$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa File: ff7898c3-7996-33eb-8215-9ca64f698bd9.roa (raw, json) Hash identifier: JrMFWlpnuzzIwmk4Zv4sU6CJ3n+p+w+RgDydwAMNH4M= Subject key identifier: 30:86:04:DB:25:45:0C:8D:60:FF:E0:3D:4E:40:96:70:C9:FB:36:3C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA93259EE2BE0B1ADA00A0E60 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:59:ee:2b:e0:b1:ad:a0:0a:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=34373e01-5954-4926-afdd-20a3ee1ead94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:c8:ba:cd:fe:76:b4:f2:6f:6d:27:d8:cf: a2:2c:97:b5:76:60:55:5f:cc:12:2c:59:6f:4d:43: 94:1e:cf:ec:cb:f8:ae:62:df:33:3e:1c:2b:6b:76: 93:eb:00:32:db:d8:d9:d2:98:78:61:39:71:18:4e: c9:4d:63:bc:1e:5d:83:38:d7:30:90:6b:a7:51:59: dc:9a:e2:ca:9b:7f:bf:c9:0f:cf:0c:30:16:36:d1: 2c:7c:0f:f9:62:3d:63:65:2d:39:cd:5d:6e:ea:b3: 05:11:32:c0:9e:0b:3d:ff:60:b6:a3:3c:2d:60:eb: 84:18:65:e2:fa:34:da:78:36:9e:2d:f9:5a:bf:a2: ec:5a:42:a0:ec:a8:a4:0c:6e:57:c6:94:2f:97:07: a6:06:d8:16:36:ef:87:d6:b6:fb:f4:9a:83:cb:3e: 9a:2b:d6:ed:a8:86:f3:f3:18:3e:a8:88:98:d9:a5: 37:7f:67:93:f0:42:a1:67:e9:c1:cb:e7:67:5f:0e: b5:bd:65:8a:8e:55:f5:04:f0:36:28:98:e0:45:6d: 41:11:c6:d6:91:80:38:6a:36:9d:14:08:e4:7d:4d: 1f:ac:8d:4d:00:3f:67:c4:76:e4:49:ef:42:cf:b1: ad:5a:73:c8:66:e3:db:2e:34:e1:9a:38:7a:e1:75: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:04:DB:25:45:0C:8D:60:FF:E0:3D:4E:40:96:70:C9:FB:36:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7b:66:53:76:41:c6:d3:c1:11:de:66:4f:7e:aa:33:49:40: 62:78:41:63:ac:5f:f0:17:d2:14:3e:9e:1f:5e:5f:d3:9c:05: 0f:7d:17:68:1c:8a:2b:88:63:ca:3f:a3:37:99:1e:30:1b:67: da:b8:47:5f:90:8b:7a:5b:5a:71:6c:d5:43:77:7d:1c:9e:5f: f9:4b:fc:5f:63:6d:7c:8a:60:96:36:2e:49:58:f7:af:b5:f9: de:4d:ab:61:d8:48:57:5d:9d:50:6f:c1:11:86:f3:62:33:44: 9e:d0:c3:69:46:46:07:dd:ac:f0:c4:72:85:98:33:3b:a6:c5: 1e:b6:ee:dc:3a:de:d4:cf:a2:8f:3d:c1:b0:ad:11:82:c5:24: a9:37:ac:eb:48:ae:03:10:6f:84:52:95:20:ad:4d:1a:9f:ce: a1:98:58:cb:f5:19:a2:9f:a2:9a:3a:4f:99:35:7f:ef:63:28: 2b:87:8a:7b:fe:ff:ee:b3:ed:1d:58:f8:52:06:82:e6:f4:8b: e8:5b:90:07:38:9e:b1:d0:73:8b:bd:15:78:09:b7:c0:48:29: e9:8a:79:e9:da:09:c3:7b:8e:89:73:a4:2a:10:be:dd:c0:1a: 99:ee:41:88:7c:78:60:83:82:c2:2d:90:e1:d7:c3:8c:37:06: 60:f6:71:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlnuK+CxraAKDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MzQzNzNlMDEtNTk1NC00OTI2LWFmZGQtMjBhM2VlMWVhZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArobIus3+drTyb20n2M+iLJe1dmBVX8wSLFlv TUOUHs/sy/iuYt8zPhwra3aT6wAy29jZ0ph4YTlxGE7JTWO8Hl2DONcwkGunUVnc muLKm3+/yQ/PDDAWNtEsfA/5Yj1jZS05zV1u6rMFETLAngs9/2C2ozwtYOuEGGXi +jTaeDaeLflav6LsWkKg7KikDG5XxpQvlwemBtgWNu+H1rb79JqDyz6aK9btqIbz 8xg+qIiY2aU3f2eT8EKhZ+nBy+dnXw61vWWKjlX1BPA2KJjgRW1BEcbWkYA4ajad FAjkfU0frI1NAD9nxHbkSe9Cz7GtWnPIZuPbLjThmjh64XViBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCGBNslRQyNYP/gPU5AlnDJ+zY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmY3ODk4YzMtNzk5Ni0z M2ViLTgyMTUtOWNhNjRmNjk4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA57ZlN2QcbTwRHeZk9+qjNJQGJ4QWOsX/AX0hQ+nh9eX9OcBQ99F2gc iiuIY8o/ozeZHjAbZ9q4R1+Qi3pbWnFs1UN3fRyeX/lL/F9jbXyKYJY2LklY96+1 +d5Nq2HYSFddnVBvwRGG82IzRJ7Qw2lGRgfdrPDEcoWYMzumxR627tw63tTPoo89 wbCtEYLFJKk3rOtIrgMQb4RSlSCtTRqfzqGYWMv1GaKfopo6T5k1f+9jKCuHinv+ /+6z7R1Y+FIGgub0i+hbkAc4nrHQc4u9FXgJt8BIKemKeenaCcN7jolzpCoQvt3A GpnuQYh8eGCDgsItkOHXw4w3BmD2cYs= -----END CERTIFICATE-----Generated at Tue Oct 28 02:42:55 2025 by rpki-client