$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa File: 25017e4e-9850-38bf-a8e4-a96d2341037c.roa (raw, json) Hash identifier: cEWOSV/cYKazBRpizTx524y6wwB0KfEn/sOh/YVG2JI= Subject key identifier: 2D:17:1C:E6:05:3B:D9:6C:1E:95:42:21:5B:DE:AE:A2:A9:99:B1:40 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584B2A2C3A17D4BE605CEC7FEB80 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 201217 IP address blocks: 23.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:17:d4:be:60:5c:ec:7f:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=93f44f2c-c627-492c-a4d3-791d7501f10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:44:30:19:32:f5:ef:bb:7d:f8:41:4e:34: 99:7a:b3:9e:80:25:55:1d:b1:69:54:f8:dc:60:62: cb:e5:9d:a7:93:b8:47:7d:93:31:6e:62:98:d6:f9: a4:80:d8:b7:b5:79:11:64:86:9a:d4:45:11:2e:52: 2c:47:ef:a6:01:b1:eb:8e:62:fe:d3:c3:e1:c7:0c: 5b:57:50:54:24:21:58:4d:eb:95:49:7f:85:b0:53: f3:45:f5:19:fa:03:c0:10:bb:44:46:2d:e4:99:8e: 46:03:58:5c:04:8b:df:d8:4b:42:d1:a1:77:5e:b9: 97:c1:13:1f:ad:25:3b:1c:cf:5f:ca:30:22:db:4c: cb:88:aa:2f:ee:ad:f7:de:0f:29:1f:c5:45:bd:08: 82:33:ce:28:d3:59:34:6d:15:15:3f:d5:cf:9a:8d: 3d:43:b4:0e:09:c9:3c:ae:0a:14:27:c1:74:88:2e: 59:e1:ee:cc:cc:4f:d4:c3:38:76:08:2a:c1:e5:ca: 3f:f4:4b:7d:a4:be:7e:92:dc:74:5e:38:cd:b5:aa: e4:3b:66:dd:2a:cb:cd:8e:43:55:62:aa:d8:4a:94: 4a:c3:25:99:4e:b6:8d:49:51:81:4e:ca:7b:2a:eb: ba:62:5e:cc:9b:ef:66:bf:13:a8:9f:ff:7c:5d:e8: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:1C:E6:05:3B:D9:6C:1E:95:42:21:5B:DE:AE:A2:A9:99:B1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/25017e4e-9850-38bf-a8e4-a96d2341037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:bf:fe:4b:1d:cf:56:67:fd:f9:86:5e:48:dd:62:25:2e:a1: 15:24:76:e1:dc:e7:cb:80:28:a6:18:d8:c4:14:f7:6f:45:10: 18:b1:e2:94:86:07:c2:dc:ba:48:fc:05:c6:92:a0:72:1f:ef: f4:ab:19:17:6a:cf:79:3b:d8:75:dd:58:1b:0c:09:7d:f0:ba: 0d:1a:50:22:ac:a3:5e:d5:98:8a:7b:89:6f:65:d1:de:ad:3b: a1:d5:d0:8e:7b:4f:97:62:33:90:d0:e7:8e:73:fc:62:d7:e8: 8d:f8:d2:29:80:7f:95:ef:33:4f:c9:5c:18:14:e9:e8:62:c6: 53:49:20:6f:b7:50:1e:42:b0:d8:fd:aa:40:31:3a:94:ed:73: fc:17:fb:d4:70:c3:37:b8:27:75:9b:d3:82:c8:c7:d4:7e:9c: 96:20:55:36:d9:97:90:07:2b:d4:e1:c2:91:0f:2e:46:02:92: 22:7b:f4:a8:00:27:74:85:6c:9f:20:d6:9c:ac:b9:d6:db:72: 19:7e:99:79:f8:07:df:ae:86:f4:aa:0a:5b:85:91:f2:bd:ac: 20:f5:ee:a5:5a:6b:fa:2c:56:87:c4:8d:dc:34:6d:fb:4a:5a: 8d:72:ff:15:87:1f:5a:18:6e:1a:1f:21:b8:8f:d5:42:22:6e: 7c:72:6c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDoX1L5gXOx/64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OTNmNDRmMmMtYzYyNy00OTJjLWE0ZDMtNzkxZDc1MDFmMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQBEMBky9e+7ffhBTjSZerOegCVVHbFpVPjc YGLL5Z2nk7hHfZMxbmKY1vmkgNi3tXkRZIaa1EURLlIsR++mAbHrjmL+08Phxwxb V1BUJCFYTeuVSX+FsFPzRfUZ+gPAELtERi3kmY5GA1hcBIvf2EtC0aF3XrmXwRMf rSU7HM9fyjAi20zLiKov7q333g8pH8VFvQiCM84o01k0bRUVP9XPmo09Q7QOCck8 rgoUJ8F0iC5Z4e7MzE/Uwzh2CCrB5co/9Et9pL5+ktx0XjjNtarkO2bdKsvNjkNV YqrYSpRKwyWZTraNSVGBTsp7Kuu6Yl7Mm+9mvxOon/98XehPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0XHOYFO9lsHpVCIVverqKpmbFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvMjUwMTdlNGUtOTg1MC0z OGJmLWE4ZTQtYTk2ZDIzNDEwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+//ksdz1Zn/fmGXkjdYiUuoRUkduHc58uAKKYY2MQU929FEBix4pSG B8Lcukj8BcaSoHIf7/SrGRdqz3k72HXdWBsMCX3wug0aUCKso17VmIp7iW9l0d6t O6HV0I57T5diM5DQ545z/GLX6I340imAf5XvM0/JXBgU6ehixlNJIG+3UB5CsNj9 qkAxOpTtc/wX+9Rwwze4J3Wb04LIx9R+nJYgVTbZl5AHK9ThwpEPLkYCkiJ79KgA J3SFbJ8g1pysudbbchl+mXn4B9+uhvSqCluFkfK9rCD17qVaa/osVofEjdw0bftK Wo1y/xWHH1oYbhofIbiP1UIibnxybKs= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:08 2025 by rpki-client