$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa File: afce5eab-0544-335c-99cb-2d69f9355be4.roa (raw, json) Hash identifier: OzMgdpoHK/2e8jMo1ylJkdqobVLwNUtVqb9/Cb/e5dg= Subject key identifier: 19:BD:18:B3:62:CF:67:24:13:A1:F8:B1:DC:9E:13:F1:B6:1D:EF:FF Certificate issuer: /CN=6283f7b1-718c-494a-9125-f81454a01548 Certificate serial: 010D0C9F4328584B25FC4656289564B6F77A73C0 Authority key identifier: CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46850 IP address blocks: 23.129.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:46:56:28:95:64:b6:f7:7a:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6283f7b1-718c-494a-9125-f81454a01548 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=57c8709d-c08a-469a-bfbe-83eaa0cc5ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:74:b9:29:3f:79:86:15:11:70:6e:e2:61: 97:1a:2e:38:54:95:e5:a0:61:ff:7b:0a:45:45:38: ee:8e:3b:8b:57:65:a0:0c:4d:bb:25:49:e7:84:06: 19:08:3a:ad:5f:f7:df:8d:2c:a9:1e:1b:af:03:cf: 41:3c:2c:0e:4f:43:5d:10:c4:94:8f:3c:7b:a7:32: 15:b9:a3:b3:77:86:cd:c4:26:9d:3e:8f:bb:b2:20: e9:39:fd:84:64:1b:31:5a:04:7b:57:34:e4:7a:b4: 9e:6e:ff:0b:be:8e:ce:4e:87:ee:67:7b:c9:99:cd: 89:89:8d:2b:8f:c6:65:92:b4:c9:41:84:48:ef:f3: 8c:83:93:cb:af:05:2e:e3:21:45:44:04:ac:8e:4b: ee:53:3c:3b:dc:15:02:c7:62:57:49:fa:14:f3:7e: 36:a8:34:79:81:3f:1e:14:99:81:13:d7:bf:0d:d9: e5:94:5f:fb:f9:90:07:20:10:76:15:1a:7b:f4:05: 3f:ad:76:12:d3:da:09:91:d6:a7:bc:0b:e6:5c:cf: fb:0b:63:1e:67:4e:6c:bd:c2:89:09:5e:64:a1:1c: 1f:73:ad:32:1f:95:5f:2e:ac:b5:8b:f6:85:50:e3: 26:69:a8:31:09:86:3e:32:ac:f8:b8:87:f8:70:24: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:18:B3:62:CF:67:24:13:A1:F8:B1:DC:9E:13:F1:B6:1D:EF:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/afce5eab-0544-335c-99cb-2d69f9355be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl X509v3 Authority Key Identifier: keyid:CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer sbgp-ipAddrBlock: critical IPv4: 23.129.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e1:e8:de:ae:72:23:2a:e4:07:5e:31:5f:d5:4d:ea:01:e0: 72:23:7d:1e:db:3f:76:e0:1e:49:51:ff:56:f2:bd:b0:9b:88: 28:d0:18:22:b1:83:20:8b:96:82:46:6f:69:33:3c:8e:d4:04: f2:78:b7:c0:96:94:fa:22:16:b4:5b:82:9c:8c:df:72:c9:d8: 3b:c7:74:51:1a:c6:4a:af:98:52:7b:d0:22:d7:7b:50:9f:29: 64:95:34:91:c4:ee:49:8a:08:74:f2:08:2c:91:d0:91:d8:a9: 79:be:40:76:18:60:d7:b2:b2:5c:6a:9a:cf:8b:39:61:b6:a9: da:c6:78:1b:8d:9b:3f:ce:41:3c:54:ad:a3:64:07:54:28:76: 5e:b8:aa:c5:8a:69:c7:e3:d9:e5:5f:1e:5b:b0:bf:a0:bd:77: c9:dd:c3:e3:0c:3d:fe:72:06:47:f0:ce:f9:04:f1:93:ab:ab: 9d:fc:ee:da:a1:ff:b5:a1:a3:7c:1f:91:c2:8c:51:f4:c5:31: 8e:db:22:1f:1d:80:21:88:b9:23:20:ae:33:3d:65:d7:2f:aa: d0:2b:82:7d:47:ff:0e:a5:94:93:d8:79:54:cd:fe:b1:da:27: f7:7d:3e:70:18:c8:48:56:6f:af:22:98:99:0e:e1:60:c8:8d: 05:eb:73:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EZWKJVktvd6c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4M2Y3YjEtNzE4Yy00OTRhLTkxMjUtZjgxNDU0YTAx NTQ4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NTdjODcwOWQtYzA4YS00NjlhLWJmYmUtODNlYWEwY2M1Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs90uSk/eYYVEXBu4mGXGi44VJXloGH/ewpF RTjujjuLV2WgDE27JUnnhAYZCDqtX/ffjSypHhuvA89BPCwOT0NdEMSUjzx7pzIV uaOzd4bNxCadPo+7siDpOf2EZBsxWgR7VzTkerSebv8Lvo7OTofuZ3vJmc2JiY0r j8ZlkrTJQYRI7/OMg5PLrwUu4yFFRASsjkvuUzw73BUCx2JXSfoU8342qDR5gT8e FJmBE9e/DdnllF/7+ZAHIBB2FRp79AU/rXYS09oJkdanvAvmXM/7C2MeZ05svcKJ CV5koRwfc60yH5VfLqy1i/aFUOMmaagxCYY+Mqz4uIf4cCSlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm9GLNiz2ckE6H4sdyeE/G2He//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Mjgz ZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0NTRhMDE1NDgvYWZjZTVlYWItMDU0NC0z MzVjLTk5Y2ItMmQ2OWY5MzU1YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjI4M2Y3YjEtNzE4Yy00OTRhLTkx MjUtZjgxNDU0YTAxNTQ4LzYyODNmN2IxLTcxOGMtNDk0YS05MTI1LWY4MTQ1NGEw MTU0OC5jcmwwHwYDVR0jBBgwFoAUz5/mxkNc6ao2BN3hgdcd0RrlhtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MjgzZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0 NTRhMDE1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPh6N6uciMq5AdeMV/VTeoB4HIjfR7bP3bgHklR/1byvbCbiCjQGCKx gyCLloJGb2kzPI7UBPJ4t8CWlPoiFrRbgpyM33LJ2DvHdFEaxkqvmFJ70CLXe1Cf KWSVNJHE7kmKCHTyCCyR0JHYqXm+QHYYYNeyslxqms+LOWG2qdrGeBuNmz/OQTxU raNkB1Qodl64qsWKacfj2eVfHluwv6C9d8ndw+MMPf5yBkfwzvkE8ZOrq5387tqh /7Who3wfkcKMUfTFMY7bIh8dgCGIuSMgrjM9ZdcvqtArgn1H/w6llJPYeVTN/rHa J/d9PnAYyEhWb68imJkO4WDIjQXrczM= -----END CERTIFICATE-----Generated at Thu Oct 9 08:53:40 2025 by rpki-client