$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa File: 8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa (raw, json) Hash identifier: Pb05hPOaPueXYbLtWMyxI1Jilc4nMs8gl6JaMDGPbMI= Subject key identifier: DF:81:29:64:68:53:E9:7A:A5:60:D2:B1:F8:7D:15:BF:FA:D7:DC:76 Certificate issuer: /CN=affa716b-9631-4506-aee5-dc69f79f9fca Certificate serial: 010D0C9F4328584B6E9202FF561BB8B788FB7FC0 Authority key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 174 IP address blocks: 23.141.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:92:02:ff:56:1b:b8:b7:88:fb:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa716b-9631-4506-aee5-dc69f79f9fca Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=0e4d4671-bfd3-406d-bd72-c90856eccfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:44:62:e3:df:84:0c:56:95:72:24:7f:4d: b9:52:a1:c0:c0:61:46:67:fa:7a:c6:6c:da:a9:15: 57:c0:da:a2:40:b9:46:98:bf:a3:50:14:46:f9:2b: 8e:42:91:4b:f3:71:6b:59:e6:35:3a:fb:48:cf:6b: c4:8c:12:54:08:da:4d:b2:1e:5e:cd:83:ed:cf:6f: 6f:d8:33:09:fa:0b:f3:a3:3d:cc:41:bb:fb:ca:31: 57:20:3c:53:14:cc:1d:5a:ae:d8:db:21:b4:45:b2: 64:53:eb:2f:01:f0:37:f1:11:3f:5f:99:3f:ea:c3: b3:4a:43:a1:19:11:8a:d7:90:bb:db:48:4e:ef:3b: 08:48:93:c3:96:be:92:19:14:01:82:ce:bb:43:10: 6f:19:03:f5:71:0e:b5:5d:78:2e:83:87:53:42:ba: ed:a7:69:1f:fa:d3:47:18:d6:66:bd:13:56:a8:b0: 41:75:76:35:86:9d:c0:7e:39:fd:83:d2:c3:85:88: 25:6f:4e:dd:ed:08:3c:5d:b7:59:c8:41:63:74:b9: 5c:2a:f7:a8:93:64:44:c5:87:04:8b:d8:82:3b:65: 6a:57:85:7e:e8:30:3e:d4:07:cc:29:c0:6c:a9:a0: da:a8:dc:87:ec:bb:66:6f:49:6e:25:49:78:d1:d1: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:81:29:64:68:53:E9:7A:A5:60:D2:B1:F8:7D:15:BF:FA:D7:DC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl X509v3 Authority Key Identifier: keyid:29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer sbgp-ipAddrBlock: critical IPv4: 23.141.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ea:5a:1a:ff:d1:a0:04:b5:e9:ec:7f:a6:f2:99:ad:c6:6b: cb:47:0b:6c:67:9a:94:4d:69:95:7e:10:94:c6:67:d6:40:33: 76:a4:92:f5:1d:f9:ed:f6:7a:9f:46:bb:64:0a:11:6a:84:4b: 80:b6:dc:74:27:53:d1:e2:20:5b:bf:c0:24:05:53:40:3b:fd: 21:38:eb:29:68:41:33:b3:f6:e1:25:2b:0e:d8:59:80:75:7b: 1f:72:08:ef:ff:7f:03:3a:b4:1d:8f:02:bd:61:bc:1a:7e:7b: 60:01:67:6a:ff:4f:36:10:35:fc:cf:b7:39:8b:e9:9b:a2:16: f3:0d:9b:74:1d:dd:50:54:94:a8:69:b4:fe:fd:d2:c6:f3:08: 33:b0:b8:84:1f:7f:0f:35:eb:14:41:0b:b0:db:a0:21:ee:f0: 23:b3:b6:84:db:1c:27:53:ce:46:ea:9b:44:d9:ee:22:23:12: b1:d9:b3:63:dd:87:e7:16:9d:a5:15:f5:f9:c5:91:d8:15:a9: fb:46:20:0f:80:87:ef:0f:04:97:59:e3:56:c4:a5:5f:6d:b0: 2d:73:31:ec:65:48:31:54:2f:a7:be:1e:92:6c:05:6f:0b:bb: 09:9a:28:af:2d:12:4a:c4:9b:bf:0d:b7:6e:e7:19:4d:4d:7f: 2d:e9:08:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukgL/Vhu4t4j7f8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5 ZmNhMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGU0ZDQ2NzEtYmZkMy00MDZkLWJkNzItYzkwODU2ZWNjZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjxEYuPfhAxWlXIkf025UqHAwGFGZ/p6xmza qRVXwNqiQLlGmL+jUBRG+SuOQpFL83FrWeY1OvtIz2vEjBJUCNpNsh5ezYPtz29v 2DMJ+gvzoz3MQbv7yjFXIDxTFMwdWq7Y2yG0RbJkU+svAfA38RE/X5k/6sOzSkOh GRGK15C720hO7zsISJPDlr6SGRQBgs67QxBvGQP1cQ61XXgug4dTQrrtp2kf+tNH GNZmvRNWqLBBdXY1hp3Afjn9g9LDhYglb07d7Qg8XbdZyEFjdLlcKveok2RExYcE i9iCO2VqV4V+6DA+1AfMKcBsqaDaqNyH7Ltmb0luJUl40dHtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+BKWRoU+l6pWDSsfh9Fb/619x2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZh NzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvOGQzMTNiNDktOTkyYi0z MGJiLTk0ZjctYTZkOGQ2MzVmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWZmYTcxNmItOTYzMS00NTA2LWFl ZTUtZGM2OWY3OWY5ZmNhL2FmZmE3MTZiLTk2MzEtNDUwNi1hZWU1LWRjNjlmNzlm OWZjYS5jcmwwHwYDVR0jBBgwFoAUKRmCCLh2XVuuuS4Q2ozL8pN/oskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5 Zjc5ZjlmY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHqWhr/0aAEtensf6byma3Ga8tHC2xnmpRNaZV+EJTGZ9ZAM3akkvUd +e32ep9Gu2QKEWqES4C23HQnU9HiIFu/wCQFU0A7/SE46yloQTOz9uElKw7YWYB1 ex9yCO//fwM6tB2PAr1hvBp+e2ABZ2r/TzYQNfzPtzmL6ZuiFvMNm3Qd3VBUlKhp tP790sbzCDOwuIQffw816xRBC7DboCHu8COztoTbHCdTzkbqm0TZ7iIjErHZs2Pd h+cWnaUV9fnFkdgVqftGIA+Ah+8PBJdZ41bEpV9tsC1zMexlSDFUL6e+HpJsBW8L uwmaKK8tEkrEm78Nt27nGU1Nfy3pCHg= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:26 2025 by rpki-client