43:de:30:db:6a:95: 8e:2f:6e:87:50:8e:4d:64:92:a0:2c:ba:fd:4f:b0: ad:e6:20:06:25:12:c6:2d:bb:b6:84:8c:bd:3e:d3: d1:43:61:da:29:93:43:9e:a9:39:70:bb:73:55:2e: 92:02:a9:21:ef:b6:02:a9:a7:44:ae:35:96:8d:30: 77:e7:ae:d9:58:2e:0c:b4:43:46:1d:fd:9d:96:31: de:61:79:a4:60:dc:25:7c:f5:21:7a:75:ec:21:5d: b6:d2:8e:06:9d:d4:0b:3c:69:d8:a0:de:64:51:ef: a7:fc:42:32:76:0f:d7:6e:4c:63:30:30:8a:00:b0: 5a:90:fe:26:e1:c6:a5:d6:f1:a6:5c:d8:85:4b:bd: bf:8a:8b:15:19:30:1f:28:1b:c4:cb:76:9c:ef:cc: bb:3f:f0:ae:47:a3:e2:bc:bb:c8:e6:9d:1f:de:99: 05:c1:95:65:87:a3:e9:fc:d0:e5:96:69:94:09:e6: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:8F:31:DC:5C:F5:15:49:9F:F5:D4:38:9E:F8:A5:97:FD:00:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl X509v3 Authority Key Identifier: keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer sbgp-ipAddrBlock: critical IPv4: 23.144.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:24:65:4d:ec:42:a7:7b:75:36:a9:fd:ba:b0:16:b7:9b:cd: 12:8d:4a:d3:0f:e7:10:c4:40:37:fa:bb:90:5c:04:08:1a:1f: 0a:ba:7d:48:8f:37:01:bf:f6:a3:5d:06:6f:02:8d:0a:98:bd: fc:c8:cb:20:1e:87:8e:a2:93:55:9c:d8:d5:57:9b:bb:cd:c3: 35:8e:28:01:50:1e:4f:b6:31:d4:ee:f8:b2:ff:4a:40:09:2d: 5d:52:5f:7b:6b:5b:cd:e0:2b:6d:19:bb:72:04:ef:39:c7:61: 62:00:9d:b6:a4:98:9a:b8:ac:df:de:c5:68:99:68:06:0f:e9: af:a8:e2:d0:2a:3e:1e:8a:f8:20:cc:84:e2:1d:19:8b:44:63: 5e:44:ff:47:6b:b8:bd:a6:f4:0f:26:0b:b0:32:7e:90:f2:83: 5a:4e:f4:e4:3e:64:86:97:aa:df:8f:d1:fe:40:d1:d8:47:39: 5c:67:12:e3:c0:55:fc:5f:ba:25:bf:cd:88:5a:15:0c:e6:8c: 05:15:a4:f8:31:2e:f9:a9:09:c7:64:90:48:b7:cb:6b:5f:a7: a4:21:55:69:b7:b1:2c:85:5d:ff:53:6a:e4:04:a2:57:36:9c: cd:a7:5e:8f:24:73:82:34:0c:af:0f:1e:28:08:87:6a:c6:e4: 42:e9:4c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH3/6BM3N6Vev4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3 ZjUxMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MmVjZjc5NWQtZTE0MC00NzJlLTliNDMtMDQzMWU1NjlkOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7r0xUJkFFlNMH+JZhpd8u6/ZvBBoQVTFgd0 0KEqfBaGBnwXQAPS+wJEgEmtJb6dV56tlfzPO4EvUDf7bz7us3icVSRD3jDbapWO L26HUI5NZJKgLLr9T7Ct5iAGJRLGLbu2hIy9PtPRQ2HaKZNDnqk5cLtzVS6SAqkh 77YCqadErjWWjTB3567ZWC4MtENGHf2dljHeYXmkYNwlfPUhenXsIV220o4GndQL PGnYoN5kUe+n/EIydg/XbkxjMDCKALBakP4m4cal1vGmXNiFS72/iosVGTAfKBvE y3ac78y7P/CuR6PivLvI5p0f3pkFwZVlh6Pp/NDllmmUCeZz3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObhjzHcXPUVSZ/11Die+KWX/QAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvODVmMTMxNTUtNDJmNy0z MWEzLTkxN2YtYzcwNzEwNTQ3YTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi MWRhZjdmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQkZU3sQqd7dTap/bqwFrebzRKNStMP5xDEQDf6u5BcBAgaHwq6fUiP NwG/9qNdBm8CjQqYvfzIyyAeh46ik1Wc2NVXm7vNwzWOKAFQHk+2MdTu+LL/SkAJ LV1SX3trW83gK20Zu3IE7znHYWIAnbakmJq4rN/exWiZaAYP6a+o4tAqPh6K+CDM hOIdGYtEY15E/0druL2m9A8mC7AyfpDyg1pO9OQ+ZIaXqt+P0f5A0dhHOVxnEuPA VfxfuiW/zYhaFQzmjAUVpPgxLvmpCcdkkEi3y2tfp6QhVWm3sSyFXf9TauQEolc2 nM2nXo8kc4I0DK8PHigIh2rG5ELpTJo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:58 2025 by rpki-client