$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/e972c69d-7585-30d4-904f-8d2022ec03c5.roa File: e972c69d-7585-30d4-904f-8d2022ec03c5.roa (raw, json) Hash identifier: Hlr53lJ8R+usLAj7e+RF1Pd9xdHez1O03jqJFQQvHDA= Subject key identifier: 1C:7C:93:1C:8D:10:45:4E:AE:93:38:62:04:DD:29:3B:13:C7:84:56 Certificate issuer: /CN=b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4 Certificate serial: 010D0C9F4328584B55F411AE972D958B72E0AF80 Authority key identifier: 47:54:0A:68:78:9B:D7:F0:EC:6D:7C:E9:4C:D1:16:35:DB:8D:1A:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/e972c69d-7585-30d4-904f-8d2022ec03c5.roa Signing time: Sat 27 Sep 2025 17:23:11 +0000 ROA not before: Sat 27 Sep 2025 17:23:11 +0000 ROA not after: Fri 26 Dec 2025 18:23:11 +0000 asID: 979 IP address blocks: 23.144.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:f4:11:ae:97:2d:95:8b:72:e0:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4 Validity Not Before: Sep 27 17:23:11 2025 GMT Not After : Dec 26 18:23:11 2025 GMT Subject: CN=48a220cf-7f80-4ebe-98c5-8b38fef2cf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:19:b1:bc:8e:38:de:3e:9b:30:fb:d5:41: 57:8c:27:ba:97:e0:36:98:b9:c3:00:46:93:78:cc: 7c:b7:f2:91:06:c3:6b:68:92:dc:ad:fe:68:7e:7d: 45:d9:69:30:c1:bc:09:c3:31:cb:6d:83:51:73:7d: 10:75:43:a8:ee:00:ad:fb:07:e6:f7:11:a2:b0:eb: 7d:37:74:44:ba:c2:a3:c9:55:bd:a5:12:d7:eb:d6: 9d:45:10:9b:b9:21:8f:7d:66:23:7c:95:8a:0d:cb: 67:96:f4:2d:05:cb:0b:c1:a2:e9:a2:23:f3:35:2b: 42:84:22:ef:d1:49:b8:95:03:ba:41:62:9e:48:65: ff:c4:c2:8f:1d:d9:06:14:2a:fd:1a:b6:ec:dd:0d: eb:41:37:bd:0f:ac:30:4d:6c:2b:30:4c:b7:31:6f: 63:9d:ad:28:74:e3:3c:5b:b8:42:16:63:a9:56:b7: f0:8c:9f:75:25:d4:dd:fb:9b:71:5f:fa:f1:9d:b8: c4:e6:41:f3:98:88:fe:5b:6b:b1:5b:08:66:3a:9b: fb:40:07:a0:16:0b:d3:37:fc:fc:a3:75:aa:fc:13: 9f:0f:37:7f:e1:97:94:62:1b:fa:13:31:65:8a:2d: c9:76:6a:0d:15:3b:a5:11:c4:37:b0:49:3a:e7:11: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7C:93:1C:8D:10:45:4E:AE:93:38:62:04:DD:29:3B:13:C7:84:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/e972c69d-7585-30d4-904f-8d2022ec03c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.crl X509v3 Authority Key Identifier: keyid:47:54:0A:68:78:9B:D7:F0:EC:6D:7C:E9:4C:D1:16:35:DB:8D:1A:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0b6a04f-5abf-4e5d-9a20-50ed1fd234b4.cer sbgp-ipAddrBlock: critical IPv4: 23.144.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:99:32:6e:9f:03:26:53:34:a0:bf:f4:e3:57:fd:2e:ea:67: 1a:f4:54:04:09:02:c0:54:4f:4a:6d:9e:d9:72:c5:42:4f:ac: 05:f7:45:d4:d3:be:82:24:a9:5b:a0:91:e7:aa:69:18:50:1b: a1:31:21:51:9f:1c:68:86:f2:5a:c2:20:2d:b5:86:83:c3:1c: 22:a9:43:fa:a0:4c:77:9a:c4:c6:1d:a2:73:17:56:ba:43:9b: 10:04:fd:e5:95:20:c2:6f:29:be:cb:aa:f4:4b:40:a7:27:80: dd:07:81:8b:cf:87:25:c3:8d:88:78:85:9a:ec:98:c2:58:1f: cb:8d:6c:f8:dc:56:b9:c1:3e:40:86:89:a2:5f:70:0e:4c:71: 64:aa:0f:36:6b:2d:55:6e:96:42:2e:f8:4c:27:68:a7:68:45: 81:f9:57:4f:8c:89:ab:a9:1b:46:e8:b8:87:58:25:68:92:57: 77:99:5a:80:93:05:a0:85:25:00:84:be:a2:a2:a7:81:cb:01: 1f:52:bc:88:15:eb:5b:86:53:ca:68:66:9b:06:ac:9b:83:e0: 43:63:16:26:2c:9f:8c:99:64:25:72:b4:8f:1b:18:67:27:1b: de:9d:f7:fc:4c:99:ff:3d:a4:33:c1:70:82:f6:ed:b1:c4:26: 57:7a:2e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtV9BGuly2Vi3Lgr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBiNmEwNGYtNWFiZi00ZTVkLTlhMjAtNTBlZDFmZDIz NGI0MB4XDTI1MDkyNzE3MjMxMVoXDTI1MTIyNjE4MjMxMVowLzEtMCsGA1UEAxMk NDhhMjIwY2YtN2Y4MC00ZWJlLTk4YzUtOGIzOGZlZjJjZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOsZsbyOON4+mzD71UFXjCe6l+A2mLnDAEaT eMx8t/KRBsNraJLcrf5ofn1F2WkwwbwJwzHLbYNRc30QdUOo7gCt+wfm9xGisOt9 N3REusKjyVW9pRLX69adRRCbuSGPfWYjfJWKDctnlvQtBcsLwaLpoiPzNStChCLv 0Um4lQO6QWKeSGX/xMKPHdkGFCr9Grbs3Q3rQTe9D6wwTWwrMEy3MW9jna0odOM8 W7hCFmOpVrfwjJ91JdTd+5txX/rxnbjE5kHzmIj+W2uxWwhmOpv7QAegFgvTN/z8 o3Wq/BOfDzd/4ZeUYhv6EzFlii3JdmoNFTulEcQ3sEk65xGBJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx8kxyNEEVOrpM4YgTdKTsTx4RWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMGI2 YTA0Zi01YWJmLTRlNWQtOWEyMC01MGVkMWZkMjM0YjQvZTk3MmM2OWQtNzU4NS0z MGQ0LTkwNGYtOGQyMDIyZWMwM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjBiNmEwNGYtNWFiZi00ZTVkLTlh MjAtNTBlZDFmZDIzNGI0L2IwYjZhMDRmLTVhYmYtNGU1ZC05YTIwLTUwZWQxZmQy MzRiNC5jcmwwHwYDVR0jBBgwFoAUR1QKaHib1/DsbXzpTNEWNduNGtcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMGI2YTA0Zi01YWJmLTRlNWQtOWEyMC01MGVk MWZkMjM0YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqZMm6fAyZTNKC/9ONX/S7qZxr0VAQJAsBUT0ptntlyxUJPrAX3RdTT voIkqVugkeeqaRhQG6ExIVGfHGiG8lrCIC21hoPDHCKpQ/qgTHeaxMYdonMXVrpD mxAE/eWVIMJvKb7LqvRLQKcngN0HgYvPhyXDjYh4hZrsmMJYH8uNbPjcVrnBPkCG iaJfcA5McWSqDzZrLVVulkIu+EwnaKdoRYH5V0+MiaupG0bouIdYJWiSV3eZWoCT BaCFJQCEvqKip4HLAR9SvIgV61uGU8poZpsGrJuD4ENjFiYsn4yZZCVytI8bGGcn G96d9/xMmf89pDPBcIL27bHEJld6Lnk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:09:21 2025 by rpki-client