$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa File: c06ce70a-ebe7-3f48-a347-72b39082bba8.roa (raw, json) Hash identifier: l9iKqoBnGJl6XXQPw+nmkSxPscEqISIOFyBkabL6y3s= Subject key identifier: 23:25:D0:B4:4D:8F:76:50:FE:C3:3E:62:A0:3F:49:A7:87:F2:B4:A1 Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Certificate serial: 010D0C9F4328584BA9EC6DE69C60E46516BBF840 Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa Signing time: Mon 27 Oct 2025 19:15:41 +0000 ROA not before: Mon 27 Oct 2025 19:15:41 +0000 ROA not after: Sun 25 Jan 2026 20:15:41 +0000 asID: 46687 IP address blocks: 23.226.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:ec:6d:e6:9c:60:e4:65:16:bb:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Validity Not Before: Oct 27 19:15:41 2025 GMT Not After : Jan 25 20:15:41 2026 GMT Subject: CN=9c417884-3cf6-4c7c-a30a-84af09c3bf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:0d:26:16:56:1f:b3:81:59:85:c0:01:e2: fb:cf:6e:57:79:46:54:f7:11:64:b1:24:72:d0:66: 62:f1:e5:3c:fc:4e:8e:41:8d:52:09:a7:6f:54:b4: de:04:56:b2:fa:67:3a:4a:cc:8d:5a:f6:b7:20:67: bc:fd:a7:b2:4d:e2:bc:e7:8b:1b:d9:f8:51:40:47: 65:1c:eb:a5:f8:3b:a2:4b:1c:17:93:50:37:99:55: c7:29:3d:f8:f6:01:fc:da:16:7f:a9:9b:e1:be:1f: 3b:bb:6a:f2:1f:08:06:cf:fa:cb:2a:3a:f8:a2:90: 6c:77:32:d1:34:5e:08:b2:a3:81:8a:a6:90:73:e9: 30:7b:6e:b4:e5:ef:32:fc:a0:20:22:73:84:91:eb: 70:21:64:73:ef:48:28:b5:46:4c:eb:27:f4:24:03: 31:1d:6f:21:33:61:a2:fc:4c:73:b0:2b:ae:a2:4f: e2:85:24:17:59:e1:d6:f5:4a:bb:6b:d9:9d:f7:c3: c3:4d:53:73:08:83:10:8b:f2:14:fd:d3:f6:dd:ae: 8f:fa:81:82:c4:54:84:5d:40:b8:56:6b:75:03:19: 32:f7:83:ab:d5:b0:25:7d:d4:86:b1:8e:f3:d0:ae: e8:5c:fb:16:0c:e6:ae:b8:80:c2:63:52:56:eb:71: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:D0:B4:4D:8F:76:50:FE:C3:3E:62:A0:3F:49:A7:87:F2:B4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/c06ce70a-ebe7-3f48-a347-72b39082bba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl X509v3 Authority Key Identifier: keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer sbgp-ipAddrBlock: critical IPv4: 23.226.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:23:e1:09:2f:b1:28:f1:3d:aa:2e:b7:48:78:57:d7:a4:a6: 1d:a4:fb:bb:a2:a8:93:be:0e:d9:80:e7:b4:35:a7:bf:90:61: c4:ae:b4:e6:10:66:d1:45:c1:8c:f8:ba:1a:34:6e:d4:59:0a: ff:39:e3:41:ec:0e:e0:12:a3:c4:8f:bb:33:31:d9:59:39:d6: a0:2f:30:bf:98:01:b5:0f:55:10:63:ae:44:a3:38:4b:17:de: e7:a5:46:db:8b:37:8c:fb:bd:02:1a:3c:1a:30:50:cf:43:22: 43:e1:8a:f4:d4:e3:5c:36:0d:e5:43:60:dc:ea:6c:84:c8:90: 1d:d8:22:79:02:c5:29:6f:12:c9:1c:98:95:bf:f6:a8:ba:40: f3:6a:26:ff:0e:b6:b8:f5:10:f9:f8:0d:7d:9e:cd:a0:cc:8c: 26:da:f7:af:91:89:12:a8:cb:d6:6f:93:a1:01:96:b8:c9:36: b8:69:ae:5b:1d:07:5d:ed:13:c8:1d:fa:8e:22:be:0b:c5:73: c9:f8:d2:ca:54:3f:6a:62:5f:8b:62:0f:3e:20:50:3c:27:02: ea:15:7a:96:fc:8e:1a:6d:44:ff:7d:0f:0e:7a:a0:69:ca:83: cc:09:80:2d:c5:56:3c:b4:c0:19:90:b9:b7:10:b1:60:b2:0b: 97:a1:0b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEup7G3mnGDkZRa7+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm YTg0MB4XDTI1MTAyNzE5MTU0MVoXDTI2MDEyNTIwMTU0MVowLzEtMCsGA1UEAxMk OWM0MTc4ODQtM2NmNi00YzdjLWEzMGEtODRhZjA5YzNiZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fkNJhZWH7OBWYXAAeL7z25XeUZU9xFksSRy 0GZi8eU8/E6OQY1SCadvVLTeBFay+mc6SsyNWva3IGe8/aeyTeK854sb2fhRQEdl HOul+DuiSxwXk1A3mVXHKT349gH82hZ/qZvhvh87u2ryHwgGz/rLKjr4opBsdzLR NF4IsqOBiqaQc+kwe2605e8y/KAgInOEketwIWRz70gotUZM6yf0JAMxHW8hM2Gi /ExzsCuuok/ihSQXWeHW9Uq7a9md98PDTVNzCIMQi/IU/dP23a6P+oGCxFSEXUC4 Vmt1Axky94Or1bAlfdSGsY7z0K7oXPsWDOauuIDCY1JW63Fs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMl0LRNj3ZQ/sM+YqA/SaeH8rShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvYzA2Y2U3MGEtZWJlNy0z ZjQ4LWEzNDctNzJiMzkwODJiYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi NDI1MGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsj4QkvsSjxPaout0h4V9ekph2k+7uiqJO+DtmA57Q1p7+QYcSutOYQ ZtFFwYz4uho0btRZCv8540HsDuASo8SPuzMx2Vk51qAvML+YAbUPVRBjrkSjOEsX 3uelRtuLN4z7vQIaPBowUM9DIkPhivTU41w2DeVDYNzqbITIkB3YInkCxSlvEskc mJW/9qi6QPNqJv8Otrj1EPn4DX2ezaDMjCba96+RiRKoy9Zvk6EBlrjJNrhprlsd B13tE8gd+o4ivgvFc8n40spUP2piX4tiDz4gUDwnAuoVepb8jhptRP99Dw56oGnK g8wJgC3FVjy0wBmQubcQsWCyC5ehC7I= -----END CERTIFICATE-----Generated at Tue Nov 4 20:14:06 2025 by rpki-client