$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa File: b2c8219a-3f13-3fb9-b005-012508a27db0.roa (raw, json) Hash identifier: 8QgDDHGPApJxdZJbfP88Z8Cavufg5PzBfWpWb7Clzt8= Subject key identifier: 6B:B6:3E:05:53:DB:8D:CE:70:21:07:7C:54:46:A2:FE:6E:4D:E0:9C Certificate issuer: /CN=987bdf9f-7000-4d71-b90f-a12e26fdce76 Certificate serial: 010D0C9F4328584B2FC19804EF20BDB9572E4300 Authority key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 8796 IP address blocks: 23.185.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:98:04:ef:20:bd:b9:57:2e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=e3d5bc54-d248-4746-89d3-e72c58d20dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:92:65:d4:dc:c7:d2:d8:a0:10:35:39:34: f9:6d:c9:bd:37:08:c2:8a:e5:f3:55:24:8b:b6:d9: 08:c9:3f:22:dc:cd:bf:e4:e9:60:c0:4d:2c:cd:50: 88:45:d0:e5:2c:94:f0:9e:bf:60:13:d0:b5:d5:85: d1:e2:18:32:a3:26:79:d7:ac:ff:f0:5c:fa:da:35: 6f:50:fd:3a:d9:ab:69:fd:8d:b0:0d:b4:d4:d4:fb: 90:f2:ad:7b:b8:4e:96:b2:53:a5:89:56:cf:08:b9: bc:fa:bf:c9:7e:c8:e6:a4:e3:a4:04:98:e3:71:c2: 2f:90:41:7d:b6:1d:9f:f1:a5:cf:5b:d6:99:f9:4f: cd:f2:2a:42:dc:9e:36:70:ad:eb:20:5d:15:6e:2d: 5a:46:fa:5a:69:ed:44:cd:ba:29:8d:15:80:36:76: 28:5e:1f:f7:9c:0b:e9:1d:42:87:1a:a0:9d:8c:c3: 53:79:17:77:eb:86:f4:13:e1:01:ea:4e:6f:d4:2b: ce:46:4e:62:a8:86:3c:db:82:1e:5d:a3:33:c8:7e: 54:48:69:5d:de:0e:2c:23:b2:20:d0:89:4d:8c:53: e6:1f:28:6c:f6:39:e9:4b:82:26:05:a5:ee:29:a9: 5e:ae:68:0d:ec:b0:2a:78:10:e8:32:fe:30:01:52: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:3E:05:53:DB:8D:CE:70:21:07:7C:54:46:A2:FE:6E:4D:E0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl X509v3 Authority Key Identifier: keyid:B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer sbgp-ipAddrBlock: critical IPv4: 23.185.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:37:51:0a:93:8a:fa:01:94:57:b2:60:50:49:1b:76:6c:02: b8:6f:f9:6c:46:5a:17:b2:bd:2c:be:dc:f0:c6:f1:0f:d6:88: fa:38:2c:6f:cd:a7:d9:15:b0:88:d0:ed:3d:79:16:e4:ca:55: 6e:be:a4:a8:33:13:0c:04:94:a9:c4:c8:74:a4:f2:80:a6:f4: c0:76:b6:13:2f:72:84:38:63:7d:fb:f3:28:93:33:53:a4:8f: f6:09:ed:c6:a6:13:84:42:ab:43:f4:28:a6:5c:11:1c:e6:cc: e0:cc:9a:e6:24:ad:65:6c:1c:a5:27:a6:48:c0:27:6a:36:78: df:05:13:8b:28:73:73:95:ce:ee:0c:7d:90:b6:ab:e3:c7:38: 35:dc:5c:b6:be:e4:83:12:76:a5:02:ee:20:c9:7e:d4:e3:de: ab:1d:30:01:19:23:c2:2a:99:e6:56:4b:ae:1b:d6:96:a3:c0: 49:8c:c3:eb:fc:6f:03:e6:70:24:c6:40:7d:59:a9:0d:68:10: 87:85:b6:a4:c2:d3:94:49:05:a9:26:68:e9:10:71:4c:08:62: e4:d8:47:9e:f2:df:2b:45:fe:a9:fc:a7:87:93:42:0f:e8:81: 6c:e2:3d:19:87:70:f5:fa:78:03:87:9a:e7:84:3d:eb:87:54: 67:17:9e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZgE7yC9uVcuQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg3YmRmOWYtNzAwMC00ZDcxLWI5MGYtYTEyZTI2ZmRj ZTc2MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTNkNWJjNTQtZDI0OC00NzQ2LTg5ZDMtZTcyYzU4ZDIwZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYySZdTcx9LYoBA1OTT5bcm9NwjCiuXzVSSL ttkIyT8i3M2/5OlgwE0szVCIRdDlLJTwnr9gE9C11YXR4hgyoyZ516z/8Fz62jVv UP062atp/Y2wDbTU1PuQ8q17uE6WslOliVbPCLm8+r/JfsjmpOOkBJjjccIvkEF9 th2f8aXPW9aZ+U/N8ipC3J42cK3rIF0Vbi1aRvpaae1EzbopjRWANnYoXh/3nAvp HUKHGqCdjMNTeRd364b0E+EB6k5v1CvORk5iqIY824IeXaMzyH5USGld3g4sI7Ig 0IlNjFPmHyhs9jnpS4ImBaXuKalermgN7LAqeBDoMv4wAVIgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu2PgVT243OcCEHfFRGov5uTeCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85ODdi ZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJlMjZmZGNlNzYvYjJjODIxOWEtM2YxMy0z ZmI5LWIwMDUtMDEyNTA4YTI3ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTg3YmRmOWYtNzAwMC00ZDcxLWI5 MGYtYTEyZTI2ZmRjZTc2Lzk4N2JkZjlmLTcwMDAtNGQ3MS1iOTBmLWExMmUyNmZk Y2U3Ni5jcmwwHwYDVR0jBBgwFoAUtb+2H+TFBqo3u2EGdG+nnvBiDy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85ODdiZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJl MjZmZGNlNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM3UQqTivoBlFeyYFBJG3ZsArhv+WxGWheyvSy+3PDG8Q/WiPo4LG/N p9kVsIjQ7T15FuTKVW6+pKgzEwwElKnEyHSk8oCm9MB2thMvcoQ4Y3378yiTM1Ok j/YJ7camE4RCq0P0KKZcERzmzODMmuYkrWVsHKUnpkjAJ2o2eN8FE4soc3OVzu4M fZC2q+PHODXcXLa+5IMSdqUC7iDJftTj3qsdMAEZI8IqmeZWS64b1pajwEmMw+v8 bwPmcCTGQH1ZqQ1oEIeFtqTC05RJBakmaOkQcUwIYuTYR57y3ytF/qn8p4eTQg/o gWziPRmHcPX6eAOHmueEPeuHVGcXnrk= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:09 2025 by rpki-client