$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa File: 7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa (raw, json) Hash identifier: /f8lLbtXHV4oDhvy/jdElwvYbATyGnYS3Jju7BjWmLM= Subject key identifier: 3C:2A:33:62:15:77:0E:2D:A1:3B:87:4A:80:DD:6F:9F:3A:FA:01:A4 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B95AB0155E902620E62B1F900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 8.34.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:01:55:e9:02:62:0e:62:b1:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f0362d88-2fc4-4198-b46d-2f43b0bdbaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:23:09:ce:ee:d0:a0:c5:8e:0d:70:35:33: 9a:64:11:6f:8d:a9:94:69:ab:73:7d:11:98:f0:99: c7:59:4b:37:cc:52:c5:cc:2f:77:77:9e:cc:2d:48: 71:83:f2:31:c5:31:e1:d3:98:05:25:93:bb:27:f1: 67:ef:48:75:8a:b5:ca:e4:04:ea:88:7e:a7:dd:14: fe:9d:0f:16:64:ca:6f:44:9c:63:35:ab:33:71:d9: 03:ff:c7:e0:12:b6:44:68:7f:70:6f:85:29:6c:5e: c1:34:e6:1a:0e:76:d1:62:b7:97:1c:21:a0:7b:25: 91:e9:47:9e:40:b4:43:23:d1:60:7b:c0:ab:99:f4: d9:00:44:26:3a:fb:f6:4c:89:58:14:8f:3d:5f:98: 00:38:ba:2c:06:71:51:bc:26:04:fa:9c:b0:e3:53: 8c:d3:bf:9a:73:76:6d:48:54:01:8d:5a:db:44:3f: 2d:43:cf:c5:2b:e5:f5:75:06:47:1d:35:f0:3c:9a: ef:7b:25:4f:87:cf:8e:74:9b:6c:7b:e3:23:d4:a1: 2a:02:67:5a:90:ad:2f:1c:e7:a1:10:12:af:26:f2: 6b:a0:22:db:12:1b:86:a4:ed:25:ca:96:8b:25:5f: a6:c1:49:41:00:b1:aa:82:1a:5b:2a:23:12:8b:5b: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2A:33:62:15:77:0E:2D:A1:3B:87:4A:80:DD:6F:9F:3A:FA:01:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7f9b98c9-fe29-3686-b326-fcb19de2bdd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.34.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:56:54:82:5a:7b:bb:a3:a6:4d:b5:ce:dc:8b:66:f8:ec: e2:af:32:24:0f:8b:c4:98:88:89:fe:8b:93:22:03:4a:a1:f0: 73:a2:af:a0:a0:27:27:c9:92:f3:bd:35:c3:fc:8f:b6:85:10: b5:dd:9f:9b:12:b7:f6:dc:ee:a3:8e:02:3b:35:9e:00:cf:7b: 5e:0e:a5:a0:7f:38:c3:46:f6:c0:0b:99:ac:7b:7f:53:65:9a: 65:93:50:cc:1a:08:56:40:4f:5d:ff:56:c9:f2:0a:53:67:67: f6:aa:69:90:34:d4:89:9a:5e:b8:35:b5:d9:df:9d:a2:60:2f: 1c:78:b4:b7:5d:ec:50:e6:6f:cc:5c:f2:e0:3f:f4:a2:c0:78: 0b:57:be:c0:3b:3c:89:ac:1b:08:c2:24:d6:78:8b:83:85:f0: d7:59:24:82:b2:56:fa:12:b4:88:f0:27:81:8a:e2:cc:15:f6: 4a:aa:20:47:ac:a7:c0:46:8c:2b:17:1e:6a:cc:7b:cd:96:3a: 76:7d:65:d5:2e:02:15:b7:09:b8:f0:dd:83:3c:af:34:0b:23: 69:02:69:72:52:a5:b5:b7:f6:fc:0b:2e:fe:e8:77:cb:f1:42: 30:0f:d2:c6:c0:ad:c0:0c:56:21:d7:a0:9c:ea:72:18:be:a9: e7:94:93:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqwFV6QJiDmKx+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjAzNjJkODgtMmZjNC00MTk4LWI0NmQtMmY0M2IwYmRiYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCAjCc7u0KDFjg1wNTOaZBFvjamUaatzfRGY 8JnHWUs3zFLFzC93d57MLUhxg/IxxTHh05gFJZO7J/Fn70h1irXK5ATqiH6n3RT+ nQ8WZMpvRJxjNaszcdkD/8fgErZEaH9wb4UpbF7BNOYaDnbRYreXHCGgeyWR6Uee QLRDI9Fge8CrmfTZAEQmOvv2TIlYFI89X5gAOLosBnFRvCYE+pyw41OM07+ac3Zt SFQBjVrbRD8tQ8/FK+X1dQZHHTXwPJrveyVPh8+OdJtse+Mj1KEqAmdakK0vHOeh EBKvJvJroCLbEhuGpO0lypaLJV+mwUlBALGqghpbKiMSi1vJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwqM2IVdw4toTuHSoDdb586+gGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2Y5Yjk4YzktZmUyOS0z Njg2LWIzMjYtZmNiMTlkZTJiZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANmVlSCWnu7o6ZNtc7ci2b47OKvMiQPi8SYiIn+i5MiA0qh8HOir6Cg JyfJkvO9NcP8j7aFELXdn5sSt/bc7qOOAjs1ngDPe14OpaB/OMNG9sALmax7f1Nl mmWTUMwaCFZAT13/VsnyClNnZ/aqaZA01ImaXrg1tdnfnaJgLxx4tLdd7FDmb8xc 8uA/9KLAeAtXvsA7PImsGwjCJNZ4i4OF8NdZJIKyVvoStIjwJ4GK4swV9kqqIEes p8BGjCsXHmrMe82WOnZ9ZdUuAhW3Cbjw3YM8rzQLI2kCaXJSpbW39vwLLv7od8vx QjAP0sbArcAMViHXoJzqchi+qeeUkxc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:53:47 2025 by rpki-client