$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa File: c3ce66bf-4cb7-36f4-a357-e0e778927525.roa (raw, json) Hash identifier: fDNmx4rCTH2hIa9W6t/CJWH1OnbxhtJaG1ZelXP1UCs= Subject key identifier: 71:5D:FB:A6:D9:A9:24:32:F1:2C:B2:5A:47:6B:7A:7E:86:47:0A:1B Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584BA0D250B5C31DDE6588022480 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 1239 IP address blocks: 23.239.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:b5:c3:1d:de:65:88:02:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=03f1623e-4d02-4aff-977b-5814ffe00c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:53:77:46:18:e1:0d:f5:74:c1:a5:0a:7c:a8: 0d:37:79:1f:27:63:09:fd:f7:f3:e5:ae:b5:a9:26: 46:3d:1c:3a:7f:91:e1:fe:f3:1a:a3:14:8c:e9:a7: 4f:6d:3d:a4:10:87:34:0d:6a:1d:21:4d:da:87:b6: 53:eb:2e:cd:a2:3d:bd:3d:e1:90:a4:2d:e2:75:bd: 2e:02:61:df:79:a8:09:9b:a1:eb:17:92:49:8e:a2: d2:72:e6:a2:bc:b0:9c:85:60:07:6f:00:ab:a5:3d: cf:eb:4c:97:6f:c8:98:88:16:02:ad:c2:64:b6:47: af:0e:53:5d:b3:c1:c2:2a:2e:f6:c8:88:ca:52:e9: bb:7d:7f:aa:51:44:43:e1:0d:7c:f4:90:db:89:09: 55:2d:84:d7:9e:80:7a:f3:ec:42:80:3f:8d:22:e9: e7:19:81:3d:0f:24:0e:92:18:09:f4:17:37:7b:46: 0b:85:fa:84:47:2c:37:ca:dc:ec:f8:3f:61:68:a2: 22:68:91:35:a4:b3:3f:2a:ed:59:b9:6a:88:e7:fa: a5:1e:f0:5a:64:f4:9b:0d:6a:0e:f9:f0:93:54:79: e1:b8:92:99:af:f9:81:04:b5:1c:0a:ff:7f:b6:07: 03:a8:22:26:a7:19:7f:96:87:15:ee:da:25:b5:20: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:FB:A6:D9:A9:24:32:F1:2C:B2:5A:47:6B:7A:7E:86:47:0A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.239.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:70:87:de:29:ea:3e:7c:1c:e2:28:6d:88:08:f1:95:dd:59: 49:7e:01:ec:0f:5c:9e:a6:73:03:f2:83:b1:b0:cf:1c:96:4a: 67:4e:d1:4c:e7:58:fc:92:67:ed:21:67:1b:11:9e:db:74:10: 21:68:69:1f:c5:eb:be:7a:0b:ee:1d:5e:97:78:ae:8d:ad:86: ee:86:62:7b:45:16:14:a9:6e:5c:ae:f3:9c:68:72:bd:1f:6f: 51:54:af:d0:f9:7f:73:e9:14:9b:ad:48:30:cc:c1:52:47:f3: 4a:7b:d3:a4:7f:2e:43:fc:e5:b2:9b:9f:f4:21:b2:a3:2f:9c: af:16:35:d0:ec:b5:d4:a9:8b:51:3f:49:44:c4:28:c0:41:1f: 2c:5b:40:2b:45:82:6b:c5:ec:5f:97:17:23:75:66:38:31:27: 22:a3:84:e4:4f:6d:c5:87:84:e8:e6:b4:8c:09:65:96:2a:07: 94:d1:52:b4:6d:85:8a:89:47:ea:80:bb:71:fc:00:47:75:79: 73:82:d6:c8:71:0f:b6:2a:25:8a:ed:c3:f7:a0:a2:39:90:f2: 4a:9a:21:cd:f9:eb:f7:ea:f9:66:d6:9a:a0:7d:2f:75:27:6a: bc:73:91:1e:12:63:c0:59:4e:8c:c3:e9:9c:87:24:18:c7:f1: 4e:7f:74:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lC1wx3eZYgCJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDNmMTYyM2UtNGQwMi00YWZmLTk3N2ItNTgxNGZmZTAwYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFN3RhjhDfV0waUKfKgNN3kfJ2MJ/ffz5a61 qSZGPRw6f5Hh/vMaoxSM6adPbT2kEIc0DWodIU3ah7ZT6y7Noj29PeGQpC3idb0u AmHfeagJm6HrF5JJjqLScuaivLCchWAHbwCrpT3P60yXb8iYiBYCrcJktkevDlNd s8HCKi72yIjKUum7fX+qUURD4Q189JDbiQlVLYTXnoB68+xCgD+NIunnGYE9DyQO khgJ9Bc3e0YLhfqERyw3ytzs+D9haKIiaJE1pLM/Ku1ZuWqI5/qlHvBaZPSbDWoO +fCTVHnhuJKZr/mBBLUcCv9/tgcDqCImpxl/locV7toltSDYowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFd+6bZqSQy8SyyWkdren6GRwobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvYzNjZTY2YmYtNGNiNy0z NmY0LWEzNTctZTBlNzc4OTI3NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF++gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5wh94p6j58HOIobYgI8ZXdWUl+AewPXJ6mcwPyg7GwzxyWSmdO0Uzn WPySZ+0hZxsRntt0ECFoaR/F6756C+4dXpd4ro2thu6GYntFFhSpblyu85xocr0f b1FUr9D5f3PpFJutSDDMwVJH80p706R/LkP85bKbn/QhsqMvnK8WNdDstdSpi1E/ SUTEKMBBHyxbQCtFgmvF7F+XFyN1ZjgxJyKjhORPbcWHhOjmtIwJZZYqB5TRUrRt hYqJR+qAu3H8AEd1eXOC1shxD7YqJYrtw/egojmQ8kqaIc356/fq+WbWmqB9L3Un arxzkR4SY8BZTozD6ZyHJBjH8U5/dOI= -----END CERTIFICATE-----Generated at Sat Nov 1 22:17:45 2025 by rpki-client