$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa File: ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa (raw, json) Hash identifier: +0JGzICs9ne0Kx0JEp9PLhsjkeNu4Y+D/zHexJmkIN0= Subject key identifier: F2:66:D5:C5:9F:A5:B7:20:7F:DD:08:F2:6F:E9:BA:C0:82:EF:CB:97 Certificate issuer: /CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Certificate serial: 010D0C9F4328584B6BC776723C45215D3C33F680 Authority key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 174 IP address blocks: 23.141.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:76:72:3c:45:21:5d:3c:33:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=10afb72b-b819-49b3-ab76-0c0ff34a775f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:46:f4:6f:f4:0d:5d:c8:b8:d1:55:2f:15:b8: 7a:f1:1d:d7:75:5f:57:bc:35:c0:a6:94:7e:48:4c: d0:d9:3d:30:cf:bf:ca:03:25:e4:08:56:07:79:0f: f5:83:4d:5e:ae:b8:ea:81:b7:61:3d:cc:79:79:17: a4:18:d3:34:15:07:b0:14:26:75:11:a4:9e:c0:5f: 30:af:4a:39:03:25:42:e1:3a:53:ff:61:0e:ce:5d: 5e:76:58:df:b5:0f:4c:80:8b:79:85:40:86:9c:ff: 47:45:60:65:ae:61:47:7d:52:8b:f0:a6:06:0f:30: a3:7f:a1:28:51:d8:b4:b9:13:9f:8e:d4:78:be:b4: 69:4b:33:50:9f:5c:f9:d8:82:9f:1b:44:21:6b:89: 57:1b:de:17:14:96:52:59:2b:2f:df:c4:d5:23:e9: 52:c0:51:7a:9a:c4:da:59:1c:1a:2f:1e:16:bf:4b: 90:7e:07:61:31:60:98:ef:6e:56:d7:b0:3c:5c:05: 62:64:77:f7:35:6c:b9:95:13:77:c8:37:77:69:fe: cc:10:32:3f:36:03:cc:01:f4:a2:14:9a:23:ba:8b: a3:6b:37:06:43:c8:ee:40:e1:b9:cb:6c:a0:6f:2a: 51:b1:b9:68:f3:38:2d:40:a9:f6:50:ca:67:f7:16: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:D5:C5:9F:A5:B7:20:7F:DD:08:F2:6F:E9:BA:C0:82:EF:CB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl X509v3 Authority Key Identifier: keyid:11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b8:68:7c:db:d2:65:66:48:16:34:96:68:46:b7:4b:d8:9c: ce:8d:a5:08:21:af:ae:93:f6:93:6f:df:5b:ed:4f:51:d4:1b: 6b:27:48:4a:7a:8c:1c:86:cd:e1:f2:07:4a:53:ad:ed:22:cd: 14:2d:b8:9f:3e:4e:ab:8b:b6:c3:43:b5:dd:58:ce:ba:6d:8e: 2e:4f:b5:38:a7:79:a1:3a:92:93:44:a4:c8:6b:d6:08:99:07: f0:79:5b:6b:c0:94:6e:45:a1:a3:87:e1:aa:2c:7b:a8:16:5c: 6c:18:9b:d0:ac:c9:fa:1f:36:cd:c3:e2:ca:83:15:dc:6e:c3: f7:3b:d0:9e:84:58:d4:12:fe:18:98:f4:09:65:ef:0a:0b:d4: 8f:43:56:8b:fa:39:ea:e7:91:77:69:23:2d:7e:98:d6:33:1f: 5e:d3:05:fa:78:08:20:7b:c6:ff:7d:1a:7f:64:98:77:4d:35: 09:0a:b1:cf:d7:cb:04:b7:58:80:d5:e1:3c:1b:9e:c9:d9:37: 84:8b:e4:fd:58:87:de:27:ba:af:1f:f7:18:c6:8e:de:de:f2: 8a:89:c8:d2:13:a7:7b:8b:ce:e1:ee:7b:66:98:4b:75:fa:92: 31:3c:d6:8c:4e:f8:02:87:3b:94:47:4a:d6:6e:62:b9:59:36: 67:3a:2f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3ZyPEUhXTwz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRk ZGYwMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTBhZmI3MmItYjgxOS00OWIzLWFiNzYtMGMwZmYzNGE3NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEb0b/QNXci40VUvFbh68R3XdV9XvDXAppR+ SEzQ2T0wz7/KAyXkCFYHeQ/1g01errjqgbdhPcx5eRekGNM0FQewFCZ1EaSewF8w r0o5AyVC4TpT/2EOzl1edljftQ9MgIt5hUCGnP9HRWBlrmFHfVKL8KYGDzCjf6Eo Udi0uROfjtR4vrRpSzNQn1z52IKfG0Qha4lXG94XFJZSWSsv38TVI+lSwFF6msTa WRwaLx4Wv0uQfgdhMWCY725W17A8XAViZHf3NWy5lRN3yDd3af7MEDI/NgPMAfSi FJojuoujazcGQ8juQOG5y2ygbypRsblo8zgtQKn2UMpn9xa4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJm1cWfpbcgf90I8m/pusCC78uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRi NGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvYWU4OTJmYTctMThjNC0z NWFhLThlNmEtODE0NWU0NWE2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGFkYjRkOWEtOWZjNC00M2Y3LThj ZmItOTUxMTljMWRkZGYwLzBhZGI0ZDlhLTlmYzQtNDNmNy04Y2ZiLTk1MTE5YzFk ZGRmMC5jcmwwHwYDVR0jBBgwFoAUEXnUpqYxSFZdYeeNBh95om0K/4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTEx OWMxZGRkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA24aHzb0mVmSBY0lmhGt0vYnM6NpQghr66T9pNv31vtT1HUG2snSEp6 jByGzeHyB0pTre0izRQtuJ8+TquLtsNDtd1Yzrptji5PtTineaE6kpNEpMhr1giZ B/B5W2vAlG5FoaOH4aose6gWXGwYm9CsyfofNs3D4sqDFdxuw/c70J6EWNQS/hiY 9All7woL1I9DVov6OernkXdpIy1+mNYzH17TBfp4CCB7xv99Gn9kmHdNNQkKsc/X ywS3WIDV4TwbnsnZN4SL5P1Yh94nuq8f9xjGjt7e8oqJyNITp3uLzuHue2aYS3X6 kjE81oxO+AKHO5RHStZuYrlZNmc6L/s= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:25 2025 by rpki-client