$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa File: 16782b21-eed6-3014-9710-b3c789353a34.roa (raw, json) Hash identifier: OGj7d6JRwg5499ZlMkhMnDhb2JxazAv0EY2YQ3v15wQ= Subject key identifier: BC:6E:E4:72:2D:53:F0:82:D4:F8:14:96:A1:AB:28:CE:A0:34:FA:17 Certificate issuer: /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452 Certificate serial: 010D0C9F4328584B76F2270C3C668F937E71FB40 Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 397709 IP address blocks: 23.148.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:27:0c:3c:66:8f:93:7e:71:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1315915a-9002-48ad-a41b-ab481c2d5569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:72:c2:e6:a3:e6:57:e6:e4:67:99:6d:35: 81:2c:f2:e3:b3:a2:69:11:1d:90:f1:10:07:e9:45: aa:07:89:cc:59:9c:f0:cd:7c:be:f4:df:61:42:e2: 58:bb:35:ac:af:8e:2f:74:25:a8:21:3a:12:53:0f: 2a:c8:b4:00:48:e7:6c:d7:60:58:91:dd:a4:b2:ff: f2:2d:51:65:3d:ac:76:63:05:27:b5:03:26:82:ee: cf:69:15:ca:f3:3b:e1:d8:b7:14:7a:31:b9:91:b9: bb:c9:00:b3:43:16:a4:3a:9f:60:b9:95:13:73:97: 94:1f:c2:e3:ac:63:1d:c4:5f:7c:2f:69:de:e2:32: db:51:ba:09:00:cc:10:59:25:9c:7f:38:b5:53:fb: 5c:8e:e8:a6:c0:9d:f9:18:52:0f:ac:03:b5:b1:1a: 55:a4:97:14:32:59:f3:e1:77:cc:f0:29:12:2a:73: eb:f6:11:64:55:cf:31:99:47:45:2a:3c:4d:fe:91: d0:b7:42:ea:d4:3e:4f:3b:b2:7e:d8:bf:4c:06:a8: bd:4b:8a:4d:c6:0a:22:c1:f5:f9:2a:0c:65:e0:bb: c2:eb:ec:b9:eb:31:5f:5d:19:b3:74:72:96:40:87: 8d:12:d9:16:b4:32:0d:94:46:0a:1d:84:26:1a:36: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:E4:72:2D:53:F0:82:D4:F8:14:96:A1:AB:28:CE:A0:34:FA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/16782b21-eed6-3014-9710-b3c789353a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl X509v3 Authority Key Identifier: keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer sbgp-ipAddrBlock: critical IPv4: 23.148.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:70:3f:50:30:05:42:ca:07:7d:f7:10:c8:06:a9:91:61:e8: 56:d4:34:2d:07:0b:1e:95:be:ab:20:2d:50:d9:13:9c:9a:9a: 3b:3b:4a:d1:33:6e:ff:f6:10:4f:76:39:8b:0f:88:05:22:2d: 96:ff:dd:89:0f:cd:c0:de:d7:48:e9:d4:f7:0b:95:90:88:ab: 3a:0f:5a:e8:8e:f5:60:d4:d9:54:28:f5:93:b8:05:c7:8c:36: 9e:34:26:a6:f7:9a:5a:9b:27:fa:17:a0:63:8d:f4:1a:96:e5: ad:3c:81:33:aa:20:23:a1:ee:33:5a:48:2a:6b:cc:be:93:0e: 5f:87:3b:62:1e:ea:78:d5:9b:c2:3e:00:fa:4f:35:1a:10:9c: 23:0e:5e:ae:b4:6a:5d:e1:a5:ee:2e:4f:41:2f:88:64:92:95: 46:17:b0:4e:1d:5a:6b:02:fa:86:4a:b4:67:76:dd:97:d1:9b: f7:9f:ea:18:62:99:82:68:55:13:4e:db:5d:2f:49:96:a4:67: 84:af:ad:b9:ef:05:74:45:32:83:c9:5d:e3:3d:51:c0:88:a0: 4c:f5:c8:99:a4:4a:55:91:65:56:26:ee:f8:d4:40:1e:fd:ce: 71:b5:c5:a6:c3:42:97:83:8b:47:ce:53:32:7a:ab:0d:1a:87: 69:ac:87:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28icMPGaPk35x+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlNTAzZmQtMmI2Yi00M2JhLWFjMmUtNGZkNDY5N2Fj NDUyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTMxNTkxNWEtOTAwMi00OGFkLWE0MWItYWI0ODFjMmQ1NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvohywuaj5lfm5GeZbTWBLPLjs6JpER2Q8RAH 6UWqB4nMWZzwzXy+9N9hQuJYuzWsr44vdCWoIToSUw8qyLQASOds12BYkd2ksv/y LVFlPax2YwUntQMmgu7PaRXK8zvh2LcUejG5kbm7yQCzQxakOp9guZUTc5eUH8Lj rGMdxF98L2ne4jLbUboJAMwQWSWcfzi1U/tcjuimwJ35GFIPrAO1sRpVpJcUMlnz 4XfM8CkSKnPr9hFkVc8xmUdFKjxN/pHQt0Lq1D5PO7J+2L9MBqi9S4pNxgoiwfX5 Kgxl4LvC6+y56zFfXRmzdHKWQIeNEtkWtDINlEYKHYQmGjYauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxu5HItU/CC1PgUlqGrKM6gNPoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1 MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0Njk3YWM0NTIvMTY3ODJiMjEtZWVkNi0z MDE0LTk3MTAtYjNjNzg5MzUzYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFlNTAzZmQtMmI2Yi00M2JhLWFj MmUtNGZkNDY5N2FjNDUyLzRhZTUwM2ZkLTJiNmItNDNiYS1hYzJlLTRmZDQ2OTdh YzQ1Mi5jcmwwHwYDVR0jBBgwFoAU6TxgaZlr8Ypxvn55tq8B+oqhO1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWU1MDNmZC0yYjZiLTQzYmEtYWMyZS00ZmQ0 Njk3YWM0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9wP1AwBULKB333EMgGqZFh6FbUNC0HCx6VvqsgLVDZE5yamjs7StEz bv/2EE92OYsPiAUiLZb/3YkPzcDe10jp1PcLlZCIqzoPWuiO9WDU2VQo9ZO4BceM Np40Jqb3mlqbJ/oXoGON9BqW5a08gTOqICOh7jNaSCprzL6TDl+HO2Ie6njVm8I+ APpPNRoQnCMOXq60al3hpe4uT0EviGSSlUYXsE4dWmsC+oZKtGd23ZfRm/ef6hhi mYJoVRNO210vSZakZ4SvrbnvBXRFMoPJXeM9UcCIoEz1yJmkSlWRZVYm7vjUQB79 znG1xabDQpeDi0fOUzJ6qw0ah2msh3E= -----END CERTIFICATE-----Generated at Fri Oct 17 11:38:22 2025 by rpki-client