$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa File: 4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa (raw, json) Hash identifier: Y+W/3tBCOEPd/RI/41J6Xx5ZGsvrmbm/aO+4bFoVVnY= Subject key identifier: 97:83:D4:DA:12:BE:3F:5D:18:03:60:3F:84:D0:B6:94:A7:3A:A2:1B Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584B6A620338BFAE91C6D48521C0 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 13356 IP address blocks: 23.161.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:03:38:bf:ae:91:c6:d4:85:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=c984ec70-4815-44cb-b45c-d76ebf521582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:4e:1c:11:32:aa:51:c4:4e:f1:1f:80:26: 9f:bc:57:ac:03:34:e2:ed:45:69:03:d3:99:0b:5b: 22:e8:9b:74:ea:d7:4d:19:b0:30:c4:37:65:ca:1e: 1d:1b:6a:80:a5:66:74:e7:b9:48:ae:34:5a:fd:cc: 9a:26:fb:62:54:29:19:af:be:1b:b4:55:84:d3:ee: a4:04:1c:01:08:38:c9:f7:59:f8:04:ea:f3:7b:de: 92:67:2b:29:3e:cb:32:fc:62:0d:a4:89:8f:1b:ef: 39:26:00:aa:1f:02:45:45:7b:d1:12:a3:92:8a:39: 19:4b:90:91:aa:05:90:72:37:0c:ce:16:da:ba:59: 68:1c:cc:9e:d2:41:02:a3:4a:40:96:24:c1:27:77: a4:ed:4b:7c:2a:2a:f1:82:7e:0d:3c:eb:97:8f:96: 49:0b:a7:66:04:34:d3:c9:46:fb:1c:91:ba:66:ad: 3c:a0:c6:85:7c:5c:df:23:27:c6:0d:99:bd:7d:c8: f0:86:72:3f:1f:d0:a0:2f:a5:4a:a5:51:d6:53:d7: 84:c7:d1:90:2a:29:51:02:bc:c9:12:2f:f0:d6:75: 3d:fc:f6:e5:41:87:2d:85:18:d6:27:46:a1:f7:56: 6e:f2:ea:67:fb:6b:ce:6a:4a:1c:3e:0b:d8:d3:d1: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:83:D4:DA:12:BE:3F:5D:18:03:60:3F:84:D0:B6:94:A7:3A:A2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv4: 23.161.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:33:45:b3:e4:3d:0c:84:46:a2:ac:ca:32:2e:c8:6e:1b:df: 82:23:f2:8f:45:42:60:17:23:52:3c:44:ad:41:58:06:e2:36: 13:91:7c:e6:c5:21:0f:59:89:76:38:fa:4c:75:6e:b3:31:df: 06:f3:d7:05:a6:9c:89:67:16:2a:36:12:91:c3:6c:20:d8:bf: 69:09:fe:f7:fa:89:2f:66:6f:44:d3:02:c4:df:c6:70:7e:b7: 30:c6:08:e8:b9:e1:cc:be:17:23:cd:f0:8e:64:18:2c:c7:c1: 3a:ca:2f:43:03:ed:23:07:90:19:e5:ea:81:84:4a:bb:af:f3: 99:8d:33:f2:2a:e8:f6:35:13:62:77:9f:f4:3c:99:c9:70:70: 94:d7:1b:43:7c:db:31:03:2b:c3:cd:02:22:00:c5:ba:42:07: 55:bb:ce:f9:be:dd:fd:9c:aa:b4:9f:cc:4a:ed:9d:07:f2:01: 68:e5:85:ab:87:19:d8:12:16:f5:ec:25:48:55:ae:ef:d9:5a: fa:74:ef:80:78:e4:62:9f:44:66:4b:cb:8e:a2:0e:35:5c:ca: 5a:a7:87:b4:a1:3e:1c:02:b8:41:c1:fd:75:8b:91:41:fd:44: 06:fb:a3:66:ba:5b:e3:47:17:7a:e4:98:c7:66:a4:ac:c6:a8: 9e:36:f0:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgM4v66RxtSFIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Yzk4NGVjNzAtNDgxNS00NGNiLWI0NWMtZDc2ZWJmNTIxNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxNOHBEyqlHETvEfgCafvFesAzTi7UVpA9OZ C1si6Jt06tdNGbAwxDdlyh4dG2qApWZ057lIrjRa/cyaJvtiVCkZr74btFWE0+6k BBwBCDjJ91n4BOrze96SZyspPssy/GINpImPG+85JgCqHwJFRXvREqOSijkZS5CR qgWQcjcMzhbaulloHMye0kECo0pAliTBJ3ek7Ut8Kirxgn4NPOuXj5ZJC6dmBDTT yUb7HJG6Zq08oMaFfFzfIyfGDZm9fcjwhnI/H9CgL6VKpVHWU9eEx9GQKilRArzJ Ei/w1nU9/PblQYcthRjWJ0ah91Zu8upn+2vOakocPgvY09EQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeD1NoSvj9dGANgP4TQtpSnOqIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvNGU3ZTQ5ZjctMzVkNC0z MDFiLThlZDgtNzI4MGRkYWI1NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIzRbPkPQyERqKsyjIuyG4b34Ij8o9FQmAXI1I8RK1BWAbiNhORfObF IQ9ZiXY4+kx1brMx3wbz1wWmnIlnFio2EpHDbCDYv2kJ/vf6iS9mb0TTAsTfxnB+ tzDGCOi54cy+FyPN8I5kGCzHwTrKL0MD7SMHkBnl6oGESruv85mNM/Iq6PY1E2J3 n/Q8mclwcJTXG0N82zEDK8PNAiIAxbpCB1W7zvm+3f2cqrSfzErtnQfyAWjlhauH GdgSFvXsJUhVru/ZWvp074B45GKfRGZLy46iDjVcylqnh7ShPhwCuEHB/XWLkUH9 RAb7o2a6W+NHF3rkmMdmpKzGqJ428I0= -----END CERTIFICATE-----Generated at Wed Oct 8 19:43:05 2025 by rpki-client