$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/422fbbf3-eeb9-3b4a-baa6-2b568e1bd8d3.roa File: 422fbbf3-eeb9-3b4a-baa6-2b568e1bd8d3.roa (raw, json) Hash identifier: YDOHY1w74cmRpK28Bfk0OdlLi7iys+aT04TMCTjs1hQ= Subject key identifier: 54:A0:2A:3E:AD:38:D1:41:2C:88:DE:9A:EE:26:D3:5D:F8:44:12:CE Certificate issuer: /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Certificate serial: 010D0C9F4328584B28C6F11E589C4B5EA5A599C0 Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/422fbbf3-eeb9-3b4a-baa6-2b568e1bd8d3.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 401170 IP address blocks: 23.162.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f1:1e:58:9c:4b:5e:a5:a5:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=d748fc1c-4d10-4983-844a-49040d74b777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:4c:6f:7b:8e:d7:74:ea:a2:b5:9a:bf:de: 96:07:fd:76:9c:58:cc:d1:2e:ec:09:81:e4:3c:36: bd:24:0e:e8:85:9b:f4:40:e7:fa:4f:9b:64:b0:be: 30:8e:f0:5e:17:d5:1a:8b:5a:5e:26:7b:5e:c6:da: c5:6b:6e:af:18:06:26:de:2a:10:48:56:d0:be:d7: 96:db:25:b1:4b:a9:28:ff:dd:f9:1a:1a:58:23:b2: b0:11:33:a4:a2:a0:ed:65:bd:e2:80:11:cd:ed:d8: 66:77:f2:61:fd:0a:c1:f8:e1:b3:a9:de:04:3c:ee: 55:74:f8:79:ff:9a:1f:3b:96:c3:e3:94:77:19:c0: f4:71:9a:d6:4c:09:ed:e6:ab:9f:ab:d9:a5:eb:b2: ca:fa:4c:5b:90:bc:df:6e:bb:63:ab:31:73:d5:76: 5b:9e:2a:5d:e9:97:8b:28:d9:de:09:79:5e:0b:a6: 52:4e:bc:59:62:17:85:5e:f6:79:17:3a:5e:22:2f: c7:c4:ff:d5:bd:f1:c6:aa:3f:0e:c9:f0:cb:29:90: e7:9b:d0:35:aa:93:c2:c9:c2:54:a4:4d:72:20:64: a5:d9:50:13:ed:69:4a:75:de:39:c4:2c:99:39:57: 80:d8:53:ce:d3:00:f9:e8:95:dc:99:fc:de:df:0a: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:2A:3E:AD:38:D1:41:2C:88:DE:9A:EE:26:D3:5D:F8:44:12:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/422fbbf3-eeb9-3b4a-baa6-2b568e1bd8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl X509v3 Authority Key Identifier: keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer sbgp-ipAddrBlock: critical IPv4: 23.162.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:80:aa:c8:0e:d9:96:08:d1:bb:8f:82:99:29:f9:22:0b:61: a3:c7:1b:22:a4:80:67:f3:c0:f5:71:e4:32:6f:de:dd:8d:56: fa:0a:7d:1f:6a:ae:31:7a:0a:81:88:af:41:58:86:83:73:29: 2c:05:c9:2d:ed:cb:b8:3a:7d:c1:ea:ee:e1:59:82:f4:77:a3: 85:2e:71:96:86:2a:ff:0c:fd:5b:a6:75:16:1f:71:31:b1:9b: 1f:19:70:68:f9:32:a8:09:45:93:1f:e6:4f:b4:87:8a:46:e6: 8a:89:64:8f:48:55:a8:f1:1e:7f:cc:63:2b:90:28:f4:3f:7d: 1d:54:f6:c5:56:6f:80:35:69:e2:95:0f:73:58:d6:18:64:1e: 5c:c1:6c:af:9f:fe:26:2e:51:43:25:6e:69:13:e9:57:96:74: 66:f0:32:44:c0:88:9d:b7:f5:95:41:ab:62:ec:1d:d3:48:59: 5f:0c:21:f3:f6:ce:5e:10:fb:76:00:23:2f:62:dc:7c:ce:0f: 7a:4b:f7:9c:b9:f3:0f:00:c7:4c:4f:74:f3:8d:80:b1:cf:ad: db:ea:1b:b5:a4:34:fb:70:94:7e:8b:6c:87:b5:51:fd:6f:55: 10:94:df:1d:61:a3:12:dc:ab:30:38:3d:74:cc:d9:5e:80:19: dc:21:3e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvEeWJxLXqWlmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiZDFhYTAtMmI0ZS00MzQ4LThmNTgtOGE5NGU0YmYx OGJmMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDc0OGZjMWMtNGQxMC00OTgzLTg0NGEtNDkwNDBkNzRiNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo59Mb3uO13TqorWav96WB/12nFjM0S7sCYHk PDa9JA7ohZv0QOf6T5tksL4wjvBeF9Uai1peJntextrFa26vGAYm3ioQSFbQvteW 2yWxS6ko/935GhpYI7KwETOkoqDtZb3igBHN7dhmd/Jh/QrB+OGzqd4EPO5VdPh5 /5ofO5bD45R3GcD0cZrWTAnt5qufq9ml67LK+kxbkLzfbrtjqzFz1XZbnipd6ZeL KNneCXleC6ZSTrxZYheFXvZ5FzpeIi/HxP/VvfHGqj8OyfDLKZDnm9A1qpPCycJU pE1yIGSl2VAT7WlKdd45xCyZOVeA2FPO0wD56JXcmfze3woT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSgKj6tONFBLIjemu4m0134RBLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJk MWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0ZTRiZjE4YmYvNDIyZmJiZjMtZWViOS0z YjRhLWJhYTYtMmI1NjhlMWJkOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTFiZDFhYTAtMmI0ZS00MzQ4LThm NTgtOGE5NGU0YmYxOGJmLzExYmQxYWEwLTJiNGUtNDM0OC04ZjU4LThhOTRlNGJm MThiZi5jcmwwHwYDVR0jBBgwFoAUCOxAAPxxyUvyfMvqGuWuxFpLbQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJkMWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0 ZTRiZjE4YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiAqsgO2ZYI0buPgpkp+SILYaPHGyKkgGfzwPVx5DJv3t2NVvoKfR9q rjF6CoGIr0FYhoNzKSwFyS3ty7g6fcHq7uFZgvR3o4UucZaGKv8M/VumdRYfcTGx mx8ZcGj5MqgJRZMf5k+0h4pG5oqJZI9IVajxHn/MYyuQKPQ/fR1U9sVWb4A1aeKV D3NY1hhkHlzBbK+f/iYuUUMlbmkT6VeWdGbwMkTAiJ239ZVBq2LsHdNIWV8MIfP2 zl4Q+3YAIy9i3HzOD3pL95y58w8Ax0xPdPONgLHPrdvqG7WkNPtwlH6LbIe1Uf1v VRCU3x1hoxLcqzA4PXTM2V6AGdwhPvM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:27 2025 by rpki-client