$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa File: 4c7be311-6f85-3b93-8242-963a4e63a1ab.roa (raw, json) Hash identifier: k0XGaTYWUQ5ARcoALlp8JQhf85jxxOqWIx/KQl8E5Fg= Subject key identifier: DA:94:B0:77:63:D4:2F:E1:CE:5B:6B:9A:9F:3E:1C:2F:CB:7A:51:29 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584B5DD1F65DF8280C0017599780 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 32595 IP address blocks: 23.172.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f6:5d:f8:28:0c:00:17:59:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3a24074a-8819-46ff-9938-243ea151f6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:23:0a:6b:56:dc:34:e3:49:d7:9a:08:5c: 98:fc:52:24:d5:0c:dc:90:2a:49:c1:93:62:6f:56: 37:dd:ab:eb:b4:38:c2:44:20:a8:43:d3:39:88:0a: 9e:54:f4:f4:66:be:b5:e1:e4:fe:6e:29:73:b3:25: 35:63:5a:5d:06:01:9f:fe:f5:fd:40:e4:9f:77:56: d9:12:89:ac:cb:93:23:01:8f:d1:d5:3a:ca:17:7f: a6:4c:31:60:2f:13:8e:28:30:6c:b2:8b:10:18:9f: 08:b2:a7:59:0f:0b:bd:66:29:0a:74:b4:ce:a4:14: 32:cc:52:a7:e0:62:28:f0:7f:0c:25:ba:b8:96:47: 4e:0a:c4:c8:83:9c:39:f6:d1:9b:01:4c:d0:6c:d3: 44:5f:3e:69:b7:05:e9:75:39:c8:af:7b:72:13:ff: b8:ea:f0:00:63:99:9f:85:05:71:b3:2e:fe:e1:ee: 7d:4a:d3:82:5b:a8:8d:3b:36:de:35:73:14:07:ee: c4:03:80:a2:d5:b0:67:af:84:f5:e1:47:69:7e:76: 61:19:fb:98:b3:72:0a:6c:d5:9d:e3:b1:81:af:d5: 9e:99:e7:c7:ce:ee:26:06:bd:bf:5d:77:95:c9:28: 99:fd:7e:bf:46:d9:0f:c8:49:0d:74:c9:ad:27:53: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:94:B0:77:63:D4:2F:E1:CE:5B:6B:9A:9F:3E:1C:2F:CB:7A:51:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c0:f5:c1:cc:0c:0d:2f:0f:0b:ab:90:21:90:5a:ab:01:ef: 86:fd:09:54:2e:7c:2b:ec:2b:43:c4:e0:5c:5f:33:06:9f:22: cf:b3:e4:5d:bb:da:92:b4:da:48:00:32:f3:cc:80:81:45:2e: 3b:c5:27:b6:29:10:2f:96:f8:0c:64:42:8e:1c:e7:91:70:ee: 64:63:25:b1:5e:c5:cc:21:b5:56:d9:b6:ea:91:55:39:ef:3e: 04:9f:1e:64:61:98:13:aa:54:16:8c:a7:72:4d:b4:9c:4f:41: a0:3c:6c:3d:c6:ba:bd:6a:87:83:1d:b5:18:49:f3:b6:8b:85: ca:9e:89:c2:5d:ad:8c:1f:ba:08:93:74:5a:98:03:9c:06:1e: f7:02:62:e6:23:b8:e5:17:5e:cb:72:1d:2e:bd:9e:e8:44:40: 06:78:4b:7c:aa:a4:ae:a7:15:04:90:7b:42:df:3b:7f:e8:d9: 4e:2e:8c:93:49:bd:4e:66:45:b2:f2:58:22:57:a0:f2:f7:f8: ae:35:7b:2a:62:27:c7:fd:f8:43:5a:b1:28:e0:1a:f9:6f:6a: b1:73:1d:e2:29:b7:d2:12:bf:b9:a9:01:c4:95:ed:e9:86:e3: ed:5b:c8:32:e2:8d:53:a3:38:61:c2:ee:39:ca:13:a0:5a:7e: 3d:92:ca:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fZd+CgMABdZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk M2EyNDA3NGEtODgxOS00NmZmLTk5MzgtMjQzZWExNTFmNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ojCmtW3DTjSdeaCFyY/FIk1QzckCpJwZNi b1Y33avrtDjCRCCoQ9M5iAqeVPT0Zr614eT+bilzsyU1Y1pdBgGf/vX9QOSfd1bZ Eomsy5MjAY/R1TrKF3+mTDFgLxOOKDBssosQGJ8IsqdZDwu9ZikKdLTOpBQyzFKn 4GIo8H8MJbq4lkdOCsTIg5w59tGbAUzQbNNEXz5ptwXpdTnIr3tyE/+46vAAY5mf hQVxsy7+4e59StOCW6iNOzbeNXMUB+7EA4Ci1bBnr4T14UdpfnZhGfuYs3IKbNWd 47GBr9WemefHzu4mBr2/XXeVySiZ/X6/RtkPyEkNdMmtJ1OvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqUsHdj1C/hzltrmp8+HC/LelEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGM3YmUzMTEtNmY4NS0z YjkzLTgyNDItOTYzYTRlNjNhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7A9cHMDA0vDwurkCGQWqsB74b9CVQufCvsK0PE4FxfMwafIs+z5F27 2pK02kgAMvPMgIFFLjvFJ7YpEC+W+AxkQo4c55Fw7mRjJbFexcwhtVbZtuqRVTnv PgSfHmRhmBOqVBaMp3JNtJxPQaA8bD3Gur1qh4MdtRhJ87aLhcqeicJdrYwfugiT dFqYA5wGHvcCYuYjuOUXXstyHS69nuhEQAZ4S3yqpK6nFQSQe0LfO3/o2U4ujJNJ vU5mRbLyWCJXoPL3+K41eypiJ8f9+ENasSjgGvlvarFzHeIpt9ISv7mpAcSV7emG 4+1byDLijVOjOGHC7jnKE6Bafj2Syps= -----END CERTIFICATE-----Generated at Sun Oct 19 22:05:34 2025 by rpki-client