$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa File: 9787b498-f81f-37d7-a779-d4e727560c5b.roa (raw, json) Hash identifier: m6BLLGPNcx+mOyskfRKI4Zr0ufe3XMJjBFpxE1AdWTk= Subject key identifier: DC:C2:FB:80:A4:FC:E7:96:9E:0C:D3:4F:4C:E2:CD:CB:D1:0C:FC:A4 Certificate issuer: /CN=f838c026-61f9-443d-b867-26f60a99d561 Certificate serial: 010D0C9F4328584B6BC75D134AB040B57C5115A0 Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 30205 IP address blocks: 23.168.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5d:13:4a:b0:40:b5:7c:51:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=10684030-0147-43fb-9db7-1ef11d87de12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:7e:b8:b4:f1:f2:30:8c:01:8e:20:f4:47: 45:43:f3:40:6d:be:cd:89:5e:4e:bf:bc:9a:fb:88: 70:51:b3:71:3b:c7:39:ec:ba:6b:b2:2b:2f:5c:2d: d0:8e:a8:fc:54:6d:08:01:9e:a6:2c:14:83:77:53: 40:09:e0:2e:1d:ad:6c:bc:ff:ee:24:2a:c9:50:76: bc:08:c1:01:56:ef:a0:a3:03:c7:d8:f4:76:f1:d4: 24:35:2c:13:aa:58:bf:80:58:bc:8d:0e:81:87:63: eb:a1:9d:2d:fc:67:2f:ed:3b:7c:45:2a:aa:7e:77: 3e:9b:51:18:88:b1:f8:e7:84:f0:19:1b:73:62:23: 2d:91:0c:df:f8:10:f5:6d:b3:6e:ac:82:92:22:c8: 64:80:14:52:9a:3e:9e:4a:15:d4:f6:f0:3a:3d:e7: 4a:46:5e:9a:95:6f:7f:f6:f9:83:dc:e1:94:7f:c3: 12:7a:fb:42:9c:ef:14:f4:53:6f:3d:8b:5c:38:81: 0c:df:14:2e:1d:23:d5:5c:03:c6:23:34:a4:a1:ee: 9f:69:b8:91:29:03:2d:29:cb:93:e1:e5:dc:e9:56: e8:3f:51:17:9d:11:b7:41:b6:1d:ef:b3:2c:f2:e3: 1b:79:12:68:1d:1f:0b:7b:a6:ba:47:f2:f9:87:ec: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:FB:80:A4:FC:E7:96:9E:0C:D3:4F:4C:E2:CD:CB:D1:0C:FC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/9787b498-f81f-37d7-a779-d4e727560c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl X509v3 Authority Key Identifier: keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer sbgp-ipAddrBlock: critical IPv4: 23.168.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:83:50:6c:ec:83:64:39:c5:e8:bd:91:d0:58:e8:4e:d4:d8: 45:c3:7e:b4:aa:f6:2a:23:2e:32:7d:51:13:76:e6:ee:ff:36: 39:28:3d:63:6e:0d:18:84:75:e7:e8:69:7d:1c:d5:d5:3a:f6: 94:ac:92:3d:f5:c9:d7:86:02:62:ac:a8:fb:c0:9e:b4:9e:e9: ff:4c:8c:d6:ec:83:82:28:aa:8f:e5:f2:e6:a7:48:0c:94:ac: 1e:84:af:40:33:bd:a2:a6:49:63:20:80:c4:1b:1a:ec:1f:aa: 26:56:30:55:4f:11:51:97:ca:56:cb:b7:ad:ff:d7:d9:5f:c7: e0:6d:13:bb:17:71:4e:27:0a:2a:2e:7f:fc:d4:b0:be:a9:44: a0:f0:95:ed:35:65:54:42:06:be:40:f6:0c:4c:83:c3:bc:dc: f9:c4:98:8e:28:6a:a4:80:57:a0:97:30:36:88:2f:07:f2:24: 68:72:71:79:89:3b:de:60:80:a5:c1:e3:75:11:8e:e5:60:7b: 53:43:74:97:27:30:7e:a7:ab:0c:f7:63:47:b5:4d:7e:85:92: e6:72:36:c4:c7:a8:03:bc:6e:7d:92:aa:da:64:5b:38:a5:4c: 1c:d4:06:94:76:52:41:b7:f6:0d:0c:91:09:03:78:2b:f5:db: 33:00:3f:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx10TSrBAtXxRFaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgzOGMwMjYtNjFmOS00NDNkLWI4NjctMjZmNjBhOTlk NTYxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTA2ODQwMzAtMDE0Ny00M2ZiLTlkYjctMWVmMTFkODdkZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fh+uLTx8jCMAY4g9EdFQ/NAbb7NiV5Ov7ya +4hwUbNxO8c57LprsisvXC3Qjqj8VG0IAZ6mLBSDd1NACeAuHa1svP/uJCrJUHa8 CMEBVu+gowPH2PR28dQkNSwTqli/gFi8jQ6Bh2ProZ0t/Gcv7Tt8RSqqfnc+m1EY iLH454TwGRtzYiMtkQzf+BD1bbNurIKSIshkgBRSmj6eShXU9vA6PedKRl6alW9/ 9vmD3OGUf8MSevtCnO8U9FNvPYtcOIEM3xQuHSPVXAPGIzSkoe6fabiRKQMtKcuT 4eXc6VboP1EXnRG3QbYd77Ms8uMbeRJoHR8Le6a6R/L5h+zr7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzC+4Ck/OeWngzTT0zizcvRDPykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4 YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2MGE5OWQ1NjEvOTc4N2I0OTgtZjgxZi0z N2Q3LWE3NzktZDRlNzI3NTYwYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgzOGMwMjYtNjFmOS00NDNkLWI4 NjctMjZmNjBhOTlkNTYxL2Y4MzhjMDI2LTYxZjktNDQzZC1iODY3LTI2ZjYwYTk5 ZDU2MS5jcmwwHwYDVR0jBBgwFoAUI0cb0q5+FuuhqUXoDoIRiHSasuQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mODM4YzAyNi02MWY5LTQ0M2QtYjg2Ny0yNmY2 MGE5OWQ1NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSDUGzsg2Q5xei9kdBY6E7U2EXDfrSq9iojLjJ9URN25u7/NjkoPWNu DRiEdefoaX0c1dU69pSskj31ydeGAmKsqPvAnrSe6f9MjNbsg4Ioqo/l8uanSAyU rB6Er0AzvaKmSWMggMQbGuwfqiZWMFVPEVGXylbLt63/19lfx+BtE7sXcU4nCiou f/zUsL6pRKDwle01ZVRCBr5A9gxMg8O83PnEmI4oaqSAV6CXMDaILwfyJGhycXmJ O95ggKXB43URjuVge1NDdJcnMH6nqwz3Y0e1TX6FkuZyNsTHqAO8bn2SqtpkWzil TBzUBpR2UkG39g0MkQkDeCv12zMAPw4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:46 2025 by rpki-client