$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa File: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (raw, json) Hash identifier: Ds4KBeEt+TQQ3x0TITIwWNBsiCgcZHuYf9vVe0jvWZQ= Subject key identifier: DB:00:39:6B:B4:5D:99:AC:EA:EB:EF:5F:14:F4:BA:F5:33:BA:A6:63 Certificate issuer: /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Certificate serial: 010D0C9F4328584B5F372967D0F326E318ED2EC0 Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395185 IP address blocks: 23.137.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:29:67:d0:f3:26:e3:18:ed:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c1f8f00f-482f-4c28-b64f-a06621f74ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:bb:21:3f:1c:70:43:b4:41:3a:f0:6e:23: 42:38:1a:84:84:9e:d2:33:ae:52:8e:53:51:6e:3c: 9a:d4:bc:cf:fd:6d:84:82:60:61:bc:79:c6:e8:d8: 2d:42:66:3a:b6:a3:85:c9:1e:f6:65:5d:1a:79:b4: 6c:4a:27:b3:45:af:0c:73:53:24:c0:78:3e:99:a5: 2c:2c:6c:1c:76:4c:e8:72:4f:88:4f:46:33:1d:ef: 23:e4:c6:5d:f3:86:2e:9e:48:52:5a:55:20:68:28: 87:5c:b0:27:7e:b0:77:7b:88:a7:7a:12:b1:67:af: 53:64:fd:31:33:9b:19:fc:5f:bc:d4:7e:75:dd:91: b7:f5:5b:1e:a7:4e:44:6c:da:f9:f6:ed:0b:63:39: f5:ff:68:b6:58:27:4d:e5:ef:e6:37:39:09:52:40: c5:55:e4:6b:60:fd:6c:64:f4:6a:60:7c:7a:24:55: b8:c3:91:cc:37:59:08:fa:ad:5d:8f:28:df:0f:83: e6:5d:e3:c5:36:4c:59:42:5b:ec:60:c1:47:a6:32: ef:d0:d7:4c:aa:a3:35:d4:bf:2c:c5:26:07:c5:92: d1:52:00:76:f7:21:fa:4c:46:30:8d:a3:bc:8a:9c: 8b:34:d8:90:cd:f9:ac:ec:e5:45:f7:fc:e8:bb:35: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:39:6B:B4:5D:99:AC:EA:EB:EF:5F:14:F4:BA:F5:33:BA:A6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl X509v3 Authority Key Identifier: keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer sbgp-ipAddrBlock: critical IPv4: 23.137.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ee:bb:33:10:bc:6b:00:65:51:9e:5f:b3:06:7e:f1:a5:03: a1:7d:26:f5:25:d4:da:00:7b:5a:f1:29:8e:64:9d:73:a0:32: 7d:94:39:41:2f:da:80:8a:fa:73:db:d6:82:54:93:95:bf:7a: ea:64:c0:25:fb:56:8e:77:ac:50:f2:cb:69:4b:15:90:36:74: d7:77:21:76:e6:0b:b1:1b:96:a8:c3:25:6e:ac:9f:78:3d:03: d2:10:70:d2:3a:49:29:c0:36:05:d5:54:5d:97:b3:87:ba:df: ff:42:9f:b2:a6:87:fd:fc:a0:ed:96:4b:85:11:ad:b3:e7:13: 02:6f:4e:8b:d2:70:52:92:c5:8d:21:06:10:17:9b:30:4d:7a: b8:d4:b9:f2:7b:63:48:f0:43:62:24:62:bd:46:67:8a:c5:a0: 43:7e:0e:cd:d8:af:a3:3c:5b:03:33:d8:ef:1b:8f:20:cd:db: 68:4d:9b:e6:20:81:fb:0e:ec:a2:26:a2:df:14:0a:f6:d1:05: 90:ca:31:49:c7:c9:7f:cb:62:f6:9c:b0:4c:9e:75:3c:cb:01: 7c:ba:30:d2:e7:ed:00:0c:bd:f6:24:4b:f1:03:5c:65:30:73: 2a:3c:1a:68:b9:3a:32:5f:b3:1f:c4:4e:66:c4:d6:ed:81:c7: b3:31:ff:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyln0PMm4xjtLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi ZDBmMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzFmOGYwMGYtNDgyZi00YzI4LWI2NGYtYTA2NjIxZjc0ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhS7IT8ccEO0QTrwbiNCOBqEhJ7SM65SjlNR bjya1LzP/W2EgmBhvHnG6NgtQmY6tqOFyR72ZV0aebRsSiezRa8Mc1MkwHg+maUs LGwcdkzock+IT0YzHe8j5MZd84YunkhSWlUgaCiHXLAnfrB3e4inehKxZ69TZP0x M5sZ/F+81H513ZG39Vsep05EbNr59u0LYzn1/2i2WCdN5e/mNzkJUkDFVeRrYP1s ZPRqYHx6JFW4w5HMN1kI+q1djyjfD4PmXePFNkxZQlvsYMFHpjLv0NdMqqM11L8s xSYHxZLRUgB29yH6TEYwjaO8ipyLNNiQzfms7OVF9/zouzXd8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsAOWu0XZms6uvvXxT0uvUzuqZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNTFiYTM0ZjItMGY4MC0z YThiLTgwMmUtMDNhMmFmYzQ4N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm ODQ1YmJkMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfuuzMQvGsAZVGeX7MGfvGlA6F9JvUl1NoAe1rxKY5knXOgMn2UOUEv 2oCK+nPb1oJUk5W/eupkwCX7Vo53rFDyy2lLFZA2dNd3IXbmC7EblqjDJW6sn3g9 A9IQcNI6SSnANgXVVF2Xs4e63/9Cn7Kmh/38oO2WS4URrbPnEwJvTovScFKSxY0h BhAXmzBNerjUufJ7Y0jwQ2IkYr1GZ4rFoEN+Ds3Yr6M8WwMz2O8bjyDN22hNm+Yg gfsO7KImot8UCvbRBZDKMUnHyX/LYvacsEyedTzLAXy6MNLn7QAMvfYkS/EDXGUw cyo8Gmi5OjJfsx/ETmbE1u2Bx7Mx/7E= -----END CERTIFICATE-----Generated at Mon Nov 3 23:05:51 2025 by rpki-client