$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa File: 0ef2162e-9403-3c27-863e-e2a113212b22.roa (raw, json) Hash identifier: tWbpLyQWVA9mcqvF1UiNODTh2bqeWHx2reerfn9OLLs= Subject key identifier: FC:4D:D7:75:01:BF:9A:16:E5:02:56:0A:2F:B9:E8:DE:78:8E:B3:59 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB2F7A9B1D1DC421C92585F80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 18809 IP address blocks: 64.215.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:b1:d1:dc:42:1c:92:58:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=86bf1008-2b31-4eed-a8a3-33c20e3b6883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:81:68:c6:56:5e:9c:36:c2:13:97:45:b9: 6a:1e:f5:b2:f2:ce:00:a4:66:52:d8:01:bb:0c:f3: f6:22:1c:dc:0d:d4:c4:2c:be:73:e2:7e:2e:22:1e: 28:33:b9:85:72:87:27:b2:36:fd:aa:fd:61:85:50: 34:35:94:d7:d0:62:c3:37:66:da:79:2d:3d:c4:ca: 73:57:03:aa:2e:77:52:a1:5a:78:28:bb:fe:9f:cf: 63:2b:ad:4f:4c:3f:73:45:70:27:4c:55:47:f0:d9: 63:ed:87:69:9b:d8:e5:4d:d8:a8:22:c9:b3:fa:33: 9d:03:0e:e3:c5:bc:ef:a8:a7:a4:38:42:5f:6d:20: 9f:ae:7c:5b:46:03:42:f0:4c:7d:fc:dc:8f:4f:ca: a2:91:a3:32:53:5e:d3:e7:19:7a:91:0c:fe:2f:3e: 1a:4a:f9:11:40:ef:f8:21:3d:d4:4c:01:c9:1d:4d: b1:b5:3e:95:52:9c:e4:ff:cd:6a:5e:54:79:51:86: 1e:a9:49:c5:ac:eb:89:4d:91:96:37:30:ea:8c:27: 3c:44:87:37:ff:88:64:1e:d2:bb:b2:d6:9e:58:97: e7:0f:97:7f:7b:c7:63:8b:47:de:f6:b2:a3:cf:d7: fd:24:68:b7:b7:e4:ec:f3:02:53:20:7f:d8:47:f6: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4D:D7:75:01:BF:9A:16:E5:02:56:0A:2F:B9:E8:DE:78:8E:B3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.215.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:20:8a:bd:5a:52:90:0b:ad:e3:ed:ac:eb:0b:10:40:15:bf: 85:6e:7d:42:2b:47:b1:27:09:b8:3a:f0:c5:1b:8e:b4:39:f5: cd:e8:07:48:e5:ea:a2:ae:26:52:ee:ee:b9:a7:ed:a4:6c:3a: 81:86:db:be:90:12:01:3e:39:0f:24:2f:cc:35:60:23:ba:9d: c9:a4:97:84:40:c3:21:47:a4:d0:7d:fe:2a:64:fe:86:51:01: 88:14:10:34:7b:50:59:a7:dc:41:8e:b9:e0:b1:94:26:2c:4c: bd:9a:64:9d:29:93:02:e4:d3:d0:5a:8f:50:71:da:ff:9d:cd: c4:ef:77:13:df:98:fa:fe:39:3a:70:75:0d:c5:f8:96:d3:e6: 01:8b:c4:ed:2f:21:cd:e7:87:d3:2f:ad:ee:7d:cf:7c:6b:48: d8:c1:b1:07:0a:8d:0a:2f:40:55:4a:a9:7d:b6:dc:1c:d8:a8: 07:d4:44:5f:55:e5:ca:5d:d0:d1:c6:88:18:ae:d5:a9:28:dc: 9c:55:bb:d4:b8:2b:15:78:36:32:ac:8e:71:26:56:ca:8e:1f: a1:d7:8b:20:84:ee:da:f1:df:2d:37:ba:15:0d:ac:d1:f1:21: 63:69:b2:01:35:69:3a:0b:94:2f:cc:07:c4:94:33:40:56:f9: f8:bb:f7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96mx0dxCHJJYX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODZiZjEwMDgtMmIzMS00ZWVkLWE4YTMtMzNjMjBlM2I2ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFKBaMZWXpw2whOXRblqHvWy8s4ApGZS2AG7 DPP2IhzcDdTELL5z4n4uIh4oM7mFcocnsjb9qv1hhVA0NZTX0GLDN2baeS09xMpz VwOqLndSoVp4KLv+n89jK61PTD9zRXAnTFVH8Nlj7Ydpm9jlTdioIsmz+jOdAw7j xbzvqKekOEJfbSCfrnxbRgNC8Ex9/NyPT8qikaMyU17T5xl6kQz+Lz4aSvkRQO/4 IT3UTAHJHU2xtT6VUpzk/81qXlR5UYYeqUnFrOuJTZGWNzDqjCc8RIc3/4hkHtK7 staeWJfnD5d/e8dji0fe9rKjz9f9JGi3t+Ts8wJTIH/YR/ZlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxN13UBv5oW5QJWCi+56N54jrNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGVmMjE2MmUtOTQwMy0z YzI3LTg2M2UtZTJhMTEzMjEyYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4gir1aUpALrePtrOsLEEAVv4VufUIrR7EnCbg68MUbjrQ59c3oB0jl 6qKuJlLu7rmn7aRsOoGG276QEgE+OQ8kL8w1YCO6ncmkl4RAwyFHpNB9/ipk/oZR AYgUEDR7UFmn3EGOueCxlCYsTL2aZJ0pkwLk09Baj1Bx2v+dzcTvdxPfmPr+OTpw dQ3F+JbT5gGLxO0vIc3nh9Mvre59z3xrSNjBsQcKjQovQFVKqX223BzYqAfURF9V 5cpd0NHGiBiu1ako3JxVu9S4KxV4NjKsjnEmVsqOH6HXiyCE7trx3y03uhUNrNHx IWNpsgE1aToLlC/MB8SUM0BW+fi79xA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:18 2025 by rpki-client