$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/cff835c3-6259-391d-ae9d-7a3055ee651d.roa File: cff835c3-6259-391d-ae9d-7a3055ee651d.roa (raw, json) Hash identifier: oENNYQe5ZZx9vT+rpF7fqKlxJ89uJVaF3xNIAeShvBw= Subject key identifier: 73:4D:98:1C:9C:5B:C4:7A:73:ED:99:93:32:4E:BC:76:A7:9D:FF:47 Certificate issuer: /CN=e80eeaf9-e2f0-4475-b796-e556ca230e10 Certificate serial: 010D0C9F4328584B2A2C371127516DFB1AC14C80 Authority key identifier: 4D:D0:5D:00:5A:55:A0:86:14:F6:AD:73:1B:D0:54:C0:72:B5:F6:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/cff835c3-6259-391d-ae9d-7a3055ee651d.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 398764 IP address blocks: 23.164.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/e80eeaf9-e2f0-4475-b796-e556ca230e10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/e80eeaf9-e2f0-4475-b796-e556ca230e10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:37:11:27:51:6d:fb:1a:c1:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e80eeaf9-e2f0-4475-b796-e556ca230e10 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=88a0f826-f96e-48c3-b93f-15391b0d2fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:26:54:93:a7:d9:da:52:41:4a:4c:99:39:bb: 72:30:51:8d:db:25:dc:5f:80:6b:72:93:57:21:80: 04:18:bc:ca:d4:52:8e:7a:b1:85:7c:a0:ea:b5:c0: 0b:a4:ad:fe:4a:cc:58:16:67:48:96:1a:bb:5c:df: aa:4a:46:86:87:f4:b8:3f:2b:2e:9e:f2:44:42:56: 4d:b7:00:6d:15:bd:5c:e9:ac:20:a2:c3:91:1e:01: e0:03:db:e0:ef:25:81:87:fc:04:6f:a7:b6:61:d9: 80:65:43:85:6b:40:05:97:54:59:c8:de:d9:f9:62: fd:c6:e9:58:cc:8d:a9:c8:6e:24:67:4d:68:77:96: ec:b9:97:fb:e8:c2:ac:1d:9b:23:f2:f3:a6:5f:cd: fa:01:af:b4:93:72:ed:a1:8b:f2:49:eb:46:5f:83: a1:2e:fe:4f:e7:80:aa:1a:5d:5e:d8:4d:a9:2b:3c: 50:13:20:b6:66:89:67:ba:78:bf:78:fd:0b:de:ca: bb:1e:6a:4d:e2:42:cd:32:76:07:5c:59:ef:94:48: 34:f4:88:b2:6d:c5:50:d3:25:2a:7f:a3:ad:86:44: f6:1c:f9:cd:e7:44:27:25:71:ef:67:1a:ab:96:ad: f7:0f:14:0b:d4:32:94:91:de:be:93:6f:6a:3d:d3: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:98:1C:9C:5B:C4:7A:73:ED:99:93:32:4E:BC:76:A7:9D:FF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/cff835c3-6259-391d-ae9d-7a3055ee651d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10/e80eeaf9-e2f0-4475-b796-e556ca230e10.crl X509v3 Authority Key Identifier: keyid:4D:D0:5D:00:5A:55:A0:86:14:F6:AD:73:1B:D0:54:C0:72:B5:F6:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e80eeaf9-e2f0-4475-b796-e556ca230e10.cer sbgp-ipAddrBlock: critical IPv4: 23.164.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5c:1b:39:0c:eb:fa:e7:8c:38:51:53:0e:3b:35:d2:4f:e5: b5:c3:02:fe:00:ef:29:26:76:31:36:9d:3b:4f:e2:75:94:24: 41:87:93:71:04:8b:61:24:e3:96:4f:f1:1b:8f:8d:bd:25:fc: cd:3d:3d:80:1f:c2:51:05:af:90:26:79:ee:b6:1f:26:97:87: ef:28:d2:51:73:36:c9:38:e0:ab:06:fd:52:a5:c1:66:9a:a1: fd:5e:60:b3:5f:62:fe:60:57:61:14:ce:d0:17:c1:5f:9d:70: 4d:df:34:cd:8a:e3:4f:07:23:e5:e3:2d:b6:e5:fd:8e:d3:07: af:b4:c0:86:41:2c:d9:27:d6:9e:24:15:de:47:59:f2:17:da: b1:7b:ee:d5:d4:98:12:1f:9d:0e:1c:8a:29:ab:c3:ce:9e:b9: dc:55:7a:e4:10:a5:dd:eb:4e:85:58:28:81:d2:ac:d3:68:e9: e1:75:7b:38:c5:4d:37:4d:db:f6:d6:12:01:05:3c:ee:0b:2b: 85:97:76:0c:5a:d0:81:4e:03:c6:a3:57:6b:25:49:ba:6a:20: 66:ba:b9:4a:93:ef:a3:b7:6e:97:d6:86:71:93:99:3c:5a:3c: 96:80:c7:cb:d0:ca:25:4a:37:72:85:00:6d:e3:f7:4f:dd:61: 91:86:ce:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDcRJ1Ft+xrBTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgwZWVhZjktZTJmMC00NDc1LWI3OTYtZTU1NmNhMjMw ZTEwMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODhhMGY4MjYtZjk2ZS00OGMzLWI5M2YtMTUzOTFiMGQyZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyZUk6fZ2lJBSkyZObtyMFGN2yXcX4BrcpNX IYAEGLzK1FKOerGFfKDqtcALpK3+SsxYFmdIlhq7XN+qSkaGh/S4PysunvJEQlZN twBtFb1c6awgosORHgHgA9vg7yWBh/wEb6e2YdmAZUOFa0AFl1RZyN7Z+WL9xulY zI2pyG4kZ01od5bsuZf76MKsHZsj8vOmX836Aa+0k3LtoYvySetGX4OhLv5P54Cq Gl1e2E2pKzxQEyC2Zolnuni/eP0L3sq7HmpN4kLNMnYHXFnvlEg09IiybcVQ0yUq f6OthkT2HPnN50QnJXHvZxqrlq33DxQL1DKUkd6+k29qPdMrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNNmBycW8R6c+2ZkzJOvHannf9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODBl ZWFmOS1lMmYwLTQ0NzUtYjc5Ni1lNTU2Y2EyMzBlMTAvY2ZmODM1YzMtNjI1OS0z OTFkLWFlOWQtN2EzMDU1ZWU2NTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTgwZWVhZjktZTJmMC00NDc1LWI3 OTYtZTU1NmNhMjMwZTEwL2U4MGVlYWY5LWUyZjAtNDQ3NS1iNzk2LWU1NTZjYTIz MGUxMC5jcmwwHwYDVR0jBBgwFoAUTdBdAFpVoIYU9q1zG9BUwHK19oYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODBlZWFmOS1lMmYwLTQ0NzUtYjc5Ni1lNTU2 Y2EyMzBlMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1cGzkM6/rnjDhRUw47NdJP5bXDAv4A7ykmdjE2nTtP4nWUJEGHk3EE i2Ek45ZP8RuPjb0l/M09PYAfwlEFr5Amee62HyaXh+8o0lFzNsk44KsG/VKlwWaa of1eYLNfYv5gV2EUztAXwV+dcE3fNM2K408HI+XjLbbl/Y7TB6+0wIZBLNkn1p4k Fd5HWfIX2rF77tXUmBIfnQ4ciimrw86eudxVeuQQpd3rToVYKIHSrNNo6eF1ezjF TTdN2/bWEgEFPO4LK4WXdgxa0IFOA8ajV2slSbpqIGa6uUqT76O3bpfWhnGTmTxa PJaAx8vQyiVKN3KFAG3j90/dYZGGzrM= -----END CERTIFICATE-----Generated at Sat Oct 25 05:10:19 2025 by rpki-client