$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa File: 3617a1fa-a777-38fd-af3c-3691004a3020.roa (raw, json) Hash identifier: 3FoQWspDMN14W86dV9SrAB5DY/1iQC1kkDpXzaXQA4g= Subject key identifier: 48:C8:5E:BF:1F:41:97:BE:7C:D5:4E:17:2D:A5:FD:2C:A2:D0:AB:9E Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584B99447027A66E50E157F9C760 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa Signing time: Tue 21 Oct 2025 20:04:16 +0000 ROA not before: Tue 21 Oct 2025 20:04:16 +0000 ROA not after: Mon 19 Jan 2026 21:04:16 +0000 asID: 62349 IP address blocks: 23.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:44:70:27:a6:6e:50:e1:57:f9:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 21 20:04:16 2025 GMT Not After : Jan 19 21:04:16 2026 GMT Subject: CN=9fdc911c-ae2f-4582-8cad-5772e8115a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:f4:21:bb:1f:fb:c2:70:23:7f:1a:e5:2e: 06:6c:81:99:9b:04:dd:8e:0a:b0:d9:81:64:34:2c: 0a:b5:0d:97:ab:1c:81:b7:c6:64:1a:64:61:46:d0: 8e:d5:33:c5:2f:3c:81:44:91:fc:a6:a3:25:e6:15: e8:88:cd:60:c8:ed:60:ce:24:38:aa:0e:18:28:51: e5:95:d8:bc:cb:2c:77:b6:08:c5:5b:ca:3d:fe:7e: 07:19:4e:2d:1f:ba:f6:35:95:1a:53:20:b5:b4:88: d7:19:c3:a8:81:0e:2e:a1:f2:13:2f:8b:83:2b:c2: 5b:d4:94:13:b1:d2:a5:14:74:c7:d1:57:36:71:0e: 1a:79:3d:c7:9f:94:9f:14:1b:22:d0:b1:73:31:bf: 78:ba:9c:d1:ab:73:e0:b3:27:ed:d9:60:e1:df:bc: cc:d1:d0:28:27:5a:3d:01:f8:d1:cc:72:aa:32:8e: c5:65:c5:59:96:31:ea:bf:d2:3d:dd:a3:e5:70:1a: 30:02:50:73:14:81:42:45:7b:77:d5:a0:b7:10:78: 95:1a:4a:9d:24:7a:0c:46:4a:15:2f:3a:d0:12:74: 30:13:83:db:c1:09:0a:af:04:08:f4:0d:28:1d:6f: 2a:4c:6f:29:b6:e3:66:b1:d5:8c:7d:8a:a8:ac:09: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:5E:BF:1F:41:97:BE:7C:D5:4E:17:2D:A5:FD:2C:A2:D0:AB:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:02:37:49:d2:57:96:0b:5e:bc:93:f8:be:77:62:2c:3b:3f: 47:eb:5f:fc:c9:8d:87:c3:4a:7c:c9:f5:7d:a4:d6:df:de:79: 19:51:6c:af:e5:6d:ec:d6:41:fb:74:39:bc:f1:2c:02:b3:64: cc:d5:92:22:a4:83:7a:eb:9f:50:f8:2e:43:f5:59:11:bf:e1: f1:7f:de:f6:a8:6d:1d:eb:2f:77:2d:4a:1c:d3:61:96:22:1e: 69:04:83:a4:3e:ac:dd:a8:5b:eb:53:b0:fc:97:05:8b:6f:8d: f7:42:e8:7a:cc:9c:f6:d5:8c:43:00:33:de:2b:24:4f:ff:4c: 26:f4:fb:64:bc:25:9b:74:95:17:d5:cd:96:b6:d7:24:41:33: b2:57:7f:16:29:6c:77:c5:1f:99:45:78:d7:6a:79:5e:bd:c9: 33:37:e7:2d:88:bb:b8:c8:9c:93:34:85:f1:2a:57:12:cc:5b: 7f:59:9f:cf:b8:6d:8f:34:01:30:72:b1:43:b1:9d:5b:df:ef: 75:d0:aa:54:bd:e1:20:02:3b:09:6a:7b:a4:bb:76:93:0c:28: c8:00:6e:fc:57:49:fd:e6:6f:1d:47:e7:70:c6:58:9c:d8:74: 79:92:46:1e:6c:c9:08:e9:2a:21:b6:e6:bf:e6:ab:29:8d:90: 8d:a9:2e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZRHAnpm5Q4Vf5x2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MTAyMTIwMDQxNloXDTI2MDExOTIxMDQxNlowLzEtMCsGA1UEAxMk OWZkYzkxMWMtYWUyZi00NTgyLThjYWQtNTc3MmU4MTE1YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihn0Ibsf+8JwI38a5S4GbIGZmwTdjgqw2YFk NCwKtQ2XqxyBt8ZkGmRhRtCO1TPFLzyBRJH8pqMl5hXoiM1gyO1gziQ4qg4YKFHl ldi8yyx3tgjFW8o9/n4HGU4tH7r2NZUaUyC1tIjXGcOogQ4uofITL4uDK8Jb1JQT sdKlFHTH0Vc2cQ4aeT3Hn5SfFBsi0LFzMb94upzRq3Pgsyft2WDh37zM0dAoJ1o9 AfjRzHKqMo7FZcVZljHqv9I93aPlcBowAlBzFIFCRXt31aC3EHiVGkqdJHoMRkoV LzrQEnQwE4PbwQkKrwQI9A0oHW8qTG8ptuNmsdWMfYqorAnX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjIXr8fQZe+fNVOFy2l/Syi0KueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMzYxN2ExZmEtYTc3Ny0z OGZkLWFmM2MtMzY5MTAwNGEzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8CN0nSV5YLXryT+L53Yiw7P0frX/zJjYfDSnzJ9X2k1t/eeRlRbK/l bezWQft0ObzxLAKzZMzVkiKkg3rrn1D4LkP1WRG/4fF/3vaobR3rL3ctShzTYZYi HmkEg6Q+rN2oW+tTsPyXBYtvjfdC6HrMnPbVjEMAM94rJE//TCb0+2S8JZt0lRfV zZa21yRBM7JXfxYpbHfFH5lFeNdqeV69yTM35y2Iu7jInJM0hfEqVxLMW39Zn8+4 bY80ATBysUOxnVvf73XQqlS94SACOwlqe6S7dpMMKMgAbvxXSf3mbx1H53DGWJzY dHmSRh5syQjpKiG25r/mqymNkI2pLls= -----END CERTIFICATE-----Generated at Tue Oct 28 17:04:48 2025 by rpki-client