$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa File: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (raw, json) Hash identifier: 8i/mfR5YcOIre/Aq12T7woTtEylCYYOI+8dVfryoJF8= Subject key identifier: 41:7B:51:74:24:4D:39:59:E3:97:DC:BF:65:55:D2:54:30:74:06:77 Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1 Certificate serial: 010D0C9F4328584BB45D12B39E931AA5845CF260 Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 34939 IP address blocks: 23.247.212.0/24 maxlen: 24 23.247.213.0/24 maxlen: 24 23.247.214.0/24 maxlen: 24 23.247.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:12:b3:9e:93:1a:a5:84:5c:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=af356198-d0a0-471e-ab39-ad81ef03ddf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:4a:f1:95:05:ce:4f:66:c3:2e:a9:9c:29: a4:95:92:2e:9e:1e:2e:d9:e7:72:ed:23:db:f1:6f: 4f:ae:6a:48:04:65:f4:db:7b:27:3d:d4:b6:f8:f3: c4:1e:8d:e8:5e:6d:c0:e0:03:4a:a5:f9:d3:1a:ae: 2c:5f:12:20:b2:56:77:4f:73:ad:85:f5:d7:b8:6c: 4a:6b:33:45:4e:70:be:89:f8:86:16:4a:e8:0c:04: ad:3d:01:8e:0b:2b:01:46:95:08:7a:e1:14:1b:ce: 89:f8:88:8e:79:83:50:1b:58:f1:10:e9:92:94:00: f1:41:17:fe:dd:72:d0:30:d3:f1:38:1b:4d:35:98: 29:7f:56:a3:9c:3e:0c:e8:67:48:1f:84:fc:38:76: 33:f6:f0:64:73:ac:60:2d:06:8e:12:68:3a:5b:4e: 67:b3:c6:07:d9:70:a2:bf:10:f0:fc:7f:5a:b8:ae: bc:7f:0f:33:f8:6f:ce:85:b3:ba:35:e6:24:db:18: 21:b9:71:ac:8d:64:b6:07:20:5d:f2:05:6e:5a:48: d0:08:ee:00:36:7e:c8:e7:d7:90:e7:b1:bd:e9:77: 3a:bd:39:35:73:96:bf:8e:63:f9:f0:e0:59:21:e4: 22:c1:88:b7:95:4d:d2:1d:c4:3a:88:9a:5f:0d:78: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:51:74:24:4D:39:59:E3:97:DC:BF:65:55:D2:54:30:74:06:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl X509v3 Authority Key Identifier: keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:36:66:55:84:c9:13:ce:f2:eb:fb:5e:cc:03:7f:9d:3b:5d: bd:56:5e:49:cd:98:69:a2:ff:5d:9c:d1:db:b1:e0:24:d1:90: 9e:cb:d0:f9:ae:9c:db:70:87:3c:e3:95:87:a2:21:18:a8:0a: 71:c6:a7:88:4d:0b:15:27:1a:fd:19:24:32:72:47:58:76:4c: c9:ba:91:0a:cc:71:ed:d0:73:3a:a0:9a:08:9b:87:32:f9:e5: 75:51:cc:82:84:7c:ae:93:d6:7c:1f:53:3d:c1:ec:39:e6:f1: 68:aa:79:2d:3a:3b:08:f0:39:f2:b0:e6:2c:a3:c1:bd:19:e5: a5:87:48:2c:06:5d:d3:b6:be:35:ee:f5:08:ff:38:7e:4c:31: 39:00:7a:73:17:a6:f4:36:ed:08:54:fb:b5:7b:d6:e1:0a:0b: 63:28:d1:3d:60:ee:36:c0:d4:2f:17:fb:4c:41:f6:f8:d7:e9: 8a:ee:ba:0a:7a:ee:5d:b7:ae:17:b2:ec:fe:ba:0c:e6:f8:9d: 80:83:b9:07:87:e6:b7:8c:bd:c5:b9:76:5e:60:a6:72:fc:d0: 5d:d1:a8:e2:a0:e3:5a:20:51:83:80:cd:93:80:f8:26:f7:21: 6f:42:38:f3:ad:52:04:ca:7e:3a:17:61:88:4d:bc:d1:2d:15: 83:a0:7f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRKznpMapYRc8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3Njdl MWMxMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWYzNTYxOTgtZDBhMC00NzFlLWFiMzktYWQ4MWVmMDNkZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC5K8ZUFzk9mwy6pnCmklZIunh4u2edy7SPb 8W9PrmpIBGX023snPdS2+PPEHo3oXm3A4ANKpfnTGq4sXxIgslZ3T3OthfXXuGxK azNFTnC+ifiGFkroDAStPQGOCysBRpUIeuEUG86J+IiOeYNQG1jxEOmSlADxQRf+ 3XLQMNPxOBtNNZgpf1ajnD4M6GdIH4T8OHYz9vBkc6xgLQaOEmg6W05ns8YH2XCi vxDw/H9auK68fw8z+G/OhbO6NeYk2xghuXGsjWS2ByBd8gVuWkjQCO4ANn7I59eQ 57G96Xc6vTk1c5a/jmP58OBZIeQiwYi3lU3SHcQ6iJpfDXg2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF7UXQkTTlZ45fcv2VV0lQwdAZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1 YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvNWIyNzVhMGEtZDliMC0z NjllLTkyZmUtZGM0Yjg0MDY0NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQwNWEzMmMtOTY0Yy00YjMwLWEw MDgtMGYyODc3NjdlMWMxLzc0MDVhMzJjLTk2NGMtNGIzMC1hMDA4LTBmMjg3NzY3 ZTFjMS5jcmwwHwYDVR0jBBgwFoAU6XN7Fc1m7aMLaGZDcZRSCBP32FgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4 Nzc2N2UxYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI2ZlWEyRPO8uv7XswDf507Xb1WXknNmGmi/12c0dux4CTRkJ7L0Pmu nNtwhzzjlYeiIRioCnHGp4hNCxUnGv0ZJDJyR1h2TMm6kQrMce3QczqgmgibhzL5 5XVRzIKEfK6T1nwfUz3B7Dnm8WiqeS06OwjwOfKw5iyjwb0Z5aWHSCwGXdO2vjXu 9Qj/OH5MMTkAenMXpvQ27QhU+7V71uEKC2Mo0T1g7jbA1C8X+0xB9vjX6Yruugp6 7l23rhey7P66DOb4nYCDuQeH5reMvcW5dl5gpnL80F3RqOKg41ogUYOAzZOA+Cb3 IW9COPOtUgTKfjoXYYhNvNEtFYOgf3k= -----END CERTIFICATE-----Generated at Mon Nov 3 04:35:59 2025 by rpki-client