$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa File: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (raw, json) Hash identifier: 5TkrB+NVI1RF83tXfMITdG6vN8CqwjWgkDhXjfyoj14= Subject key identifier: 16:90:21:FA:AF:41:A3:F0:0F:A4:A6:9E:5A:B3:36:52:B3:80:DD:49 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584BAEC7C1F404C1EA911A9B70C0 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 32526 IP address blocks: 23.160.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c1:f4:04:c1:ea:91:1a:9b:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=618a7828-27fa-433a-9329-0fa013795d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:9c:03:4b:f9:fa:6f:c1:6c:be:2f:ec:16: cd:ed:40:33:d0:5f:e8:d3:fe:e7:b1:21:c6:39:cc: 77:08:5c:29:00:4f:4b:52:fc:c8:71:00:0a:aa:ef: 97:7c:c1:31:39:c3:0d:da:ca:3b:e0:de:95:e0:55: 90:b6:49:53:e3:4d:5e:2f:13:b3:07:9a:10:c2:8d: 0b:2a:f3:c0:9d:f0:44:b3:ae:f8:98:4a:aa:66:45: f4:54:34:52:33:51:41:39:0d:0b:e7:45:d3:b8:3b: 71:ea:14:0b:b6:8e:76:a4:2a:f3:1f:e0:c8:2f:f2: 01:e9:99:d5:3b:a4:a3:9f:fb:b5:8b:3d:d2:f0:06: 1c:be:3f:39:56:78:0f:a6:d0:43:3c:97:5b:46:35: 98:90:c9:a0:30:48:6d:e7:ea:f1:ae:ef:8d:97:26: 5e:95:97:bf:36:c1:42:85:ef:5a:e3:29:7e:03:32: 41:da:fd:cd:d0:33:c7:55:f5:ae:27:fd:c3:9d:62: 2d:cc:f4:8b:ba:f6:8f:23:7b:ab:6e:52:84:27:aa: fa:76:c6:de:41:4a:d7:2d:a0:56:36:07:8c:bb:1a: 7c:87:e7:1f:63:c8:7b:fb:ba:b9:12:f7:26:58:bf: 10:1e:9b:a7:ce:ed:e5:62:ad:ba:f9:68:d0:5d:17: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:21:FA:AF:41:A3:F0:0F:A4:A6:9E:5A:B3:36:52:B3:80:DD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:50:c5:e3:a3:d6:9e:fd:9e:2c:ed:d7:89:48:12:4f:d4:3d: d9:ae:6f:08:a8:bb:97:ca:9f:51:39:15:61:76:3e:dc:4a:51: b7:e6:4c:f5:3e:74:b7:a2:db:67:8d:9e:9e:3b:b0:b9:eb:58: 04:ed:93:a8:b9:66:b7:dc:e7:78:ca:d2:a1:5e:67:92:dd:e8: 74:63:10:92:8e:dd:82:02:5d:27:a3:2a:41:89:54:9c:28:8e: 08:cc:c2:96:4f:cb:60:e9:6c:f8:5d:99:e8:41:cf:e4:b0:8a: 1e:31:d7:71:24:30:b3:f1:44:e0:c6:ca:df:7b:ef:96:5f:85: 28:b6:66:c9:f2:5e:b4:2e:d9:94:de:0a:bb:c6:1f:e0:d5:c6: fd:28:9e:d5:f8:23:a4:a9:93:4e:c2:21:c3:64:90:87:b3:a5: 3e:8a:39:5f:c0:30:b5:da:57:1a:74:0a:51:54:49:82:c4:13: 7b:45:5b:3a:e9:2c:62:68:23:63:b1:f0:ff:3b:a2:4a:a7:c2: 67:c8:8d:69:e7:9d:24:e1:56:44:1c:b3:bc:02:13:af:04:b2: ce:ee:ab:4e:38:6c:fb:2a:30:8a:20:3a:1f:8b:cb:59:a5:f7: 22:4c:6d:5b:88:70:a1:fa:0f:18:5b:ff:ab:bb:4a:b7:04:f7: ba:bb:6f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8H0BMHqkRqbcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NjE4YTc4MjgtMjdmYS00MzNhLTkzMjktMGZhMDEzNzk1ZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWcA0v5+m/BbL4v7BbN7UAz0F/o0/7nsSHG Ocx3CFwpAE9LUvzIcQAKqu+XfMExOcMN2so74N6V4FWQtklT401eLxOzB5oQwo0L KvPAnfBEs674mEqqZkX0VDRSM1FBOQ0L50XTuDtx6hQLto52pCrzH+DIL/IB6ZnV O6Sjn/u1iz3S8AYcvj85VngPptBDPJdbRjWYkMmgMEht5+rxru+NlyZelZe/NsFC he9a4yl+AzJB2v3N0DPHVfWuJ/3DnWItzPSLuvaPI3urblKEJ6r6dsbeQUrXLaBW NgeMuxp8h+cfY8h7+7q5EvcmWL8QHpunzu3lYq26+WjQXRcWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaQIfqvQaPwD6SmnlqzNlKzgN1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMTY2NGI1MDktNWQ4Yy0z MGFkLTg2OWUtZTllMmJiMTU5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhQxeOj1p79nizt14lIEk/UPdmubwiou5fKn1E5FWF2PtxKUbfmTPU+ dLei22eNnp47sLnrWATtk6i5Zrfc53jK0qFeZ5Ld6HRjEJKO3YICXSejKkGJVJwo jgjMwpZPy2DpbPhdmehBz+Swih4x13EkMLPxRODGyt9775ZfhSi2ZsnyXrQu2ZTe CrvGH+DVxv0ontX4I6Spk07CIcNkkIezpT6KOV/AMLXaVxp0ClFUSYLEE3tFWzrp LGJoI2Ox8P87okqnwmfIjWnnnSThVkQcs7wCE68Ess7uq044bPsqMIogOh+Ly1ml 9yJMbVuIcKH6Dxhb/6u7SrcE97q7byI= -----END CERTIFICATE-----Generated at Tue Nov 4 13:35:54 2025 by rpki-client