$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa File: efac39e6-7c8c-3202-8590-cf9dcc302c63.roa (raw, json) Hash identifier: tjJBMjqQkSwrQXQ3lH63teWnBR3xsXoZtjzpR80S52s= Subject key identifier: CE:65:FF:A2:5B:D9:EA:96:C8:BA:B8:73:7A:68:83:5C:82:DB:41:E3 Certificate issuer: /CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Certificate serial: 010D0C9F4328584B3556E82153AAAE2AE35074F4 Authority key identifier: 82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 63023 IP address blocks: 23.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e8:21:53:aa:ae:2a:e3:50:74:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628f1b90-aa4f-4bf4-9b08-6c2ba4a51659 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=b89fcd05-5817-43fa-8769-8cccb936b491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:b3:71:be:78:f8:92:e9:a2:b2:ee:36:e9: f7:45:d7:0c:91:44:c9:25:e8:26:9f:a1:f1:cd:25: b9:d2:51:3b:93:fe:57:2c:85:c0:fd:c6:28:d0:e6: c0:c5:77:50:bd:ee:ed:ac:30:7a:98:12:1d:25:66: de:4c:00:8e:9a:66:cf:b7:41:a1:fb:4a:d5:3b:98: 34:3b:f3:89:d9:ca:4d:84:41:1a:a5:b5:eb:74:04: ba:8b:b2:10:2f:02:65:e8:f5:c8:95:f3:2f:7c:d7: 70:c0:af:56:14:de:c9:f0:dc:e9:b8:b0:51:61:db: 68:f8:1d:c0:b8:de:4f:52:8a:a6:77:16:2e:39:08: 8b:a1:8d:35:3e:08:2d:38:9a:b4:a2:a4:38:4e:74: 6d:dc:cb:76:a8:7e:7d:ea:53:84:6c:e4:e0:a5:14: c0:c0:a7:59:94:98:e2:4f:2d:04:a5:f0:62:14:01: 36:8d:72:09:8a:3b:21:8c:c3:32:5b:88:0b:5c:d8: 86:a2:29:e4:c0:c8:73:3f:98:02:fc:6d:a8:c8:b0: bd:e6:2f:0b:34:37:7c:dc:66:b6:c2:36:0b:73:8c: 8d:99:0e:ec:35:5e:dc:f9:bf:b5:f0:c6:7c:50:31: 71:da:7b:f8:6b:ca:79:2e:e3:51:de:dc:08:50:70: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:FF:A2:5B:D9:EA:96:C8:BA:B8:73:7A:68:83:5C:82:DB:41:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/efac39e6-7c8c-3202-8590-cf9dcc302c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.crl X509v3 Authority Key Identifier: keyid:82:8D:F8:35:71:30:E9:BC:84:5B:0B:50:59:E3:B8:25:D7:CA:0F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/628f1b90-aa4f-4bf4-9b08-6c2ba4a51659.cer sbgp-ipAddrBlock: critical IPv4: 23.157.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a2:8c:db:c5:ad:0f:9d:6d:62:ab:1c:00:dd:0e:f3:8d:04: 63:df:22:53:80:21:08:39:23:90:86:e7:ec:1f:aa:57:21:72: 08:eb:44:b8:6e:c6:cb:45:8f:5e:58:dc:92:95:ab:4c:da:81: 6b:39:0d:5b:13:62:6e:86:21:88:e4:7f:bd:80:3b:80:c2:de: 1c:97:d0:af:54:51:b7:92:46:29:d3:d3:59:66:03:7d:d5:3b: 6f:13:13:e2:0c:21:8e:6b:ad:3f:18:45:30:be:d1:74:29:fd: 15:51:8c:e1:ee:d7:86:ba:c6:41:4f:41:cf:93:a3:2a:33:06: 39:98:62:95:db:c8:a7:9d:d0:9e:66:ca:70:0e:63:21:3f:f7: 66:51:b1:05:35:83:0c:06:2b:b3:7d:70:e8:5f:1c:eb:4f:bb: fd:46:6c:dc:01:dd:5d:0c:67:44:e8:69:75:d5:8f:15:b9:2d: e9:cb:2b:06:86:72:2f:17:b7:8f:f2:e6:6c:87:17:02:3f:03: 7d:a4:1e:ae:02:bc:68:56:92:e4:28:66:1b:2e:e6:c4:16:1d: 30:6b:b0:41:db:f6:47:b3:58:06:82:b6:f8:ad:69:f3:3d:e7: f5:89:12:a4:45:aa:82:e4:0b:80:e1:c8:9d:52:ae:6e:46:4c: 78:3a:ed:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VughU6quKuNQdPQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZjFiOTAtYWE0Zi00YmY0LTliMDgtNmMyYmE0YTUx NjU5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Yjg5ZmNkMDUtNTgxNy00M2ZhLTg3NjktOGNjY2I5MzZiNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuezcb54+JLporLuNun3RdcMkUTJJegmn6Hx zSW50lE7k/5XLIXA/cYo0ObAxXdQve7trDB6mBIdJWbeTACOmmbPt0Gh+0rVO5g0 O/OJ2cpNhEEapbXrdAS6i7IQLwJl6PXIlfMvfNdwwK9WFN7J8NzpuLBRYdto+B3A uN5PUoqmdxYuOQiLoY01PggtOJq0oqQ4TnRt3Mt2qH596lOEbOTgpRTAwKdZlJji Ty0EpfBiFAE2jXIJijshjMMyW4gLXNiGoinkwMhzP5gC/G2oyLC95i8LNDd83Ga2 wjYLc4yNmQ7sNV7c+b+18MZ8UDFx2nv4a8p5LuNR3twIUHA7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5l/6Jb2eqWyLq4c3pog1yC20HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Mjhm MWI5MC1hYTRmLTRiZjQtOWIwOC02YzJiYTRhNTE2NTkvZWZhYzM5ZTYtN2M4Yy0z MjAyLTg1OTAtY2Y5ZGNjMzAyYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjI4ZjFiOTAtYWE0Zi00YmY0LTli MDgtNmMyYmE0YTUxNjU5LzYyOGYxYjkwLWFhNGYtNGJmNC05YjA4LTZjMmJhNGE1 MTY1OS5jcmwwHwYDVR0jBBgwFoAUgo34NXEw6byEWwtQWeO4JdfKD2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MjhmMWI5MC1hYTRmLTRiZjQtOWIwOC02YzJi YTRhNTE2NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuijNvFrQ+dbWKrHADdDvONBGPfIlOAIQg5I5CG5+wfqlchcgjrRLhu xstFj15Y3JKVq0zagWs5DVsTYm6GIYjkf72AO4DC3hyX0K9UUbeSRinT01lmA33V O28TE+IMIY5rrT8YRTC+0XQp/RVRjOHu14a6xkFPQc+ToyozBjmYYpXbyKed0J5m ynAOYyE/92ZRsQU1gwwGK7N9cOhfHOtPu/1GbNwB3V0MZ0ToaXXVjxW5LenLKwaG ci8Xt4/y5myHFwI/A32kHq4CvGhWkuQoZhsu5sQWHTBrsEHb9kezWAaCtvitafM9 5/WJEqRFqoLkC4DhyJ1Srm5GTHg67SI= -----END CERTIFICATE-----Generated at Tue Sep 16 16:14:36 2025 by rpki-client