$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa File: 506410f2-e4be-3935-b59a-be62788b95ae.roa (raw, json) Hash identifier: gW4EUDFhkA6yaAbrIRHBKcwierWLU4ZLnwEdbrYGkKA= Subject key identifier: AD:AA:B6:57:E2:6E:66:BC:5A:A7:DC:24:4D:C5:F0:E4:74:1C:21:6C Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F4328584AF0F147E0873FF6112B963840 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 64289 IP address blocks: 23.161.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:47:e0:87:3f:f6:11:2b:96:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=04e3aa45-b6a8-424c-b82d-6ecf469e89ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:ae:3d:17:67:7e:25:94:30:98:ac:4c:28: 2a:21:ae:76:a1:58:3b:3f:53:ee:59:4e:8d:29:68: c8:50:e3:02:9f:23:eb:07:5a:75:cc:8c:93:b9:c8: 4d:9c:e2:29:57:f5:c8:f2:d3:4a:91:20:e6:07:d9: 76:ea:82:e5:2a:65:e8:ac:dc:e2:97:37:f4:ac:01: 97:c8:09:9e:4a:3b:23:fb:a2:b4:47:16:33:ad:28: 60:2c:66:a5:88:df:8e:43:5f:03:5e:e6:c8:7e:f6: eb:26:fb:a3:bc:c0:73:dd:b3:c9:8f:48:67:c1:0e: 4e:34:a3:c4:54:39:67:b4:6e:ff:6f:da:d2:a6:d4: ef:f5:29:aa:89:3e:a4:89:db:99:ea:58:6e:27:45: 7a:4d:01:d7:cb:d0:32:2d:33:65:f8:ee:74:6a:d3: a3:6c:36:d9:39:1a:6b:6a:50:42:f0:53:35:e4:9b: f1:d8:c8:dd:d8:a7:a0:79:48:02:a6:a9:18:91:33: cf:22:f4:3c:27:39:a1:5a:8d:50:56:32:30:c3:62: 90:6c:14:e4:5c:af:d5:51:8b:ed:dc:bd:85:2c:c5: bf:cf:bf:38:fc:8c:5b:c9:85:59:89:b7:3d:85:4b: 42:dc:84:02:2e:a8:0e:b6:2d:44:89:22:24:58:e5: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:B6:57:E2:6E:66:BC:5A:A7:DC:24:4D:C5:F0:E4:74:1C:21:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv4: 23.161.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:70:56:66:51:aa:a9:b7:01:98:69:bc:76:96:2a:e4:71:a5: 7f:b9:27:c6:6f:15:64:15:2d:60:96:d1:64:c0:ed:f6:23:02: ad:e4:32:73:51:83:7a:21:09:ee:27:74:2d:25:66:d6:29:ae: 76:57:14:d8:15:85:af:dd:38:8e:6d:d6:5e:34:5b:dd:d2:d4: 19:33:4b:8d:4c:73:30:c4:a2:c7:b1:50:5e:fa:96:1e:3b:bc: 56:d0:9b:f1:23:ce:f9:97:84:3e:2a:5a:51:90:82:ee:f5:ba: 2c:93:cc:35:6e:2d:fa:40:2c:91:cc:44:8d:62:4d:1c:a1:e6: 6f:f8:06:90:73:cc:e6:a6:2d:c6:80:3b:a6:d5:6a:19:07:72: ee:ff:d1:5e:83:c5:df:a8:26:ef:dc:69:53:af:cf:4a:fe:f3: 0c:a3:b8:b9:e1:e9:a6:32:85:b0:20:db:0e:85:cf:b7:52:af: 89:f9:63:79:e1:5a:8d:c9:1f:27:63:2e:a2:e4:20:39:46:92: 19:de:0c:ed:cf:c2:7c:92:89:e3:f1:48:a6:5c:51:db:af:c6: 0b:ab:71:2f:41:8f:7f:af:0e:32:37:81:97:2d:e9:cb:5d:c2: d7:e5:c7:9d:2a:d3:61:f3:df:db:24:dc:1b:92:40:bb:b0:35: 99:00:f8:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Ufghz/2ESuWOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDRlM2FhNDUtYjZhOC00MjRjLWI4MmQtNmVjZjQ2OWU4OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj92uPRdnfiWUMJisTCgqIa52oVg7P1PuWU6N KWjIUOMCnyPrB1p1zIyTuchNnOIpV/XI8tNKkSDmB9l26oLlKmXorNzilzf0rAGX yAmeSjsj+6K0RxYzrShgLGaliN+OQ18DXubIfvbrJvujvMBz3bPJj0hnwQ5ONKPE VDlntG7/b9rSptTv9SmqiT6kiduZ6lhuJ0V6TQHXy9AyLTNl+O50atOjbDbZORpr alBC8FM15Jvx2Mjd2KegeUgCpqkYkTPPIvQ8JzmhWo1QVjIww2KQbBTkXK/VUYvt 3L2FLMW/z784/IxbyYVZibc9hUtC3IQCLqgOti1EiSIkWOWM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2qtlfibma8WqfcJE3F8OR0HCFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvNTA2NDEwZjItZTRiZS0z OTM1LWI1OWEtYmU2Mjc4OGI5NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZwVmZRqqm3AZhpvHaWKuRxpX+5J8ZvFWQVLWCW0WTA7fYjAq3kMnNR g3ohCe4ndC0lZtYprnZXFNgVha/dOI5t1l40W93S1BkzS41MczDEosexUF76lh47 vFbQm/EjzvmXhD4qWlGQgu71uiyTzDVuLfpALJHMRI1iTRyh5m/4BpBzzOamLcaA O6bVahkHcu7/0V6Dxd+oJu/caVOvz0r+8wyjuLnh6aYyhbAg2w6Fz7dSr4n5Y3nh Wo3JHydjLqLkIDlGkhneDO3PwnySiePxSKZcUduvxgurcS9Bj3+vDjI3gZct6ctd wtflx50q02Hz39sk3BuSQLuwNZkA+AY= -----END CERTIFICATE-----Generated at Mon Nov 3 14:36:43 2025 by rpki-client