$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa File: 050f5b90-2bc6-3aa7-b968-699b132d1876.roa (raw, json) Hash identifier: +VKBtg2DpTOGf39l88pm1VBoVKWmQg2XspXKShWzg2E= Subject key identifier: 52:4A:C6:F6:AC:FF:05:ED:F3:8E:34:A6:41:89:EA:92:27:D4:FF:59 Certificate issuer: /CN=aec61144-8dba-4096-a6cb-11d1d289ff0f Certificate serial: 010D0C9F4328584B44B1BCE457597F02B5578040 Authority key identifier: 31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 396967 IP address blocks: 23.171.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bc:e4:57:59:7f:02:b5:57:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aec61144-8dba-4096-a6cb-11d1d289ff0f Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=22cd50c3-d52a-4ec4-896c-07c741bbe86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:9b:e3:ac:87:a8:b7:2a:46:05:0d:20:15: e8:1c:0c:40:45:39:45:0b:cd:c6:00:6c:f8:ed:01: ab:f1:f7:84:8f:c0:76:65:dd:fd:6e:9b:74:44:42: 60:b1:bb:e7:ec:e9:7b:39:b8:8a:eb:d3:eb:36:93: 4e:61:4a:c3:f9:c2:10:af:93:c7:30:d2:9c:cd:5e: b4:ae:67:49:3f:54:8b:9c:2b:95:c8:64:56:48:40: 81:db:cb:7a:e1:81:60:19:0d:70:fe:9c:5b:6e:62: 26:c3:a6:c9:29:f0:cd:d9:05:64:68:0e:b4:84:a4: d4:5f:95:f2:b9:1d:21:71:19:ec:c6:b4:71:f3:41: b2:05:1e:fb:5f:42:2d:9c:71:2f:22:78:b8:f3:5c: 8c:3f:ba:ad:19:7c:1b:92:db:aa:9d:75:f2:c7:90: ca:48:e3:fe:ff:24:7a:b9:7d:2a:8f:83:e9:f8:18: 06:5e:f5:6a:78:3c:84:cc:54:05:0b:81:5d:1e:d5: 01:39:25:fb:c2:81:1c:d2:41:b9:14:bd:43:e4:e3: 36:55:1a:9e:5f:11:ad:af:d8:ac:57:a4:a7:d1:9d: 4f:a5:4b:16:1c:8a:34:ad:24:0e:a4:72:08:3c:9b: 90:3d:37:b7:f6:c4:31:6f:78:dc:13:86:bb:70:36: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:C6:F6:AC:FF:05:ED:F3:8E:34:A6:41:89:EA:92:27:D4:FF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl X509v3 Authority Key Identifier: keyid:31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer sbgp-ipAddrBlock: critical IPv4: 23.171.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d9:fe:e9:e2:8e:61:73:ec:76:1b:f7:39:8a:91:6a:00:1b: da:33:25:eb:3d:a1:64:88:86:77:8e:46:6f:a4:d7:3d:fa:2b: 20:7a:11:de:7f:b7:9f:3c:1a:de:47:36:09:61:60:66:63:14: 8e:ef:3a:dd:e3:a0:90:02:6d:31:fc:45:cf:8f:ab:2f:86:72: a2:6d:e7:80:88:f8:ef:0e:85:1e:68:2c:e2:4d:99:1e:b7:30: 51:77:88:d5:33:c3:f2:e4:23:8d:0e:95:30:7f:97:34:f8:ac: 69:01:c0:a9:8e:63:d7:64:dd:13:c4:9b:9f:b4:73:43:0b:09: 86:37:19:5e:32:e0:1f:e8:57:f4:d4:78:16:54:05:37:63:88: 49:96:2a:d9:43:5d:9d:35:65:79:88:f4:9c:a3:d7:43:c8:c2: ae:bc:ec:bb:e9:e4:26:c8:d4:8c:b4:2c:c5:95:d8:df:3a:28: b0:62:62:b3:35:ec:a1:ca:39:8a:b2:b2:20:b6:ce:96:d9:af: 5b:6f:f9:99:38:38:69:75:76:f5:31:1f:74:00:86:48:82:41: 37:5a:88:7c:f6:7d:90:4a:3f:9f:2e:d3:91:99:a6:1e:63:4f: f5:b2:43:69:66:02:86:74:f6:4f:f1:2c:57:a9:a5:b3:84:fb: 81:3f:d5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbzkV1l/ArVXgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVjNjExNDQtOGRiYS00MDk2LWE2Y2ItMTFkMWQyODlm ZjBmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MjJjZDUwYzMtZDUyYS00ZWM0LTg5NmMtMDdjNzQxYmJlODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeWb46yHqLcqRgUNIBXoHAxARTlFC83GAGz4 7QGr8feEj8B2Zd39bpt0REJgsbvn7Ol7ObiK69PrNpNOYUrD+cIQr5PHMNKczV60 rmdJP1SLnCuVyGRWSECB28t64YFgGQ1w/pxbbmImw6bJKfDN2QVkaA60hKTUX5Xy uR0hcRnsxrRx80GyBR77X0ItnHEvIni481yMP7qtGXwbktuqnXXyx5DKSOP+/yR6 uX0qj4Pp+BgGXvVqeDyEzFQFC4FdHtUBOSX7woEc0kG5FL1D5OM2VRqeXxGtr9is V6Sn0Z1PpUsWHIo0rSQOpHIIPJuQPTe39sQxb3jcE4a7cDZqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJKxvas/wXt8440pkGJ6pIn1P9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZWM2 MTE0NC04ZGJhLTQwOTYtYTZjYi0xMWQxZDI4OWZmMGYvMDUwZjViOTAtMmJjNi0z YWE3LWI5NjgtNjk5YjEzMmQxODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWVjNjExNDQtOGRiYS00MDk2LWE2 Y2ItMTFkMWQyODlmZjBmL2FlYzYxMTQ0LThkYmEtNDA5Ni1hNmNiLTExZDFkMjg5 ZmYwZi5jcmwwHwYDVR0jBBgwFoAUMX5lng1jbxe+Fpp+e82Q+nUMQ3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZWM2MTE0NC04ZGJhLTQwOTYtYTZjYi0xMWQx ZDI4OWZmMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrZ/unijmFz7HYb9zmKkWoAG9ozJes9oWSIhneORm+k1z36KyB6Ed5/ t588Gt5HNglhYGZjFI7vOt3joJACbTH8Rc+Pqy+GcqJt54CI+O8OhR5oLOJNmR63 MFF3iNUzw/LkI40OlTB/lzT4rGkBwKmOY9dk3RPEm5+0c0MLCYY3GV4y4B/oV/TU eBZUBTdjiEmWKtlDXZ01ZXmI9Jyj10PIwq687Lvp5CbI1Iy0LMWV2N86KLBiYrM1 7KHKOYqysiC2zpbZr1tv+Zk4OGl1dvUxH3QAhkiCQTdaiHz2fZBKP58u05GZph5j T/WyQ2lmAoZ09k/xLFeppbOE+4E/1VE= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:33 2025 by rpki-client