$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa File: a3b8b1ae-7662-39b8-9a83-169fa490def1.roa (raw, json) Hash identifier: iS/9YoJmNAeuKAqx+IpKQVc5xkgpKBcVR7T7S5VYeVA= Subject key identifier: C4:FD:6C:BC:12:5F:20:57:CB:48:AF:1C:0B:41:27:77:7F:E4:89:3A Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584B25FC3AFEB580B53F8FD17A00 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 203888 IP address blocks: 23.167.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3a:fe:b5:80:b5:3f:8f:d1:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=68a912d2-798f-43cb-ba92-c195f56ac011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:b0:fd:35:c6:bb:c1:35:91:22:6e:ec:77: 68:9e:8f:a8:63:66:96:d9:d4:69:34:38:ca:0f:26: 7b:c9:bd:94:43:bc:d3:3e:5e:5f:a3:df:6c:82:f4: 9f:7f:9b:02:c4:4a:af:5f:32:7a:cd:95:2e:13:06: 9d:22:37:2c:fd:0e:90:c8:cf:5a:c1:50:62:d6:5b: 63:8f:84:83:a7:9d:b9:dc:b5:7e:b4:f2:29:a5:6d: 83:cb:44:01:07:9c:30:a7:a7:2f:47:ec:28:99:73: c6:dd:b4:32:c9:8f:65:15:ac:97:0d:b1:a1:cb:ad: 47:f7:50:04:79:b1:73:db:97:ca:a2:e7:8b:a2:70: 8d:bf:da:3b:a7:c4:86:8b:73:70:3a:92:72:c8:aa: ae:bc:8f:0c:36:7a:3d:68:8b:df:19:db:15:f8:b3: 7f:59:96:e0:3a:5f:3f:ab:a6:cb:8b:8c:4f:1a:5c: 1b:a7:79:ff:50:0d:34:8b:ea:d4:f9:6f:32:72:f8: 0e:2d:4a:fb:90:7a:74:37:bd:f8:0b:37:06:db:d8: 0e:2b:c4:3f:72:2b:92:61:8d:34:0f:50:77:12:fd: 3e:bf:26:4a:ed:72:22:5f:0b:ff:f4:33:73:f2:bd: e9:cc:b0:92:a0:3e:45:bf:49:9a:f2:0f:84:9c:4c: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FD:6C:BC:12:5F:20:57:CB:48:AF:1C:0B:41:27:77:7F:E4:89:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a3b8b1ae-7662-39b8-9a83-169fa490def1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv4: 23.167.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bb:ff:b8:a9:08:21:f8:e8:ec:f4:17:a6:09:82:63:e9:5a: 29:d2:73:89:3b:02:46:4a:78:dd:fc:82:cc:b4:33:eb:c1:db: b8:6d:93:a5:4a:cf:3a:31:9d:4d:9d:8f:6d:8d:17:88:9c:b0: 74:5b:a1:28:9d:48:9d:da:70:af:20:44:5b:f0:d4:e5:3c:de: c5:7d:45:71:be:9a:f5:35:64:c3:61:e2:95:73:78:07:26:31: 83:1b:38:6a:b7:45:70:ad:1f:4f:8e:08:69:91:0d:59:2c:62: 18:03:30:5a:73:32:02:49:a0:e2:c4:79:36:28:95:85:64:91: 70:0d:7f:39:27:a7:52:f9:63:bd:57:7f:d5:3d:ca:9d:38:e9: 8e:b7:75:16:fc:92:70:e1:e8:72:18:65:65:d5:76:8d:65:e8: f9:ee:a7:45:e0:ad:42:ec:bb:40:ca:0a:69:26:db:6b:0c:aa: 4a:58:21:4f:5f:c2:2c:d2:c0:34:52:bf:ef:92:2f:68:78:03: be:03:53:8a:e1:f2:f7:a4:4d:f3:11:d5:a4:3f:9d:de:c9:d8: 1c:5f:98:71:2d:be:e3:cb:f5:ad:46:4b:15:fd:a8:33:40:07: 74:d9:9f:9b:13:3e:9f:8a:90:78:3c:e2:92:c8:a2:31:19:0c: 72:e3:b8:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/Dr+tYC1P4/RegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NjhhOTEyZDItNzk4Zi00M2NiLWJhOTItYzE5NWY1NmFjMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEOw/TXGu8E1kSJu7Hdono+oY2aW2dRpNDjK DyZ7yb2UQ7zTPl5fo99sgvSff5sCxEqvXzJ6zZUuEwadIjcs/Q6QyM9awVBi1ltj j4SDp5253LV+tPIppW2Dy0QBB5wwp6cvR+womXPG3bQyyY9lFayXDbGhy61H91AE ebFz25fKoueLonCNv9o7p8SGi3NwOpJyyKquvI8MNno9aIvfGdsV+LN/WZbgOl8/ q6bLi4xPGlwbp3n/UA00i+rU+W8ycvgOLUr7kHp0N734CzcG29gOK8Q/ciuSYY00 D1B3Ev0+vyZK7XIiXwv/9DNz8r3pzLCSoD5Fv0ma8g+EnExyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT9bLwSXyBXy0ivHAtBJ3d/5Ik6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvYTNiOGIxYWUtNzY2Mi0z OWI4LTlhODMtMTY5ZmE0OTBkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6cIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS7/7ipCCH46Oz0F6YJgmPpWinSc4k7AkZKeN38gsy0M+vB27htk6VK zzoxnU2dj22NF4icsHRboSidSJ3acK8gRFvw1OU83sV9RXG+mvU1ZMNh4pVzeAcm MYMbOGq3RXCtH0+OCGmRDVksYhgDMFpzMgJJoOLEeTYolYVkkXANfzknp1L5Y71X f9U9yp046Y63dRb8knDh6HIYZWXVdo1l6Pnup0XgrULsu0DKCmkm22sMqkpYIU9f wizSwDRSv++SL2h4A74DU4rh8vekTfMR1aQ/nd7J2BxfmHEtvuPL9a1GSxX9qDNA B3TZn5sTPp+KkHg84pLIojEZDHLjuB4= -----END CERTIFICATE-----Generated at Sat Sep 13 19:42:00 2025 by rpki-client