$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa File: 33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa (raw, json) Hash identifier: 2Up27QGGIwQbdUb3UY8qSa5GtKKjSkNmfG8R7Ryhv5I= Subject key identifier: C2:62:A8:E7:24:F8:C8:88:17:77:98:78:7B:14:72:7B:8A:D4:CC:A1 Certificate issuer: /CN=90084646-f74e-42c1-9557-3764d36b8bb6 Certificate serial: 010D0C9F4328584B76F2561080EDB0A4D123BA00 Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 396238 IP address blocks: 23.187.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:56:10:80:ed:b0:a4:d1:23:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=20b9d3d6-6a19-4d0a-89ad-5f8685463337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:67:f6:54:ed:e4:fb:42:15:29:0f:93:20: 62:be:36:f8:4a:c6:97:09:2c:5b:c2:70:7f:89:56: 63:72:37:aa:6e:bb:f1:a5:a3:47:0b:b4:5e:bb:e9: f8:3a:fe:6a:d9:a6:57:36:90:e4:04:26:e1:d6:e9: d3:51:83:be:a5:cc:fd:a0:b2:ef:2c:32:c3:88:bd: 31:f8:a6:b6:47:9e:d6:bb:90:3a:0a:7a:9c:20:e8: 3e:10:65:51:d5:a2:c5:ea:3a:54:de:62:ae:51:8f: 0d:e9:43:8d:6a:c1:43:5c:ba:69:bf:de:f4:7f:bb: bf:64:19:2c:83:2a:87:32:79:b0:09:41:a7:2b:9f: d5:4f:97:3d:28:fc:c0:fa:12:40:48:97:84:08:ff: 1d:a1:53:43:7c:8d:bf:f5:41:26:b7:c6:9f:9a:80: 6c:6d:de:ad:6f:2a:6c:d6:39:fb:c1:69:8d:33:a0: 89:ee:b1:6c:83:d8:86:39:38:a6:69:83:75:f5:29: ff:60:05:c3:79:25:de:a7:29:56:87:4b:e8:2a:74: 75:a5:15:49:b6:c1:20:58:67:63:63:48:bc:ff:8f: 93:ce:b8:53:ac:fe:2f:9c:fa:96:bc:c1:24:fe:1c: e1:c8:d4:b3:bc:61:5c:a3:77:2d:b2:5a:e9:6a:0d: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:62:A8:E7:24:F8:C8:88:17:77:98:78:7B:14:72:7B:8A:D4:CC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl X509v3 Authority Key Identifier: keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer sbgp-ipAddrBlock: critical IPv4: 23.187.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e8:30:53:6a:f8:a3:e2:1b:7d:37:79:d6:84:c7:06:73:d7: 28:66:26:dd:d7:c8:e4:6a:d2:a7:ef:4e:3e:a2:4b:51:e8:f1: 4a:18:8b:f0:0d:df:8f:ee:5f:50:f5:f0:1c:60:2f:40:3b:be: f0:02:db:b1:94:e1:a0:3d:54:a1:82:19:6e:ff:b1:ee:4f:2b: 0b:1e:aa:b2:6d:55:43:28:04:9f:26:e9:27:fc:32:40:94:5a: a4:e6:80:27:5a:ae:69:3e:ac:08:11:b0:ee:a8:f2:51:14:b0: 71:d2:00:6d:2e:57:47:4e:c7:6f:9b:15:7f:99:a6:02:ef:99: ba:42:49:18:2c:23:7c:25:ef:b0:de:9e:b2:c1:8b:2c:ab:e2: a6:d2:86:a7:e3:8f:88:df:d0:df:60:72:b1:75:1d:03:bc:1d: 28:72:86:b0:5a:d8:de:0b:a5:dd:9a:ef:86:c2:8f:e8:9d:19: 95:ca:39:2e:e0:87:4f:6b:72:86:4c:3d:e0:3f:25:b8:92:3e: e6:01:24:98:90:cf:a5:76:dc:64:39:2c:61:40:05:ca:8c:99: 1a:4d:7b:a1:65:dd:75:01:ea:2a:4b:6a:a0:a3:07:b4:47:25: 73:a9:99:19:93:9d:99:6d:b3:1e:fd:b0:5c:02:bc:d0:3b:0f: 96:fc:d4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lYQgO2wpNEjugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwODQ2NDYtZjc0ZS00MmMxLTk1NTctMzc2NGQzNmI4 YmI2MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjBiOWQzZDYtNmExOS00ZDBhLTg5YWQtNWY4Njg1NDYzMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHJn9lTt5PtCFSkPkyBivjb4SsaXCSxbwnB/ iVZjcjeqbrvxpaNHC7Reu+n4Ov5q2aZXNpDkBCbh1unTUYO+pcz9oLLvLDLDiL0x +Ka2R57Wu5A6CnqcIOg+EGVR1aLF6jpU3mKuUY8N6UONasFDXLppv970f7u/ZBks gyqHMnmwCUGnK5/VT5c9KPzA+hJASJeECP8doVNDfI2/9UEmt8afmoBsbd6tbyps 1jn7wWmNM6CJ7rFsg9iGOTimaYN19Sn/YAXDeSXepylWh0voKnR1pRVJtsEgWGdj Y0i8/4+TzrhTrP4vnPqWvMEk/hzhyNSzvGFco3ctslrpag070QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJiqOck+MiIF3eYeHsUcnuK1MyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4 NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0ZDM2YjhiYjYvMzM5ODljNTItYTQyZi0z YmQxLTkyMzUtM2M0ZmY3MjU1YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTAwODQ2NDYtZjc0ZS00MmMxLTk1 NTctMzc2NGQzNmI4YmI2LzkwMDg0NjQ2LWY3NGUtNDJjMS05NTU3LTM3NjRkMzZi OGJiNi5jcmwwHwYDVR0jBBgwFoAUMWKVqaj998qywom8R2R9/B6gfZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0 ZDM2YjhiYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjoMFNq+KPiG303edaExwZz1yhmJt3XyORq0qfvTj6iS1Ho8UoYi/AN 34/uX1D18BxgL0A7vvAC27GU4aA9VKGCGW7/se5PKwseqrJtVUMoBJ8m6Sf8MkCU WqTmgCdarmk+rAgRsO6o8lEUsHHSAG0uV0dOx2+bFX+ZpgLvmbpCSRgsI3wl77De nrLBiyyr4qbShqfjj4jf0N9gcrF1HQO8HShyhrBa2N4Lpd2a74bCj+idGZXKOS7g h09rcoZMPeA/JbiSPuYBJJiQz6V23GQ5LGFABcqMmRpNe6Fl3XUB6ipLaqCjB7RH JXOpmRmTnZltsx79sFwCvNA7D5b81Cg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:45 2025 by rpki-client