$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa File: 7ca41dda-e456-3247-b2ab-cfdb860809e0.roa (raw, json) Hash identifier: FJcMniyx5rhZuvLM5ZxfEY5Jc7wTaZtlFWQovOM5HAs= Subject key identifier: E2:DD:E8:B8:72:2D:E5:E0:2E:20:A4:C0:D3:35:DC:EF:A5:DE:B0:0B Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584BC29C1E0D0C0137D0579F5160 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa Signing time: Wed 05 Nov 2025 15:29:05 +0000 ROA not before: Wed 05 Nov 2025 15:29:05 +0000 ROA not after: Tue 03 Feb 2026 15:29:05 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:9c:1e:0d:0c:01:37:d0:57:9f:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Nov 5 15:29:05 2025 GMT Not After : Feb 3 15:29:05 2026 GMT Subject: CN=463e4df4-e3a1-43ae-8876-8a5a0b9a695e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:10:fd:01:f2:e4:c2:af:3b:35:9e:89:87: a8:66:7f:01:08:32:34:d3:6c:48:de:3e:ba:3d:b7: 43:d0:26:d2:07:c8:25:fe:5b:5a:d4:41:a7:e4:44: c3:ad:dc:a6:7e:fc:42:b5:29:f9:68:b0:6c:35:3b: 25:76:54:13:71:fa:7b:47:22:f9:04:20:89:f3:52: 8a:be:27:1f:44:5e:99:8d:3f:9d:2e:95:21:20:61: 3d:d7:de:39:56:5d:c3:c0:d5:be:12:5e:63:83:d1: c8:83:59:92:64:e2:a1:3c:a5:6d:6a:ac:1f:ec:7e: 1c:54:af:c5:c4:63:a5:e7:ae:ff:66:a4:ce:d8:b1: da:e8:13:a2:5b:82:36:d3:e5:cf:f9:1e:90:c2:92: 2d:38:5f:2b:aa:10:2f:0b:6d:05:94:38:39:73:85: f6:42:62:4a:04:86:d6:f2:4c:f5:e8:bf:86:6f:48: ca:fa:31:6a:29:20:f9:64:ca:34:8a:9f:8d:aa:c3: 20:d3:df:d1:1c:80:7e:e9:98:f1:66:70:14:c5:1a: 24:3d:42:e7:72:ff:2b:19:90:8c:e0:b2:ed:2c:b0: b1:6e:d2:e4:44:e2:1a:6e:ac:57:c1:a7:3f:42:35: cf:c0:c3:bf:6e:04:0b:16:31:96:f3:26:54:ce:b1: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:E8:B8:72:2D:E5:E0:2E:20:A4:C0:D3:35:DC:EF:A5:DE:B0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:02:cc:a1:73:ed:8d:18:89:fd:34:ff:43:42:db:52:6c:07: b7:e2:74:80:94:d6:f9:9d:74:49:be:58:cd:1e:3b:59:02:35: c5:4c:8a:7f:25:0e:7b:04:19:21:30:61:b9:5a:c5:ab:c1:fd: c3:c4:22:71:d2:05:60:e5:0b:8a:be:c3:4e:41:8b:ed:7e:38: 20:78:bf:9c:ee:6b:4d:a2:e5:78:17:52:94:75:6d:94:c4:50: f0:95:59:b5:9e:f5:11:ef:79:df:f2:84:fd:f0:5e:f7:74:9d: c6:7a:2e:0c:a2:a8:f0:93:29:e3:a0:a5:63:7e:04:18:77:d4: 1c:58:15:76:e3:01:0b:d5:7e:4e:87:8a:fb:c1:9b:bb:40:98: f8:0e:a1:8c:b0:e4:32:d6:c7:6b:8c:1b:65:de:33:b6:8e:ea: d7:1e:3d:27:0b:bb:eb:1a:7f:7f:7e:92:11:fc:ac:6b:ad:a9: 55:e8:ac:d5:21:65:9b:25:9c:90:30:e0:69:88:49:72:92:86: 27:e0:b5:5d:98:d7:d4:27:2c:94:c2:d0:e0:c5:15:80:b2:75: f4:8d:6b:c8:87:46:62:12:c3:c7:a7:65:c0:2f:54:3e:1d:68: 23:1d:54:95:42:03:cb:49:0c:ea:5d:7b:ef:fc:75:57:0f:aa: 81:2e:87:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCnB4NDAE30FefUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MTEwNTE1MjkwNVoXDTI2MDIwMzE1MjkwNVowLzEtMCsGA1UEAxMk NDYzZTRkZjQtZTNhMS00M2FlLTg4NzYtOGE1YTBiOWE2OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglMQ/QHy5MKvOzWeiYeoZn8BCDI002xI3j66 PbdD0CbSB8gl/lta1EGn5ETDrdymfvxCtSn5aLBsNTsldlQTcfp7RyL5BCCJ81KK vicfRF6ZjT+dLpUhIGE91945Vl3DwNW+El5jg9HIg1mSZOKhPKVtaqwf7H4cVK/F xGOl567/ZqTO2LHa6BOiW4I20+XP+R6QwpItOF8rqhAvC20FlDg5c4X2QmJKBIbW 8kz16L+Gb0jK+jFqKSD5ZMo0ip+NqsMg09/RHIB+6ZjxZnAUxRokPULncv8rGZCM 4LLtLLCxbtLkROIabqxXwac/QjXPwMO/bgQLFjGW8yZUzrHw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLd6LhyLeXgLiCkwNM13O+l3rALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvN2NhNDFkZGEtZTQ1Ni0z MjQ3LWIyYWItY2ZkYjg2MDgwOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkCzKFz7Y0Yif00/0NC21JsB7fidICU1vmddEm+WM0eO1kCNcVMin8l DnsEGSEwYblaxavB/cPEInHSBWDlC4q+w05Bi+1+OCB4v5zua02i5XgXUpR1bZTE UPCVWbWe9RHved/yhP3wXvd0ncZ6LgyiqPCTKeOgpWN+BBh31BxYFXbjAQvVfk6H ivvBm7tAmPgOoYyw5DLWx2uMG2XeM7aO6tcePScLu+saf39+khH8rGutqVXorNUh ZZslnJAw4GmISXKShifgtV2Y19QnLJTC0ODFFYCydfSNa8iHRmISw8enZcAvVD4d aCMdVJVCA8tJDOpde+/8dVcPqoEuh7M= -----END CERTIFICATE-----Generated at Tue Nov 11 21:20:21 2025 by rpki-client