$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa File: cb9a4e83-bcfc-3465-82bf-4111784123b0.roa (raw, json) Hash identifier: VSdXQB2nrQWVguXumLxQ/5ARpaKpGqis8AyhXDFZ7ag= Subject key identifier: BE:C9:29:87:EA:69:D7:A2:3D:17:71:FB:B1:3A:00:25:F4:49:BD:03 Certificate issuer: /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Certificate serial: 010D0C9F4328584B663203B897B2C269388768C0 Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 401323 IP address blocks: 23.187.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:03:b8:97:b2:c2:69:38:87:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=2d61c683-08f4-4db7-9d9e-b5f9ac01f2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:fb:f3:0d:32:1c:5c:e7:16:5c:5d:fe:23: d8:1d:a5:42:42:c6:16:e3:c2:76:14:a6:68:10:e6: bc:11:31:57:fc:ad:42:96:f7:5f:b6:d6:8c:9c:cf: 83:e4:78:33:28:af:a3:60:89:28:40:be:75:b0:1c: 88:6d:ca:0f:90:81:d1:d9:48:6d:33:91:5d:ea:0f: 3f:10:5d:2d:fd:28:a5:a8:a4:22:25:54:43:9c:06: 62:b6:fc:ed:32:43:0a:1a:70:8e:13:a4:09:9d:f5: 2d:59:89:ac:48:b0:e3:6e:b6:37:0b:a2:bb:83:51: 2f:52:a1:6a:2b:5a:2d:65:06:24:2c:7d:1e:56:11: e5:cf:e0:10:84:12:9a:71:a9:a7:9c:a4:67:7c:04: 87:81:3f:46:d4:05:45:ce:51:78:46:8a:ec:27:5f: 14:4c:24:59:94:58:8b:91:59:9d:07:a5:44:94:3b: 68:0a:6a:5c:db:12:1f:12:7e:69:b0:f7:e3:a3:dc: c1:d9:2d:4c:7d:b7:d7:60:7c:54:cd:6d:4d:9f:a5: 8b:4f:de:fb:47:f2:4f:91:a9:37:e8:fb:1c:26:bf: d6:e6:16:9e:c6:7e:df:7f:de:58:1d:1f:9e:93:40: c3:fc:de:4b:96:cb:12:91:f6:be:70:02:ca:ce:bc: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C9:29:87:EA:69:D7:A2:3D:17:71:FB:B1:3A:00:25:F4:49:BD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl X509v3 Authority Key Identifier: keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer sbgp-ipAddrBlock: critical IPv4: 23.187.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5a:e4:9e:a3:07:0e:50:10:39:c1:20:53:f2:46:80:3f:bd: 1d:a8:c7:da:ec:11:2d:82:07:7f:ee:ad:5e:13:79:c4:fe:75: e8:63:ea:45:3d:26:7e:fd:fc:d9:f3:b7:23:ac:85:82:29:d0: c4:2d:f1:5e:d4:b6:da:8e:79:3d:3e:a9:83:94:70:a8:52:7d: 88:bf:56:97:fd:b2:9e:5f:2b:7c:1c:05:1e:b8:b2:9e:0d:1d: de:ce:b3:4d:f1:01:c0:57:b1:a0:e5:3e:5b:4d:e2:3d:4d:56: 3a:66:a7:01:03:30:f1:3c:81:3f:5b:40:b5:9d:c3:73:ce:73: af:cc:99:8b:a2:17:e8:5c:29:4f:13:2f:71:9e:d2:81:0e:c5: 90:bd:6e:ee:59:0c:7d:a5:b0:ed:22:59:74:c0:02:d7:b2:9d: ef:4b:e1:7a:37:09:17:60:83:9a:6c:44:ea:2e:a6:ec:79:5e: 92:b5:df:01:c9:88:d6:a8:52:3f:dc:45:96:81:a0:a3:55:5c: 44:73:9c:6f:3f:28:8c:1e:c8:66:36:8f:6b:26:b9:b4:f3:f2: ff:1c:98:00:1a:84:e6:e5:81:ff:24:ae:e3:dc:d4:d0:37:ad: b7:33:37:db:db:fa:1c:9b:67:99:73:aa:21:c3:08:7a:e0:09: 44:72:05:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgO4l7LCaTiHaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1 OWNhMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MmQ2MWM2ODMtMDhmNC00ZGI3LTlkOWUtYjVmOWFjMDFmMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FD78w0yHFznFlxd/iPYHaVCQsYW48J2FKZo EOa8ETFX/K1ClvdfttaMnM+D5HgzKK+jYIkoQL51sByIbcoPkIHR2UhtM5Fd6g8/ EF0t/SilqKQiJVRDnAZitvztMkMKGnCOE6QJnfUtWYmsSLDjbrY3C6K7g1EvUqFq K1otZQYkLH0eVhHlz+AQhBKacamnnKRnfASHgT9G1AVFzlF4RorsJ18UTCRZlFiL kVmdB6VElDtoCmpc2xIfEn5psPfjo9zB2S1MfbfXYHxUzW1Nn6WLT977R/JPkak3 6PscJr/W5haexn7ff95YHR+ek0DD/N5LlssSkfa+cALKzrxHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7JKYfqadeiPRdx+7E6ACX0Sb0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFl ZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvY2I5YTRlODMtYmNmYy0z NDY1LTgyYmYtNDExMTc4NDEyM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmExZWY0OGMtMzE5Yi00ODg4LTli NmUtZWZlZGU2ZDE1OWNhL2ZhMWVmNDhjLTMxOWItNDg4OC05YjZlLWVmZWRlNmQx NTljYS5jcmwwHwYDVR0jBBgwFoAU69nfBRO1I+Ljr3Q5iNELI2O6Xo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVk ZTZkMTU5Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZa5J6jBw5QEDnBIFPyRoA/vR2ox9rsES2CB3/urV4TecT+dehj6kU9 Jn79/NnztyOshYIp0MQt8V7UttqOeT0+qYOUcKhSfYi/Vpf9sp5fK3wcBR64sp4N Hd7Os03xAcBXsaDlPltN4j1NVjpmpwEDMPE8gT9bQLWdw3POc6/MmYuiF+hcKU8T L3Ge0oEOxZC9bu5ZDH2lsO0iWXTAAteyne9L4Xo3CRdgg5psROoupux5XpK13wHJ iNaoUj/cRZaBoKNVXERznG8/KIweyGY2j2smubTz8v8cmAAahOblgf8kruPc1NA3 rbczN9vb+hybZ5lzqiHDCHrgCURyBe0= -----END CERTIFICATE-----Generated at Sun Oct 19 08:08:35 2025 by rpki-client