$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa File: af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa (raw, json) Hash identifier: M+S7gumVTWHShRYAIg7CPASQ69wwZsm9qycn7+GJANo= Subject key identifier: 9D:43:13:47:2D:30:2A:7D:4D:A1:63:AF:DC:04:46:94:38:A6:E9:1A Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584B9B3CE290B3915E9AD5BD9E00 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 23316 IP address blocks: 23.227.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e2:90:b3:91:5e:9a:d5:bd:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=cd2f27a2-283b-4d85-bc5e-a9d522a62548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:21:e8:5b:a5:7d:c5:fc:05:36:ed:1d:6b: ca:e7:53:f7:70:5b:26:f5:b4:73:bd:20:ac:8e:58: b8:f0:99:09:77:80:70:bc:ff:f0:bd:dc:a1:96:a1: ed:9c:38:1a:bc:01:dd:50:0a:8e:a5:75:df:9e:96: c1:2f:fa:ed:e5:cc:70:c5:ea:76:62:83:a7:7f:1e: 3d:cc:50:2c:40:52:ad:cd:ab:3c:1c:f3:f9:db:a7: 44:85:30:1c:97:50:5d:82:58:ee:e9:2d:84:d9:01: a0:3b:55:f4:58:36:42:c0:46:d4:e2:ec:ed:0e:4f: d3:09:e7:fe:19:7f:6b:ef:37:52:23:f0:8d:55:e1: 62:91:40:1f:f8:50:20:36:73:b6:e6:a1:cc:08:a0: 6e:fa:4e:99:3b:77:c1:6b:0f:62:92:31:23:ed:7a: 2a:a0:ff:01:db:3d:b5:05:3f:83:95:9c:2c:fa:46: 1c:d7:77:50:be:09:18:98:67:bb:0d:ab:c6:28:f3: 02:a3:48:93:99:b3:ad:1c:94:d6:cb:6c:ef:31:0a: 03:7f:d0:b8:f1:40:5b:71:c7:2b:78:9c:3f:72:3b: 23:b6:ba:06:25:0e:e3:95:6f:8e:16:a9:61:7b:80: a4:b9:c1:d8:ee:eb:15:f8:01:2b:0a:cb:06:e2:89: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:13:47:2D:30:2A:7D:4D:A1:63:AF:DC:04:46:94:38:A6:E9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/af430e62-6e79-35bf-be60-5d6fdfd7fca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:45:74:27:93:2f:8b:bc:dd:27:7a:3d:9f:79:e0:a0:02:26: cf:33:a6:de:1c:6a:44:8a:b1:77:dc:d5:86:04:96:a6:1c:a6: e9:89:ae:30:79:e7:90:9b:5a:5f:27:2e:4a:48:a3:e7:93:e4: 52:77:18:9f:09:0b:71:61:4d:cb:c8:c1:fe:1d:a3:61:ec:16: 3c:5a:c1:b7:94:5c:20:10:d6:0a:18:f3:21:36:fd:41:24:f0: 89:41:cf:2f:cd:cc:e9:c4:c1:96:24:3d:c6:3f:0f:b1:f7:15: d5:c2:0a:ba:06:7c:5a:f2:b0:e8:c0:d4:1b:ec:87:24:19:3c: f6:b9:70:fd:77:2f:c0:35:da:4c:56:97:90:81:83:c1:a4:dd: 6b:03:9e:13:d8:2f:31:2d:18:30:82:ad:51:f1:52:21:f1:1f: 38:b5:8f:0a:e0:ee:a6:2d:56:55:35:4f:c9:d4:97:a2:78:be: 4b:bb:ec:a8:5b:f7:87:0a:53:a1:9e:2e:39:51:ea:81:1b:04: c2:9f:15:72:21:1e:00:d8:b1:48:14:ba:2c:a7:95:8f:76:a2: 6f:82:55:f5:88:68:02:39:6f:99:33:a6:c2:0c:57:b1:39:36: d6:f1:87:3c:c1:3f:ab:6f:28:13:75:0c:d5:6f:66:4e:46:38: ea:61:17:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOKQs5FemtW9ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Y2QyZjI3YTItMjgzYi00ZDg1LWJjNWUtYTlkNTIyYTYyNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp8h6FulfcX8BTbtHWvK51P3cFsm9bRzvSCs jli48JkJd4BwvP/wvdyhlqHtnDgavAHdUAqOpXXfnpbBL/rt5cxwxep2YoOnfx49 zFAsQFKtzas8HPP526dEhTAcl1Bdglju6S2E2QGgO1X0WDZCwEbU4uztDk/TCef+ GX9r7zdSI/CNVeFikUAf+FAgNnO25qHMCKBu+k6ZO3fBaw9ikjEj7XoqoP8B2z21 BT+DlZws+kYc13dQvgkYmGe7DavGKPMCo0iTmbOtHJTWy2zvMQoDf9C48UBbcccr eJw/cjsjtroGJQ7jlW+OFqlhe4CkucHY7usV+AErCssG4om5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1DE0ctMCp9TaFjr9wERpQ4pukaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvYWY0MzBlNjItNmU3OS0z NWJmLWJlNjAtNWQ2ZmRmZDdmY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxFdCeTL4u83Sd6PZ954KACJs8zpt4cakSKsXfc1YYElqYcpumJrjB5 55CbWl8nLkpIo+eT5FJ3GJ8JC3FhTcvIwf4do2HsFjxawbeUXCAQ1goY8yE2/UEk 8IlBzy/NzOnEwZYkPcY/D7H3FdXCCroGfFrysOjA1BvshyQZPPa5cP13L8A12kxW l5CBg8Gk3WsDnhPYLzEtGDCCrVHxUiHxHzi1jwrg7qYtVlU1T8nUl6J4vku77Khb 94cKU6GeLjlR6oEbBMKfFXIhHgDYsUgUuiynlY92om+CVfWIaAI5b5kzpsIMV7E5 NtbxhzzBP6tvKBN1DNVvZk5GOOphF04= -----END CERTIFICATE-----Generated at Wed Oct 29 11:08:48 2025 by rpki-client