$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa File: 4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa (raw, json) Hash identifier: wmCUsIgToB6nrEKS6c9XlWgBEV5plRZ/soQtOn6uQo4= Subject key identifier: BB:60:A2:4A:CA:31:6D:6B:7D:16:89:FD:78:12:67:9C:1B:CC:75:98 Certificate issuer: /CN=ca4cb307-c1ce-4780-8903-6931cc40426b Certificate serial: 010D0C9F4328584BB45D2F87C5951A33387F2E98 Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 54804 IP address blocks: 23.169.48.0/24 maxlen: 24 23.182.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2f:87:c5:95:1a:33:38:7f:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=32a33b21-ab29-44c7-ada0-9017b3dac4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:6c:a1:88:bd:40:13:1d:40:ff:d5:a6:e1: 39:66:08:a7:04:ba:bc:d1:e1:8b:9d:d7:5d:46:07: 22:2a:fb:c0:dc:b3:43:1b:93:94:a2:9a:d3:66:68: 48:5c:ee:c4:b9:5f:c5:a4:6b:cb:86:16:07:8f:ab: 67:3a:0f:d4:e9:fa:2f:cc:fa:66:15:ab:ae:e7:a0: a5:b7:b4:72:53:86:d0:e3:2c:af:af:7b:21:55:dd: 7a:b0:de:9f:92:b6:0d:54:95:75:8b:a2:c4:07:5d: 25:37:fd:ee:f3:7b:06:5a:3a:6f:6b:7e:ef:b3:e4: 5f:77:1a:48:86:99:2d:e4:9e:69:b8:bb:2b:17:06: 43:82:2f:79:05:60:f7:0b:3c:33:f1:a7:b3:d7:8a: 65:01:1b:38:58:d6:b0:0c:ff:01:bd:68:31:c2:96: 85:e8:b6:74:be:ee:d3:63:7d:75:18:fa:79:b0:93: d1:66:00:ec:c8:71:47:76:fd:1d:dd:a9:5d:77:ea: 64:2e:dc:57:cd:60:f2:05:d7:7b:47:b1:b7:27:6c: b3:96:28:76:b7:22:8d:5a:74:f0:05:ed:69:04:26: bd:bb:3c:99:2b:20:f4:87:d6:60:e1:0b:de:6a:58: 71:f8:cb:92:3c:87:1e:7d:b9:f0:66:7b:df:77:b8: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:A2:4A:CA:31:6D:6B:7D:16:89:FD:78:12:67:9C:1B:CC:75:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl X509v3 Authority Key Identifier: keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer sbgp-ipAddrBlock: critical IPv4: 23.169.48.0/24 23.182.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a0:c8:20:19:7e:a1:30:59:91:ad:5f:fd:0a:17:eb:b5:e3: 9c:9c:46:61:86:c5:f5:24:a7:83:05:8d:3d:79:2c:22:6c:ab: 6a:e3:0a:c5:79:8e:1e:16:c0:1e:94:7f:30:cc:ab:49:35:40: c3:91:56:43:41:80:c7:6a:7e:8c:92:cd:24:d0:e0:ba:91:96: 41:28:24:eb:3b:64:36:c4:7d:b3:ff:e2:b4:d5:a1:70:7f:01: 08:c0:98:b4:66:7d:2c:c7:e6:af:75:bb:49:26:f7:32:a4:09: 78:12:1b:99:fa:73:9d:17:c3:55:4d:6a:15:27:e2:9c:0b:cb: 30:b0:6d:10:a4:ec:fd:cf:7d:a7:4d:54:d3:a1:ed:0f:ff:bf: 5f:51:a8:27:59:aa:27:6d:af:ef:4b:86:f2:3d:16:1f:4d:50: 0c:c2:1b:dc:c7:21:f1:f9:4d:e4:aa:b8:52:ff:d7:4c:8e:3c: dd:fe:d1:5b:c6:2e:6f:0b:a6:c7:49:a9:d8:b0:4e:4c:0c:48: b2:99:0d:1b:96:df:bf:33:7b:76:1e:c2:d9:1e:06:fb:5b:5a: 16:fc:f1:99:77:6d:e7:fc:3e:0d:f7:99:9e:d4:1d:34:79:ae: 6e:78:ba:06:2c:26:ec:c0:9e:e4:77:86:75:5a:45:5f:6a:64: 8d:1a:3a:18 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu0XS+HxZUaMzh/LpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E0Y2IzMDctYzFjZS00NzgwLTg5MDMtNjkzMWNjNDA0 MjZiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzJhMzNiMjEtYWIyOS00NGM3LWFkYTAtOTAxN2IzZGFjNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4hsoYi9QBMdQP/VpuE5ZginBLq80eGLnddd RgciKvvA3LNDG5OUoprTZmhIXO7EuV/FpGvLhhYHj6tnOg/U6fovzPpmFauu56Cl t7RyU4bQ4yyvr3shVd16sN6fkrYNVJV1i6LEB10lN/3u83sGWjpva37vs+RfdxpI hpkt5J5puLsrFwZDgi95BWD3Czwz8aez14plARs4WNawDP8BvWgxwpaF6LZ0vu7T Y311GPp5sJPRZgDsyHFHdv0d3aldd+pkLtxXzWDyBdd7R7G3J2yzlih2tyKNWnTw Be1pBCa9uzyZKyD0h9Zg4Qvealhx+MuSPIcefbnwZnvfd7jjCwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLtgokrKMW1rfRaJ/XgSZ5wbzHWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRj YjMwNy1jMWNlLTQ3ODAtODkwMy02OTMxY2M0MDQyNmIvNGYxMmQwMjUtNWFiMC0z MmZmLTk5ZDAtYTI0ZTljMzczY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E0Y2IzMDctYzFjZS00NzgwLTg5 MDMtNjkzMWNjNDA0MjZiL2NhNGNiMzA3LWMxY2UtNDc4MC04OTAzLTY5MzFjYzQw NDI2Yi5jcmwwHwYDVR0jBBgwFoAUxu2XOQiELdkPbJH7bIKD7dQ/p/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRjYjMwNy1jMWNlLTQ3ODAtODkwMy02OTMx Y2M0MDQyNmIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF6kwAwQA F7YwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMKgyCAZfqEwWZGtX/0KF+u145ycRmGGxfUkp4MFjT15LCJs q2rjCsV5jh4WwB6UfzDMq0k1QMORVkNBgMdqfoySzSTQ4LqRlkEoJOs7ZDbEfbP/ 4rTVoXB/AQjAmLRmfSzH5q91u0km9zKkCXgSG5n6c50Xw1VNahUn4pwLyzCwbRCk 7P3PfadNVNOh7Q//v19RqCdZqidtr+9LhvI9Fh9NUAzCG9zHIfH5TeSquFL/10yO PN3+0VvGLm8LpsdJqdiwTkwMSLKZDRuW378ze3YewtkeBvtbWhb88Zl3bef8Pg33 mZ7UHTR5rm54ugYsJuzAnuR3hnVaRV9qZI0aOhg= -----END CERTIFICATE-----Generated at Tue Nov 4 09:30:41 2025 by rpki-client