$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa File: 3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa (raw, json) Hash identifier: QnYOtPR9Yb8s9M+mDtlF4IgdA1YQ6ZAdL6GPijrYLGI= Subject key identifier: F1:6A:82:0D:7B:AD:D7:21:AE:B1:DB:2F:95:92:1C:48:A6:8B:57:2C Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F4328584B2DF92981F41CCA431F5EBFC0 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa Signing time: Sat 13 Sep 2025 09:41:06 +0000 ROA not before: Sat 13 Sep 2025 09:41:06 +0000 ROA not after: Fri 12 Dec 2025 10:41:06 +0000 asID: 399448 IP address blocks: 23.170.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2d:f9:29:81:f4:1c:ca:43:1f:5e:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Sep 13 09:41:06 2025 GMT Not After : Dec 12 10:41:06 2025 GMT Subject: CN=220be356-739b-401b-b551-be68882ae572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:82:37:f4:d3:ba:f9:d5:ca:65:e9:2b:69: 0f:32:7f:08:1c:0c:13:44:22:7f:91:91:fa:b8:41: 44:e1:66:c6:41:e7:ba:4c:73:45:5a:26:06:2f:e3: 96:ba:71:e7:fb:77:02:5d:d1:ad:3f:86:13:d4:f4: a5:70:4c:e9:d6:07:7f:14:b5:17:eb:8f:96:df:5e: f3:7b:b4:08:ab:42:72:43:52:67:c7:6e:9c:8d:19: 84:63:0a:cb:8c:99:15:ce:ec:3b:94:84:12:7e:96: ce:b5:97:d0:9b:0f:5d:7c:9a:06:77:eb:56:b7:c1: 5d:97:b0:cd:6c:42:44:c5:70:55:8c:09:8a:98:3d: 68:b5:71:ed:5f:05:22:5d:a1:4b:c2:3c:88:34:62: 55:48:45:03:e6:a6:62:00:68:fe:77:cd:00:dd:1b: 54:4c:a6:b8:1a:68:f4:4f:f5:05:e4:29:e0:ef:cb: 23:33:e8:6c:09:a1:03:4f:13:03:b0:55:02:a8:e5: 8b:2b:0a:99:e7:8e:91:c6:30:aa:07:b2:8c:ec:1e: 91:67:ec:8b:de:02:8f:09:cf:82:2d:7a:9c:e4:74: 02:85:f6:11:46:6f:1b:a4:b9:86:90:65:49:da:02: 86:03:42:47:cd:2e:f2:ac:c0:df:0f:15:7f:3d:7d: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6A:82:0D:7B:AD:D7:21:AE:B1:DB:2F:95:92:1C:48:A6:8B:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 23.170.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e0:7e:f0:a2:ec:ea:b0:a5:c2:ac:cc:b3:a8:d9:0e:b4:ce: 7c:cf:ba:6d:74:0c:d9:45:e6:93:ef:79:38:e6:0e:34:33:34: ec:7a:f3:88:22:51:cc:8c:18:9a:dd:49:3f:de:ac:c4:a9:67: 3a:cd:6b:1d:45:b9:78:42:05:28:55:83:4d:22:85:bd:9b:d5: 20:1e:27:ee:ef:84:f8:25:63:97:6c:25:b8:fc:d5:bc:db:f3: 0d:01:6d:2a:3f:f8:4a:2b:66:21:54:6a:b1:6c:93:d9:30:e0: 3a:53:37:b3:96:74:53:b8:3c:07:8e:3f:04:d3:26:5f:36:69: 71:6a:a8:7a:93:12:2e:c7:02:67:fd:53:9f:87:8a:87:83:44: bc:d2:ef:24:ab:60:ba:2f:4a:f7:1a:d0:44:f7:60:19:f7:31: f9:a5:e2:6b:99:e2:75:24:ef:45:95:23:d7:15:63:ce:9e:b2: b1:a2:27:c4:f6:0c:b5:db:c1:e8:85:df:52:55:94:35:fe:03: b0:0d:3b:78:81:83:a6:c6:51:85:24:9a:2c:d6:80:21:a3:6c: d6:c7:14:2d:8f:23:98:3f:34:79:00:ac:31:97:12:9e:dc:87: 96:d4:4d:cc:88:6e:bb:cf:d7:68:74:94:3e:f3:43:3b:10:fe: 3d:69:19:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEst+SmB9BzKQx9ev8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI1MDkxMzA5NDEwNloXDTI1MTIxMjEwNDEwNlowLzEtMCsGA1UEAxMk MjIwYmUzNTYtNzM5Yi00MDFiLWI1NTEtYmU2ODg4MmFlNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyGCN/TTuvnVymXpK2kPMn8IHAwTRCJ/kZH6 uEFE4WbGQee6THNFWiYGL+OWunHn+3cCXdGtP4YT1PSlcEzp1gd/FLUX64+W317z e7QIq0JyQ1Jnx26cjRmEYwrLjJkVzuw7lIQSfpbOtZfQmw9dfJoGd+tWt8Fdl7DN bEJExXBVjAmKmD1otXHtXwUiXaFLwjyINGJVSEUD5qZiAGj+d80A3RtUTKa4Gmj0 T/UF5Cng78sjM+hsCaEDTxMDsFUCqOWLKwqZ546RxjCqB7KM7B6RZ+yL3gKPCc+C LXqc5HQChfYRRm8bpLmGkGVJ2gKGA0JHzS7yrMDfDxV/PX3ZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFqgg17rdchrrHbL5WSHEimi1csMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvM2ViMGY5YTUtZjgzZi0z ZjY1LWJkMTQtYjk4ZWJhZGFlZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6rxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPgfvCi7OqwpcKszLOo2Q60znzPum10DNlF5pPveTjmDjQzNOx684gi UcyMGJrdST/erMSpZzrNax1FuXhCBShVg00ihb2b1SAeJ+7vhPglY5dsJbj81bzb 8w0BbSo/+EorZiFUarFsk9kw4DpTN7OWdFO4PAeOPwTTJl82aXFqqHqTEi7HAmf9 U5+HioeDRLzS7ySrYLovSvca0ET3YBn3Mfml4muZ4nUk70WVI9cVY86esrGiJ8T2 DLXbweiF31JVlDX+A7ANO3iBg6bGUYUkmizWgCGjbNbHFC2PI5g/NHkArDGXEp7c h5bUTcyIbrvP12h0lD7zQzsQ/j1pGfQ= -----END CERTIFICATE-----Generated at Sat Oct 11 13:07:47 2025 by rpki-client