$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa File: a917fca9-ce27-3640-9fa5-0743e75ecab6.roa (raw, json) Hash identifier: hJRYL6f/I3b8rVkOXmziupuISpe/pmqhXJWXMIWCml0= Subject key identifier: 28:63:B7:FC:41:0D:09:35:1F:A5:7A:EA:73:D4:E4:D5:D9:41:23:41 Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Certificate serial: 010D0C9F4328584B41E727D50DA8828180C9E0C0 Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 395163 IP address blocks: 23.150.192.0/24 maxlen: 24 2604:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:27:d5:0d:a8:82:81:80:c9:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=74d26edc-2ace-443c-9af2-ae60ff73ab94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:89:11:11:df:23:23:d2:14:2a:d0:03:3c: 91:ab:14:af:d3:09:5b:6b:57:c8:45:f0:2a:b2:bd: 61:2e:b0:05:80:82:4c:37:58:2c:6d:5a:19:d5:7e: 4d:da:d5:99:51:87:f4:39:27:0e:6a:47:48:bf:89: 7d:f7:bf:83:34:19:42:7e:17:28:a2:17:09:3f:05: 7a:55:9e:b5:49:30:b5:c3:ec:9b:e2:e8:78:97:f5: b1:74:d0:4d:02:df:26:46:1a:fb:e7:04:85:55:61: 0c:8b:10:a6:4b:bb:d4:d9:73:d0:37:c0:a1:4e:d7: 4a:34:0f:a0:c9:6b:6b:e0:a1:b8:76:58:db:38:3a: 21:e0:20:88:d6:49:df:8e:51:e5:2e:04:10:bd:69: cf:41:17:69:23:1c:f3:02:b3:80:48:c6:ba:43:72: 62:f8:da:45:bd:f5:63:ba:e5:b2:33:26:59:36:fa: e9:aa:34:13:20:c9:5d:48:33:03:24:bf:a2:66:7f: d6:69:8c:36:34:06:c2:d9:62:e7:5f:27:73:4f:2c: 2b:2a:63:3e:b5:44:ff:2b:e1:d7:5b:35:00:45:2e: a2:58:39:33:a5:ad:27:01:df:33:e0:13:cf:ea:01: bb:83:d0:df:f7:34:be:cb:a4:37:b2:63:6c:53:c1: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:B7:FC:41:0D:09:35:1F:A5:7A:EA:73:D4:E4:D5:D9:41:23:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl X509v3 Authority Key Identifier: keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer sbgp-ipAddrBlock: critical IPv4: 23.150.192.0/24 IPv6: 2604:70c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:08:a6:68:f2:fc:18:e5:6a:a5:6c:8e:f7:db:47:93:9f:af: 52:b2:f5:8c:77:5d:66:e5:5a:14:58:30:0a:a6:44:77:19:91: 63:65:dd:7b:49:2f:0d:9b:d8:64:ce:fa:17:f4:d8:7b:2e:23: fe:9f:28:3f:47:5c:16:80:98:a3:25:8e:69:1d:d7:eb:4b:de: 8d:28:55:65:8a:74:46:b7:3a:fb:be:e8:7f:18:7f:bf:4e:06: 1d:73:13:7e:e2:47:03:47:6f:64:7f:2c:01:2d:58:fa:65:b5: 7f:1b:67:ce:69:d8:43:a3:3e:db:b1:68:8a:12:43:43:96:d0: ab:8e:fa:3a:1d:2f:d6:f0:21:11:8e:00:92:b1:dc:b7:68:87: 8d:8d:f3:9f:f1:93:ec:ad:84:2d:6e:a9:e2:e6:67:bc:94:0c: 9c:9d:46:f5:1a:38:66:d3:06:b6:a9:cb:f4:40:ae:b1:b5:1e: 58:7e:bc:e9:ae:92:28:fc:f7:ad:e4:74:bf:b0:2f:fd:bd:ce: 05:cd:6c:01:b6:39:af:b2:af:15:a6:e7:70:58:35:3a:2e:7d: 3f:cc:5c:7a:d8:b1:28:fe:1a:17:77:0a:ff:07:c9:42:ca:a8: 2f:16:8d:b8:1b:97:4a:84:bc:dd:fc:2f:93:e2:c3:09:60:99: 90:46:e6:78 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtB5yfVDaiCgYDJ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi YWRiMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NzRkMjZlZGMtMmFjZS00NDNjLTlhZjItYWU2MGZmNzNhYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOKJERHfIyPSFCrQAzyRqxSv0wlba1fIRfAq sr1hLrAFgIJMN1gsbVoZ1X5N2tWZUYf0OScOakdIv4l997+DNBlCfhcoohcJPwV6 VZ61STC1w+yb4uh4l/WxdNBNAt8mRhr75wSFVWEMixCmS7vU2XPQN8ChTtdKNA+g yWtr4KG4dljbODoh4CCI1knfjlHlLgQQvWnPQRdpIxzzArOASMa6Q3Ji+NpFvfVj uuWyMyZZNvrpqjQTIMldSDMDJL+iZn/WaYw2NAbC2WLnXydzTywrKmM+tUT/K+HX WzUARS6iWDkzpa0nAd8z4BPP6gG7g9Df9zS+y6Q3smNsU8EJzwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFChjt/xBDQk1H6V66nPU5NXZQSNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvYTkxN2ZjYTktY2UyNy0z NjQwLTlmYTUtMDc0M2U3NWVjYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5 ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0 N2IxYmJhZGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5bAMA0E AgACMAcDBQAmBHDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABYIpmjy/BjlaqVsjvfbR5Ofr1Ky9Yx3XWbl WhRYMAqmRHcZkWNl3XtJLw2b2GTO+hf02HsuI/6fKD9HXBaAmKMljmkd1+tL3o0o VWWKdEa3Ovu+6H8Yf79OBh1zE37iRwNHb2R/LAEtWPpltX8bZ85p2EOjPtuxaIoS Q0OW0KuO+jodL9bwIRGOAJKx3Ldoh42N85/xk+ythC1uqeLmZ7yUDJydRvUaOGbT Brapy/RArrG1Hlh+vOmukij8963kdL+wL/29zgXNbAG2Oa+yrxWm53BYNToufT/M XHrYsSj+Ghd3Cv8HyULKqC8Wjbgbl0qEvN38L5PiwwlgmZBG5ng= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:59 2025 by rpki-client