$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa File: 011ade8c-5158-3ad0-b3a4-f792372a4d23.roa (raw, json) Hash identifier: yrkoyfqoS9hAP/5rjMDBIpHe4TmxDDxKK4pSY3OZGmg= Subject key identifier: 44:36:20:42:F3:BA:51:E0:D2:90:3B:5E:66:30:87:B1:C3:68:50:63 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F4328584B99D785EFF1B8C72150137648 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398987 IP address blocks: 23.128.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:85:ef:f1:b8:c7:21:50:13:76:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c146f204-eaa5-480e-95e9-230f414d06cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:01:82:22:f9:36:e5:68:f7:44:23:64:45: 00:3b:88:79:75:23:73:01:a6:aa:e5:f9:bc:0a:19: f6:f1:8b:2f:6a:58:68:85:c3:f8:ea:1d:e5:8e:fa: b9:ec:6c:46:17:20:ce:98:e5:5a:6a:37:a5:18:18: e5:e3:91:75:55:83:46:7e:c9:aa:87:a9:3a:17:a9: 80:f1:6b:96:90:b8:cf:62:d6:8e:d1:2b:e2:4c:cc: cc:b2:ca:a9:4a:d3:55:88:a8:36:d7:dc:53:a0:2b: e4:e3:8a:0d:f5:98:02:bd:14:b8:c6:e1:93:4c:1b: 13:7f:fb:54:37:7f:af:0f:12:84:08:17:bb:7e:3f: 39:d5:69:6b:58:96:a0:6e:d6:29:ef:0c:eb:3a:0f: 43:39:6c:46:d3:f0:aa:69:68:13:94:93:68:21:d4: 8a:f8:79:01:09:89:85:19:69:3c:82:45:6d:68:62: 15:29:e0:f4:ec:55:c0:d2:91:75:83:db:e8:3d:e0: a7:b0:c8:e4:01:0b:b2:1c:43:ed:23:f7:5b:60:58: a4:a5:b9:e7:1e:92:e1:1e:00:85:26:fa:83:36:5b: 58:47:fc:b0:80:a7:c0:43:6a:5e:56:1e:05:7f:d4: 06:31:33:3e:9c:95:1f:35:dc:61:56:ca:1c:f6:81: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:36:20:42:F3:BA:51:E0:D2:90:3B:5E:66:30:87:B1:C3:68:50:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/011ade8c-5158-3ad0-b3a4-f792372a4d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9f:4a:f9:aa:06:1a:44:51:b5:e7:01:98:2a:56:06:28:df: ea:ff:fe:d9:80:03:1f:e5:95:7d:b0:11:ab:da:da:74:45:14: aa:88:e1:a2:66:8b:89:1e:09:25:79:40:18:a0:a6:f2:77:b3: 14:52:5e:9f:3c:85:e4:59:29:0e:a8:66:07:4b:05:9e:09:fa: f4:d0:a5:31:79:dc:f7:79:0d:35:40:ef:e3:7f:a2:67:7b:72: 7d:5b:84:0d:51:9d:b7:87:8f:df:0a:d1:92:9a:0d:81:ab:36: 97:96:79:c5:b8:b2:4a:02:e1:34:8e:db:2b:11:69:da:01:36: 14:a8:30:10:e8:97:5e:f8:b9:7c:59:f6:14:53:e4:32:1d:f3: 6a:83:cd:78:bf:5b:bd:1d:bc:f1:00:da:67:85:ba:ba:cb:1d: 20:fa:9e:5a:b7:99:42:86:aa:ac:af:97:9c:73:80:3d:b8:19: 13:c5:80:ca:cc:26:f6:0c:62:d7:1a:7d:0c:37:a8:e3:f6:db: fa:ec:f4:37:cf:88:c2:9a:9c:8d:e5:25:3c:d6:bb:03:e4:e5: a4:55:e8:b3:38:d2:d6:8c:82:e2:ff:df:9e:2c:7b:97:7c:ce: 74:bf:53:da:31:f8:c5:19:90:42:80:5a:9b:62:22:d5:62:57: 84:66:7c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14Xv8bjHIVATdkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzE0NmYyMDQtZWFhNS00ODBlLTk1ZTktMjMwZjQxNGQwNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH8BgiL5NuVo90QjZEUAO4h5dSNzAaaq5fm8 Chn28YsvalhohcP46h3ljvq57GxGFyDOmOVaajelGBjl45F1VYNGfsmqh6k6F6mA 8WuWkLjPYtaO0SviTMzMssqpStNViKg219xToCvk44oN9ZgCvRS4xuGTTBsTf/tU N3+vDxKECBe7fj851WlrWJagbtYp7wzrOg9DOWxG0/CqaWgTlJNoIdSK+HkBCYmF GWk8gkVtaGIVKeD07FXA0pF1g9voPeCnsMjkAQuyHEPtI/dbYFikpbnnHpLhHgCF JvqDNltYR/ywgKfAQ2peVh4Ff9QGMTM+nJUfNdxhVsoc9oFR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ2IELzulHg0pA7XmYwh7HDaFBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvMDExYWRlOGMtNTE1OC0z YWQwLWIzYTQtZjc5MjM3MmE0ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGfSvmqBhpEUbXnAZgqVgYo3+r//tmAAx/llX2wEava2nRFFKqI4aJm i4keCSV5QBigpvJ3sxRSXp88heRZKQ6oZgdLBZ4J+vTQpTF53Pd5DTVA7+N/omd7 cn1bhA1RnbeHj98K0ZKaDYGrNpeWecW4skoC4TSO2ysRadoBNhSoMBDol174uXxZ 9hRT5DId82qDzXi/W70dvPEA2meFurrLHSD6nlq3mUKGqqyvl5xzgD24GRPFgMrM JvYMYtcafQw3qOP22/rs9DfPiMKanI3lJTzWuwPk5aRV6LM40taMguL/354se5d8 znS/U9ox+MUZkEKAWptiItViV4RmfDI= -----END CERTIFICATE-----Generated at Fri Oct 24 21:08:42 2025 by rpki-client