$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa File: dfbf07a4-612e-3957-8e7e-9edc3121a163.roa (raw, json) Hash identifier: ut+9Bs26AiJ/TW+ZrVTUkbAI4emfzXFbye8xErtz/f0= Subject key identifier: E2:83:1D:D2:FE:B0:62:27:C0:AB:DF:B0:0B:48:3D:7D:B1:2B:0D:8F Certificate issuer: /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Certificate serial: 010D0C9F4328584B2CF71B03575AAB04744F4980 Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 143.223.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:1b:03:57:5a:ab:04:74:4f:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=1548a9af-8773-4d5f-9db8-a09563b4059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:f8:f3:e2:81:07:70:3f:d8:01:87:11:12: 32:6e:d6:96:3c:ea:b6:a9:1a:34:0c:41:dd:97:fa: 7f:4c:03:2e:e5:45:7a:76:88:07:a2:ac:72:28:12: 9c:5c:3a:33:c7:23:f1:f2:b0:fc:4a:c1:44:2e:64: 79:d5:90:e1:92:33:a4:06:0c:4d:a3:9a:b1:ca:77: 19:90:71:40:13:a1:7a:36:ce:f6:27:a1:cb:36:5c: 28:e6:bd:41:ee:43:9a:f2:d7:91:f4:9a:29:2f:88: 64:ab:cf:09:63:ea:2f:40:14:9e:46:25:58:ea:87: 9e:6a:c0:35:33:bd:4a:5b:d2:59:9c:19:7d:23:55: a0:b8:d4:db:ad:57:ee:8c:0a:97:bd:21:45:55:75: 1d:52:bd:41:1f:a6:d2:82:0b:71:f3:cc:f1:3d:81: 10:98:49:57:2a:bc:4f:d5:d5:a8:aa:41:2e:5a:cd: ae:57:f8:3d:48:4b:cd:04:e2:36:3a:fd:02:2c:e3: 8f:f9:86:dd:95:d2:c2:d1:4c:4e:8f:79:8c:f2:33: 90:69:9f:8e:50:56:f1:e4:a1:de:24:67:c3:d7:36: 8e:34:cf:4e:61:ad:aa:31:c1:b7:39:38:aa:f6:0d: bd:4c:f1:2f:25:70:18:0e:e9:c3:10:46:1d:e5:3c: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:83:1D:D2:FE:B0:62:27:C0:AB:DF:B0:0B:48:3D:7D:B1:2B:0D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl X509v3 Authority Key Identifier: keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer sbgp-ipAddrBlock: critical IPv4: 143.223.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:1e:84:72:d7:d5:d2:bb:e0:4c:6c:8f:75:02:f3:bd:a8:b6: 56:95:bf:56:e9:d8:f0:a6:73:5a:5f:9a:11:a5:61:5e:10:74: dd:3d:53:8b:bd:fd:79:5d:94:32:a6:5e:4f:1f:92:ae:d2:bf: e8:a7:44:54:b7:8c:19:da:96:b2:22:2b:2a:82:9f:62:c4:26: 8a:ba:f0:c5:ed:3c:ae:2b:4b:61:37:ae:17:28:b8:8a:5a:ea: 73:6c:14:56:dd:3f:05:fd:b2:4b:0e:9b:70:48:d1:5f:a0:83: 67:4d:13:6d:78:18:f8:d1:dc:06:6d:ce:3c:a8:68:05:6a:25: 60:22:05:c1:13:ce:24:9a:af:4a:b1:ab:fb:16:07:a7:10:ed: 8e:09:f1:a9:f6:66:7e:5d:78:05:36:c8:b1:61:be:34:ab:50: 68:38:4e:c2:01:ed:be:7e:a3:af:dc:c4:dc:d9:f7:48:5b:f8: a7:e0:6f:16:9e:88:36:7b:5f:4b:78:d7:2a:50:fe:84:07:bd: f2:62:33:a1:2b:7d:ba:67:29:6a:5d:0c:8b:b0:9b:71:9f:af: 98:f4:79:2b:aa:51:91:9d:f5:a6:93:fb:95:bc:69:91:5e:8c: c3:12:85:65:17:31:7c:21:07:23:60:53:59:bf:59:ad:ff:83: 18:c9:d0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xsDV1qrBHRPSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc5NTkxZWItZjhmZi00OGY1LTlhYzYtZTFhZmEyM2U1 M2ZiMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MTU0OGE5YWYtODc3My00ZDVmLTlkYjgtYTA5NTYzYjQwNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7H48+KBB3A/2AGHERIybtaWPOq2qRo0DEHd l/p/TAMu5UV6dogHoqxyKBKcXDozxyPx8rD8SsFELmR51ZDhkjOkBgxNo5qxyncZ kHFAE6F6Ns72J6HLNlwo5r1B7kOa8teR9JopL4hkq88JY+ovQBSeRiVY6oeeasA1 M71KW9JZnBl9I1WguNTbrVfujAqXvSFFVXUdUr1BH6bSggtx88zxPYEQmElXKrxP 1dWoqkEuWs2uV/g9SEvNBOI2Ov0CLOOP+YbdldLC0UxOj3mM8jOQaZ+OUFbx5KHe JGfD1zaONM9OYa2qMcG3OTiq9g29TPEvJXAYDunDEEYd5TySfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKDHdL+sGInwKvfsAtIPX2xKw2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1 OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFmYTIzZTUzZmIvZGZiZjA3YTQtNjEyZS0z OTU3LThlN2UtOWVkYzMxMjFhMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjc5NTkxZWItZjhmZi00OGY1LTlh YzYtZTFhZmEyM2U1M2ZiL2Y3OTU5MWViLWY4ZmYtNDhmNS05YWM2LWUxYWZhMjNl NTNmYi5jcmwwHwYDVR0jBBgwFoAUC3rnSZ44dN+bLPVV81syl2w4I3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzk1OTFlYi1mOGZmLTQ4ZjUtOWFjNi1lMWFm YTIzZTUzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj99eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsehHLX1dK74Exsj3UC872otlaVv1bp2PCmc1pfmhGlYV4QdN09U4u9 /XldlDKmXk8fkq7Sv+inRFS3jBnalrIiKyqCn2LEJoq68MXtPK4rS2E3rhcouIpa 6nNsFFbdPwX9sksOm3BI0V+gg2dNE214GPjR3AZtzjyoaAVqJWAiBcETziSar0qx q/sWB6cQ7Y4J8an2Zn5deAU2yLFhvjSrUGg4TsIB7b5+o6/cxNzZ90hb+Kfgbxae iDZ7X0t41ypQ/oQHvfJiM6ErfbpnKWpdDIuwm3Gfr5j0eSuqUZGd9aaT+5W8aZFe jMMShWUXMXwhByNgU1m/Wa3/gxjJ0NA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:32 2025 by rpki-client