$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa File: c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa (raw, json) Hash identifier: 3UR8x1u8Qsts5PahVkSf6MZ17SSZtGlVQpakhUT+SXo= Subject key identifier: 68:4A:89:C2:50:B6:51:76:0F:16:9D:7E:F1:DE:F7:FF:25:FF:C2:30 Certificate issuer: /CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Certificate serial: 010D0C9F4328584B6631FF7E8D4DE60E4C977490 Authority key identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 27458 IP address blocks: 23.169.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ff:7e:8d:4d:e6:0e:4c:97:74:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=c18fa9ed-c1b7-4399-ae8c-2df9a1f508a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:a7:89:83:da:c2:17:35:39:18:e2:b4:aa: 67:48:33:68:44:8a:99:df:ef:8c:52:88:00:42:aa: df:28:0b:14:26:d6:73:3b:cf:34:36:56:f8:cb:c6: de:57:a1:41:cf:1f:04:3d:04:7e:09:45:a1:a7:d8: e3:a7:ce:36:a7:42:6c:5b:ef:e8:a9:28:14:f4:7f: 53:c7:13:04:f0:9a:92:81:94:87:bd:4f:d2:25:db: 7c:c1:55:88:7a:b8:46:b8:f5:c9:8a:41:cb:43:ed: 2c:fe:f9:8f:67:da:35:82:25:19:43:9f:24:ec:99: bc:f6:2b:33:12:91:29:5b:c6:e8:cd:85:83:14:88: 9e:4f:1c:4c:b2:bd:43:14:69:48:64:83:6b:3f:80: e0:1f:a3:4f:3f:aa:da:65:6f:35:94:e4:dc:42:d6: 19:4c:5f:14:ed:3f:cd:14:c4:66:ec:4b:47:81:2a: a4:f4:15:f8:2b:6a:6d:16:3a:ad:1b:33:dd:bb:ff: d1:59:be:87:8a:2c:f7:2e:8f:53:ad:47:a5:fb:0b: 9b:3b:7f:e2:c5:df:ec:a5:bf:81:ab:0b:82:f1:fd: 81:63:bf:ef:e6:09:b2:96:58:fd:e3:6f:01:dc:ec: 48:f0:26:50:61:b4:47:67:48:45:5f:39:b3:9c:a9: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:89:C2:50:B6:51:76:0F:16:9D:7E:F1:DE:F7:FF:25:FF:C2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl X509v3 Authority Key Identifier: keyid:2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d6:b0:97:2b:46:17:2e:34:70:0a:7d:56:2a:11:4a:85:3d: 8f:a2:cf:6c:db:3a:e0:30:1e:22:21:42:8f:a8:71:57:2c:e9: 0d:ae:c6:54:cb:4e:4b:6d:54:a2:1b:73:7a:ae:fa:5c:c8:4a: bc:9c:cf:25:f2:20:cf:b6:97:39:e3:77:49:c7:9c:ba:5b:d4: 0a:b5:66:e7:e3:a6:de:2d:fe:01:95:20:3e:8c:58:fd:69:85: 59:39:8e:76:d3:16:33:f5:66:65:d6:e7:3a:a7:63:71:bc:7e: 8d:90:46:bc:7b:87:4a:bf:32:45:bd:6f:2b:76:cc:13:62:30: b8:5e:f6:bd:67:29:b3:b8:e6:3c:ad:e6:3a:c7:9f:25:10:17: 64:d3:b2:0f:9f:a2:ef:bb:b5:fd:f2:56:93:98:d7:4b:f7:7f: b5:a3:e1:8c:d8:ea:da:29:46:93:af:65:e1:64:a2:8b:40:62: 73:c6:c0:1a:25:b9:18:70:84:63:26:38:e7:87:ad:06:3a:74: df:81:70:30:c9:af:74:21:e7:cd:77:46:d3:36:9d:19:eb:b2: c0:98:47:61:1e:fd:74:0d:c2:64:3d:5e:4f:5c:2f:fb:e5:3c: 7d:db:e9:ba:39:f7:b5:6c:6c:ac:f0:f1:01:0e:5c:d4:e4:08: b9:65:7b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMf9+jU3mDkyXdJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiYjYxZGEtMmU4Yi00MzI5LTk2ZjctYjQwOGIxN2Nk NmQyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YzE4ZmE5ZWQtYzFiNy00Mzk5LWFlOGMtMmRmOWExZjUwOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV6niYPawhc1ORjitKpnSDNoRIqZ3++MUogA QqrfKAsUJtZzO880Nlb4y8beV6FBzx8EPQR+CUWhp9jjp842p0JsW+/oqSgU9H9T xxME8JqSgZSHvU/SJdt8wVWIerhGuPXJikHLQ+0s/vmPZ9o1giUZQ58k7Jm89isz EpEpW8bozYWDFIieTxxMsr1DFGlIZINrP4DgH6NPP6raZW81lOTcQtYZTF8U7T/N FMRm7EtHgSqk9BX4K2ptFjqtGzPdu//RWb6Hiiz3Lo9TrUel+wubO3/ixd/spb+B qwuC8f2BY7/v5gmyllj9428B3OxI8CZQYbRHZ0hFXzmznKkHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhKicJQtlF2DxadfvHe9/8l/8IwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJi NjFkYS0yZThiLTQzMjktOTZmNy1iNDA4YjE3Y2Q2ZDIvYzlkMmFlZTgtOWUyYy0z MGExLTk5YjktMDU4M2NjNGZmNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGRiYjYxZGEtMmU4Yi00MzI5LTk2 ZjctYjQwOGIxN2NkNmQyLzRkYmI2MWRhLTJlOGItNDMyOS05NmY3LWI0MDhiMTdj ZDZkMi5jcmwwHwYDVR0jBBgwFoAULB4L+pyKLahhgDRfXClUBRE9ZLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJiNjFkYS0yZThiLTQzMjktOTZmNy1iNDA4 YjE3Y2Q2ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzWsJcrRhcuNHAKfVYqEUqFPY+iz2zbOuAwHiIhQo+ocVcs6Q2uxlTL TkttVKIbc3qu+lzISryczyXyIM+2lznjd0nHnLpb1Aq1Zufjpt4t/gGVID6MWP1p hVk5jnbTFjP1ZmXW5zqnY3G8fo2QRrx7h0q/MkW9byt2zBNiMLhe9r1nKbO45jyt 5jrHnyUQF2TTsg+fou+7tf3yVpOY10v3f7Wj4YzY6topRpOvZeFkootAYnPGwBol uRhwhGMmOOeHrQY6dN+BcDDJr3Qh5813RtM2nRnrssCYR2Ee/XQNwmQ9Xk9cL/vl PH3b6bo597VsbKzw8QEOXNTkCLlle6A= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:33 2025 by rpki-client