$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa File: eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa (raw, json) Hash identifier: 50+BUjbDxSzy3nfMILsEYOQWABvv5W0Q2RUKlU25GSM= Subject key identifier: 73:7A:72:20:1F:12:D3:2B:18:CA:4A:2C:DF:35:BF:62:49:95:49:01 Certificate issuer: /CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Certificate serial: 010D0C9F4328584AFC1C021C90B529C20C223740 Authority key identifier: EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 401017 IP address blocks: 23.176.248.0/24 maxlen: 24 2607:ae40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:02:1c:90:b5:29:c2:0c:22:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=17b8ea09-7a32-4489-bf87-34460e79b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:88:e0:7b:18:e3:a3:d9:e2:63:f3:9a:66: 72:ca:44:c4:62:60:7d:b4:02:11:c0:de:3a:58:5e: 1d:58:6b:6e:2d:80:96:77:52:87:c2:d6:42:84:0e: 7f:a7:70:97:a9:5f:b5:b8:8b:d1:83:b0:7c:a8:e5: d3:c5:86:cb:ac:62:4e:c4:23:d1:c1:db:44:0b:42: 77:7d:a3:f0:d5:26:a0:75:e9:9f:3a:04:78:55:9f: ef:3d:fa:bb:04:8d:13:10:45:58:f7:a0:70:e5:52: 1f:3d:27:22:0b:d9:31:1c:1c:73:fb:52:78:dd:23: 90:8f:a8:f9:97:cc:4e:cd:d6:86:5a:13:86:2c:0c: c7:99:fa:8a:cd:84:3f:14:46:a9:ed:1c:15:2a:4e: 61:ac:92:4c:3f:35:b6:f1:6d:ee:af:3b:f7:ae:b8: 8f:eb:ef:ce:5f:da:30:a4:30:90:c8:65:05:1d:3d: 98:0c:9f:8d:e8:c3:fe:e2:a8:34:4f:76:92:60:d4: ad:51:d7:df:4b:c5:78:25:a2:85:d8:44:ca:79:01: 68:20:4a:dc:44:da:f4:98:30:f8:7e:87:74:c4:c9: e6:95:45:0c:f5:e9:5a:a6:a5:15:4f:ab:1e:e5:69: aa:07:1f:21:7d:9f:29:57:a6:02:d0:05:3e:6b:be: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7A:72:20:1F:12:D3:2B:18:CA:4A:2C:DF:35:BF:62:49:95:49:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl X509v3 Authority Key Identifier: keyid:EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer sbgp-ipAddrBlock: critical IPv4: 23.176.248.0/24 IPv6: 2607:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:30:0f:26:d1:4e:d8:75:8d:5e:40:70:47:80:91:00:1f:4b: 88:6a:58:d7:d5:9c:c1:e8:24:12:bd:ad:17:29:01:b6:8c:00: 24:1a:36:46:f9:b7:d9:a8:36:db:27:06:76:bf:79:78:fd:d9: 82:8f:fc:61:46:ef:45:a3:38:4c:4e:80:37:12:0c:6d:1d:48: 04:17:21:d3:d6:fd:12:62:91:24:be:ee:2b:3d:53:bd:9e:ab: f8:a0:3d:ac:a3:8a:0e:7f:93:e5:cc:cd:fb:72:5e:04:3a:e4: 6c:ae:75:a2:62:c1:08:d4:fe:67:82:dd:e0:ea:35:0a:ec:d3: f4:44:ae:28:dd:f4:52:47:1c:15:78:89:60:3e:88:49:01:c2: d9:7e:8c:8a:69:4a:4a:70:33:cc:80:d4:ba:61:e3:29:65:11: 50:c4:5f:ba:e4:89:f8:a1:52:5c:d9:1f:5b:af:2c:50:da:02: 50:0d:22:18:b0:8f:c4:27:b1:2f:d6:4b:b4:67:c0:99:d8:d7: 4e:ef:f7:11:2b:f9:68:07:cd:74:0e:4a:9d:9e:f7:c7:16:b5: 81:3a:5f:4d:7e:a4:f6:0e:f8:7f:af:37:d6:c3:c4:73:21:ea: 9c:73:eb:24:a0:b8:3d:d3:ab:c3:84:16:b3:5d:81:af:9b:bf: 8b:de:44:95 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEr8HAIckLUpwgwiN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhOWMzZjAtOWY4Mi00ZTY0LWJiZDAtYmUzNjUyZmVi MjU1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MTdiOGVhMDktN2EzMi00NDg5LWJmODctMzQ0NjBlNzliNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeaI4HsY46PZ4mPzmmZyykTEYmB9tAIRwN46 WF4dWGtuLYCWd1KHwtZChA5/p3CXqV+1uIvRg7B8qOXTxYbLrGJOxCPRwdtEC0J3 faPw1SagdemfOgR4VZ/vPfq7BI0TEEVY96Bw5VIfPSciC9kxHBxz+1J43SOQj6j5 l8xOzdaGWhOGLAzHmfqKzYQ/FEap7RwVKk5hrJJMPzW28W3urzv3rriP6+/OX9ow pDCQyGUFHT2YDJ+N6MP+4qg0T3aSYNStUdffS8V4JaKF2ETKeQFoIErcRNr0mDD4 fod0xMnmlUUM9elapqUVT6se5WmqBx8hfZ8pV6YC0AU+a76vdQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHN6ciAfEtMrGMpKLN81v2JJlUkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmE5 YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2NTJmZWIyNTUvZWVhZjMzNzMtYmUxMS0z ZDUyLWIyZWEtOTQ4N2NkYjVkOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJhOWMzZjAtOWY4Mi00ZTY0LWJi ZDAtYmUzNjUyZmViMjU1L2EyYTljM2YwLTlmODItNGU2NC1iYmQwLWJlMzY1MmZl YjI1NS5jcmwwHwYDVR0jBBgwFoAU6h6k6ep7kmfOIF+dJ14SzKtJ/CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmE5YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2 NTJmZWIyNTUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7D4MA0E AgACMAcDBQAmB65AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKMwDybRTth1jV5AcEeAkQAfS4hqWNfVnMHo JBK9rRcpAbaMACQaNkb5t9moNtsnBna/eXj92YKP/GFG70WjOExOgDcSDG0dSAQX IdPW/RJikSS+7is9U72eq/igPayjig5/k+XMzftyXgQ65GyudaJiwQjU/meC3eDq NQrs0/RErijd9FJHHBV4iWA+iEkBwtl+jIppSkpwM8yA1Lph4yllEVDEX7rkifih UlzZH1uvLFDaAlANIhiwj8QnsS/WS7RnwJnY107v9xEr+WgHzXQOSp2e98cWtYE6 X01+pPYO+H+vN9bDxHMh6pxz6ySguD3Tq8OEFrNdga+bv4veRJU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:32:45 2025 by rpki-client