$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa File: 2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json) Hash identifier: vGvASxxhQOYpVRkZlsT1FWi4Jh/KfU9RlYB+b9PvZyQ= Subject key identifier: EE:20:36:AD:00:BA:C0:4A:00:21:E0:47:BB:88:A2:42:E0:5E:FD:59 Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Certificate serial: 010D0C9F4328584B1AD18E05D36658932743D1C0 Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 19415 IP address blocks: 23.166.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8e:05:d3:66:58:93:27:43:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6351cefa-eda1-4a31-8130-1183757d04bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:7b:57:c9:fd:b2:a6:4e:9e:84:d9:2c:29: 0f:e6:66:f9:c6:d0:e3:a0:fe:23:63:99:e2:c6:01: 0b:0c:bb:2c:ce:11:a7:7a:31:8c:f5:91:3e:71:1c: c2:e7:fc:fa:36:d2:f9:48:33:51:cb:3c:c5:c4:b6: 18:dc:1d:67:50:4c:fd:2e:76:cc:a3:8a:79:c8:cf: 36:34:d6:15:a7:be:1f:04:10:37:ba:fd:12:9f:33: a5:89:a2:ad:58:52:6e:a5:b2:f2:ef:d9:3c:64:18: ba:d2:76:d5:ea:85:38:15:4a:01:fa:48:7d:1a:b7: 20:73:56:4c:45:bc:cf:d6:a3:f5:21:c9:13:54:7b: ac:3a:80:28:4b:d0:ea:2d:26:c1:f7:ad:c5:a0:33: 60:fd:78:c9:4f:da:ad:f0:43:2d:1f:0d:e3:0f:e3: dc:5b:27:38:6b:be:be:ab:50:64:98:69:29:67:63: 2f:fe:48:84:94:b1:82:57:7a:22:9e:5c:b5:d5:71: 8b:a4:4f:45:a9:a6:16:c4:0e:7a:0a:20:fb:d7:8e: ac:ac:32:2e:b9:d4:ec:82:18:fd:3d:f2:dc:b1:c4: 3d:39:db:9f:ea:75:37:b9:7a:3f:e9:ac:83:a4:c6: 01:33:58:91:8c:93:5c:6e:9b:e9:8d:4b:df:66:18: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:36:AD:00:BA:C0:4A:00:21:E0:47:BB:88:A2:42:E0:5E:FD:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl X509v3 Authority Key Identifier: keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:86:ba:f3:44:cc:8e:88:6c:38:ad:95:5e:91:a4:5e:31:f9: cc:cb:83:3d:e9:c3:7b:ac:de:e0:9c:d8:3e:4b:46:50:3d:8f: 54:d7:59:2a:65:b8:3e:9c:28:ab:34:3d:b0:2c:dc:9e:51:a5: 51:8e:37:40:93:bc:7e:2d:5a:3e:f8:9b:ac:00:cb:17:b7:c4: 87:0a:5a:fb:85:38:3e:6a:f4:c2:2b:98:4c:53:11:20:ba:cf: 50:65:3e:46:9c:70:ef:bd:ab:d1:4e:5b:8d:1e:5d:a2:91:e7: b9:74:e3:e5:9d:48:f3:d1:96:cf:65:ab:61:66:14:3a:53:9b: 07:ba:e1:6e:e6:ea:18:e8:cd:27:7f:39:fe:7f:b9:45:ac:50: bc:bf:7d:a2:67:b1:b3:1d:ec:9a:5e:4f:c1:16:8b:23:87:23: 52:f1:b7:6d:30:52:ac:db:07:b3:97:aa:0f:09:58:df:b7:16: ac:72:95:79:e7:20:01:63:ca:ee:51:03:7c:83:0c:11:92:b7: ee:49:81:30:6b:97:82:98:c4:81:30:d7:e0:20:33:e3:39:6e: 1e:04:15:8c:16:6e:2c:4a:b4:43:a5:36:4c:76:9b:5e:82:1d: b6:1a:37:44:36:78:52:0c:f5:36:7d:86:b7:e4:9f:61:a6:6a: e5:34:97:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y4F02ZYkydD0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm MGU1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjM1MWNlZmEtZWRhMS00YTMxLTgxMzAtMTE4Mzc1N2QwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eB7V8n9sqZOnoTZLCkP5mb5xtDjoP4jY5ni xgELDLsszhGnejGM9ZE+cRzC5/z6NtL5SDNRyzzFxLYY3B1nUEz9LnbMo4p5yM82 NNYVp74fBBA3uv0SnzOliaKtWFJupbLy79k8ZBi60nbV6oU4FUoB+kh9Grcgc1ZM RbzP1qP1IckTVHusOoAoS9DqLSbB963FoDNg/XjJT9qt8EMtHw3jD+PcWyc4a76+ q1BkmGkpZ2Mv/kiElLGCV3oinly11XGLpE9FqaYWxA56CiD7146srDIuudTsghj9 PfLcscQ9Oduf6nU3uXo/6ayDpMYBM1iRjJNcbpvpjUvfZhhOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4gNq0AusBKACHgR7uIokLgXv1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMmI5ODUxMmYtZTc4MS0z YjlhLWI5NTQtNmJiZGFlM2I0M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0 ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2 ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh ZGNkNmYwZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGGuvNEzI6IbDitlV6RpF4x+czLgz3pw3us3uCc2D5LRlA9j1TXWSpl uD6cKKs0PbAs3J5RpVGON0CTvH4tWj74m6wAyxe3xIcKWvuFOD5q9MIrmExTESC6 z1BlPkaccO+9q9FOW40eXaKR57l04+WdSPPRls9lq2FmFDpTmwe64W7m6hjozSd/ Of5/uUWsULy/faJnsbMd7JpeT8EWiyOHI1Lxt20wUqzbB7OXqg8JWN+3FqxylXnn IAFjyu5RA3yDDBGSt+5JgTBrl4KYxIEw1+AgM+M5bh4EFYwWbixKtEOlNkx2m16C HbYaN0Q2eFIM9TZ9hrfkn2GmauU0l4Y= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:51 2025 by rpki-client