$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa File: 79d50f22-3431-3294-9576-851a087acf8c.roa (raw, json) Hash identifier: Mr1LwKqFqW+HFnysGgA+HniEm6RfKtrVB3MuRIwnOgE= Subject key identifier: 1A:24:41:AA:67:33:23:C9:F4:43:3B:0B:7E:3A:AC:86:53:BF:7F:79 Certificate issuer: /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Certificate serial: 010D0C9F4328584AFEE6A586BE8B7A37626E7CA0 Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 21557 IP address blocks: 23.128.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a5:86:be:8b:7a:37:62:6e:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=0b1033d8-ef07-45ae-ae9b-ea9a1553e8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:36:4d:6b:a5:e7:34:9e:8f:6d:4f:a5:a8: 94:d9:3e:93:9d:2a:ec:82:9e:90:0c:48:04:20:a5: ec:08:55:49:47:8e:13:cd:fc:11:b5:bb:60:5c:06: 16:2b:30:aa:fa:d8:ab:54:fe:05:46:ed:21:8d:e6: 61:18:37:a7:40:a9:b5:67:7a:56:ab:eb:90:2c:f4: b2:d1:ff:0d:15:00:d2:fd:71:63:9d:5d:ca:ab:61: 35:bc:43:30:5f:38:d8:27:d7:4a:e0:a9:f0:c9:dd: 0f:33:e7:32:7c:11:b1:49:dd:a4:00:9f:84:8e:fd: 2f:6b:3d:48:1d:0a:10:40:1d:1e:b6:91:74:c8:04: ed:99:0c:71:bd:99:de:3b:33:86:3b:03:fb:ed:96: bf:70:49:26:73:8e:9d:52:ee:a6:2d:50:b5:88:ba: c2:27:f4:9c:c2:ec:7f:d7:51:26:f8:ba:99:3c:ab: 1d:7a:c6:65:e9:3d:ec:1d:77:6a:77:a2:d5:42:0a: ed:6b:47:60:5a:49:85:ef:49:d8:26:22:4e:69:a3: 15:21:76:a4:4a:da:83:28:3a:d3:b9:69:a5:70:50: a4:ee:63:57:ca:7d:f1:ec:58:56:e4:9e:cf:7e:43: bf:ca:7b:f4:68:73:5e:c9:d9:45:20:dd:a2:7d:10: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:41:AA:67:33:23:C9:F4:43:3B:0B:7E:3A:AC:86:53:BF:7F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl X509v3 Authority Key Identifier: keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer sbgp-ipAddrBlock: critical IPv4: 23.128.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5d:96:07:ba:44:54:5d:f7:8d:5c:fa:0d:5d:5b:07:6b:6c: d1:27:8b:b6:4e:35:0e:92:19:2b:5c:52:89:c3:4a:2c:9b:62: a0:7c:49:0f:1e:1c:2e:bc:71:56:5b:32:2d:3b:10:8e:b5:cf: 1d:6d:15:28:53:41:50:28:20:3b:0c:0a:e2:bb:6d:32:db:57: 85:fe:cd:50:ce:84:54:00:f4:57:62:cc:4e:2a:22:2f:9d:65: 54:0a:f7:af:70:1a:24:83:5a:e2:ee:5c:0f:ee:a0:7c:93:a9: 37:43:35:ab:8b:e5:42:46:4d:36:a4:a6:5a:67:98:ff:0d:00: fa:b6:5d:d2:24:06:33:87:b8:44:a9:f5:90:2f:c4:26:85:d8: d2:68:0e:55:99:46:91:b8:51:71:1a:c8:be:a4:73:0d:3d:22: b1:34:46:e3:df:c3:f1:34:cc:43:f6:e5:49:35:a9:71:1d:7a: 2f:4f:4c:77:9f:ed:43:2a:db:ac:2b:69:85:d0:2c:ab:d5:d8: 11:78:90:51:1e:ff:ef:65:56:25:69:25:e7:34:70:5f:e9:23: 8a:c0:c1:96:50:b7:67:01:be:6a:bf:1f:29:ed:be:4a:98:a1: 82:53:c0:08:6e:c0:f4:49:9a:cd:68:c1:03:fe:a7:22:af:5b: 83:59:78:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qWGvot6N2JufKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZGM0NGItODViNi00MjQ3LWI1NzktZWI4Y2ZkOGU5 N2ZlMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MGIxMDMzZDgtZWYwNy00NWFlLWFlOWItZWE5YTE1NTNlOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPU2TWul5zSej21PpaiU2T6TnSrsgp6QDEgE IKXsCFVJR44TzfwRtbtgXAYWKzCq+tirVP4FRu0hjeZhGDenQKm1Z3pWq+uQLPSy 0f8NFQDS/XFjnV3Kq2E1vEMwXzjYJ9dK4Knwyd0PM+cyfBGxSd2kAJ+Ejv0vaz1I HQoQQB0etpF0yATtmQxxvZneOzOGOwP77Za/cEkmc46dUu6mLVC1iLrCJ/Scwux/ 11Em+LqZPKsdesZl6T3sHXdqd6LVQgrta0dgWkmF70nYJiJOaaMVIXakStqDKDrT uWmlcFCk7mNXyn3x7FhW5J7PfkO/ynv0aHNeydlFIN2ifRCehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBokQapnMyPJ9EM7C346rIZTv395MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBk YzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4ZTk3ZmUvNzlkNTBmMjItMzQzMS0z Mjk0LTk1NzYtODUxYTA4N2FjZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDkwZGM0NGItODViNi00MjQ3LWI1 NzktZWI4Y2ZkOGU5N2ZlL2Q5MGRjNDRiLTg1YjYtNDI0Ny1iNTc5LWViOGNmZDhl OTdmZS5jcmwwHwYDVR0jBBgwFoAUSeUkbiuQSDtea7R3FumUVA+zGEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhj ZmQ4ZTk3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1dlge6RFRd941c+g1dWwdrbNEni7ZONQ6SGStcUonDSiybYqB8SQ8e HC68cVZbMi07EI61zx1tFShTQVAoIDsMCuK7bTLbV4X+zVDOhFQA9FdizE4qIi+d ZVQK969wGiSDWuLuXA/uoHyTqTdDNauL5UJGTTakplpnmP8NAPq2XdIkBjOHuESp 9ZAvxCaF2NJoDlWZRpG4UXEayL6kcw09IrE0RuPfw/E0zEP25Uk1qXEdei9PTHef 7UMq26wraYXQLKvV2BF4kFEe/+9lViVpJec0cF/pI4rAwZZQt2cBvmq/HyntvkqY oYJTwAhuwPRJms1owQP+pyKvW4NZeB8= -----END CERTIFICATE-----Generated at Fri Oct 24 12:33:16 2025 by rpki-client