$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a5cd49e7-893f-372b-94d9-dcddb48644a6.roa File: a5cd49e7-893f-372b-94d9-dcddb48644a6.roa (raw, json) Hash identifier: ka8cqU4GqHlOjRImjSgl50X4XJJUVk7ysvYdav4K3VU= Subject key identifier: 28:92:BE:DE:05:54:B5:42:1B:98:25:0A:7D:4F:44:66:A7:7C:84:67 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B95A792D0F9C7BFF968E9CB00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a5cd49e7-893f-372b-94d9-dcddb48644a6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 8.34.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:92:d0:f9:c7:bf:f9:68:e9:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=465314dc-c4e3-4389-9fc2-8ed17496d2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:3b:51:48:49:05:9b:7f:e9:f3:cc:44:6a: 89:0f:30:a9:43:49:73:b7:1f:d5:ba:e8:d1:d3:0d: f2:c6:68:9a:28:77:fb:90:8d:a3:f5:34:17:5a:2e: 2a:f7:e4:c6:8f:87:65:dc:f2:cd:99:36:12:a3:16: d5:6a:1a:55:8e:df:8b:7f:f4:a2:89:8e:e5:8a:5e: 39:10:39:d9:01:48:62:6b:c3:1d:ef:da:7e:6b:f7: 5e:32:7c:bf:ff:71:9e:98:b3:98:3d:6c:ad:a4:e3: 65:47:90:55:7a:49:6d:a6:7a:b3:e8:2e:35:47:75: 6c:1e:79:d7:a7:72:de:03:46:fa:d6:e0:20:32:05: c3:6a:54:a0:33:0c:14:0d:74:81:82:72:af:75:c1: 2e:d1:14:0d:9c:da:14:6e:5b:50:50:38:58:06:73: f5:41:1c:54:c2:00:1b:e2:cd:91:d1:00:2b:09:71: 6d:b8:c1:f6:e7:77:88:b0:b2:78:df:ac:f2:8f:5d: a7:21:0b:5f:76:be:74:df:fb:9e:cc:1b:6d:c1:bd: d8:cf:5f:5b:3d:d2:5b:80:d5:dc:05:dd:b8:0c:02: 4b:63:f5:f3:b5:03:81:67:5d:9e:9a:ed:f6:76:45: 6c:c7:7d:20:3b:e3:8d:d5:14:e9:b3:90:6a:eb:75: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:92:BE:DE:05:54:B5:42:1B:98:25:0A:7D:4F:44:66:A7:7C:84:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a5cd49e7-893f-372b-94d9-dcddb48644a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.34.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:3b:44:e0:52:d2:bd:96:5e:d2:1e:49:a8:c7:ed:90:ff: 2e:f9:61:c0:ff:6b:7f:0f:5d:bd:45:75:a5:24:33:4c:82:1b: 2d:4c:1a:4f:4a:f3:c7:3a:98:af:11:45:ef:50:42:cc:e5:c9: a5:bc:a4:57:2f:2d:cf:b4:93:4c:5b:06:70:c6:72:13:48:d2: 97:2d:e1:73:af:c2:8d:71:46:44:46:ff:b4:11:f3:a5:56:b3: 24:51:54:1a:2f:82:bc:22:12:f0:41:44:a0:5b:57:20:a7:17: fb:b3:19:ab:fb:e5:a3:3d:df:48:aa:11:7a:ef:df:d7:6f:fd: 8c:d9:44:9c:78:f6:ea:84:ac:ea:90:79:af:8d:0c:36:b5:17: 19:cb:6f:69:68:a4:cb:be:3a:04:7f:5d:0a:c3:26:a9:c3:17: 2e:39:f6:14:38:74:11:0c:f9:f2:87:6c:28:5e:7f:de:a6:4c: 57:45:dd:80:ac:e4:0f:c0:3c:39:29:15:e1:6f:aa:bb:25:d9: 5a:e6:60:50:e6:a5:b0:27:72:7f:a8:a8:6f:1c:45:92:e1:2d: 6f:69:ea:ac:e9:d6:ad:8a:35:59:4c:a0:de:ea:8a:5d:2d:3d: 6e:d1:3e:eb:65:5e:1a:0f:f5:77:5e:25:dc:b7:64:60:a8:a1: de:55:c3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5LQ+ce/+WjpywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDY1MzE0ZGMtYzRlMy00Mzg5LTlmYzItOGVkMTc0OTZkMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXo7UUhJBZt/6fPMRGqJDzCpQ0lztx/VuujR 0w3yxmiaKHf7kI2j9TQXWi4q9+TGj4dl3PLNmTYSoxbVahpVjt+Lf/SiiY7lil45 EDnZAUhia8Md79p+a/deMny//3GemLOYPWytpONlR5BVekltpnqz6C41R3VsHnnX p3LeA0b61uAgMgXDalSgMwwUDXSBgnKvdcEu0RQNnNoUbltQUDhYBnP1QRxUwgAb 4s2R0QArCXFtuMH253eIsLJ436zyj12nIQtfdr503/uezBttwb3Yz19bPdJbgNXc Bd24DAJLY/XztQOBZ12emu32dkVsx30gO+ON1RTps5Bq63WAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiSvt4FVLVCG5glCn1PRGanfIRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTVjZDQ5ZTctODkzZi0z NzJiLTk0ZDktZGNkZGI0ODY0NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrKO0TgUtK9ll7SHkmox+2Q/y75YcD/a38PXb1FdaUkM0yCGy1MGk9K 88c6mK8RRe9QQszlyaW8pFcvLc+0k0xbBnDGchNI0pct4XOvwo1xRkRG/7QR86VW syRRVBovgrwiEvBBRKBbVyCnF/uzGav75aM930iqEXrv39dv/YzZRJx49uqErOqQ ea+NDDa1FxnLb2lopMu+OgR/XQrDJqnDFy459hQ4dBEM+fKHbChef96mTFdF3YCs 5A/APDkpFeFvqrsl2VrmYFDmpbAncn+oqG8cRZLhLW9p6qzp1q2KNVlMoN7qil0t PW7RPutlXhoP9XdeJdy3ZGCood5Vw8g= -----END CERTIFICATE-----Generated at Mon Nov 3 21:52:31 2025 by rpki-client