$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa File: a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa (raw, json) Hash identifier: vZ1JT3AIhgMmRxQ6lj2hg8J0AKqrsC++d4Iu2tIcXQE= Subject key identifier: BD:45:05:5E:B6:DB:8B:23:87:90:89:C3:65:62:DE:02:C0:6B:6D:4C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB88D1367277596E78C6EC700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20473 IP address blocks: 64.156.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:13:67:27:75:96:e7:8c:6e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=c47aac6d-c181-4923-b57c-f141f26acf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:46:ff:db:d1:cb:fc:87:cf:9f:ce:e0:93: e7:67:6a:15:6b:a1:29:db:66:eb:1a:b9:ae:a4:b4: ad:f1:bc:de:ff:e2:9b:22:05:ce:e6:81:23:fd:dd: 12:08:9a:57:0a:ba:69:b2:a3:3f:98:48:91:43:c7: 5e:6b:93:8c:27:3e:fe:1e:69:c8:69:71:4c:ae:3a: 51:23:8c:37:8f:31:21:6b:ee:f9:4a:5a:fd:9a:36: b9:f1:85:8a:06:26:af:45:65:a5:d3:d2:58:d8:cd: 3e:d5:72:d0:e6:f0:bb:ae:3b:3d:bb:33:be:c3:80: 9e:5a:ce:16:59:63:6a:8d:8b:bc:d7:fd:bf:93:ee: 10:99:15:34:42:68:77:ad:52:89:be:13:ad:b0:13: a2:86:6e:61:ab:c0:5c:4a:84:0a:75:5c:02:f4:72: da:75:e4:c9:de:03:7d:2e:d5:db:88:46:0f:66:0a: 3a:d4:cf:a7:05:c6:05:71:e3:9a:3f:13:59:8d:70: 7f:44:bc:3c:ac:2f:70:02:41:42:52:fe:94:bf:53: 03:4b:2e:e1:85:95:2b:28:04:59:ba:bc:bc:44:a6: 08:64:9c:1f:89:da:78:67:a2:1c:92:ab:2d:e2:e8: 5a:06:c2:74:b1:de:b1:fd:db:1a:42:7d:14:22:25: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:05:5E:B6:DB:8B:23:87:90:89:C3:65:62:DE:02:C0:6B:6D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.156.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ea:30:86:05:88:57:9b:51:b0:1c:c0:d5:c1:bf:08:e6:13: ce:ee:e5:9a:03:dd:bd:a4:99:fa:c6:06:04:0a:51:34:f5:85: a8:77:ea:f5:18:e6:5c:0e:3b:56:35:65:65:c6:d8:ea:b5:8f: 27:ff:63:12:f0:45:08:d6:33:bd:cc:20:d9:26:5d:74:75:b0: 84:eb:34:66:45:ed:38:a1:6c:5a:6c:9b:ed:d5:98:b9:5c:5c: bd:9f:78:ca:5c:bb:0e:08:9f:2e:ef:d7:fa:65:2c:1f:3e:24: 68:7c:5c:ad:78:7f:06:4f:c6:e4:4b:12:0c:4b:43:9f:ec:35: ef:2c:67:39:ab:e5:87:f7:9f:e4:8f:6e:0d:9f:c6:d3:df:76: a1:57:ce:41:e8:16:81:bf:88:d6:6b:df:03:83:15:71:be:59: f5:d4:41:34:f9:e9:49:31:58:50:95:76:48:c3:d1:99:3e:fc: 2a:47:a0:d1:d7:22:5f:91:f9:b2:6c:8e:1f:2f:61:d9:32:25: 4f:d3:ca:7b:a8:d3:6e:7d:ef:7b:7d:5d:a5:c4:8d:9a:70:b5: 9a:f9:e9:56:8c:61:1b:e4:33:13:4c:99:bc:c1:5c:28:91:d0: 17:19:68:2b:bd:df:05:39:88:f2:ab:57:97:af:da:23:69:9e: 79:7a:aa:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRNnJ3WW54xuxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzQ3YWFjNmQtYzE4MS00OTIzLWI1N2MtZjE0MWYyNmFjZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf1G/9vRy/yHz5/O4JPnZ2oVa6Ep22brGrmu pLSt8bze/+KbIgXO5oEj/d0SCJpXCrppsqM/mEiRQ8dea5OMJz7+HmnIaXFMrjpR I4w3jzEha+75Slr9mja58YWKBiavRWWl09JY2M0+1XLQ5vC7rjs9uzO+w4CeWs4W WWNqjYu81/2/k+4QmRU0Qmh3rVKJvhOtsBOihm5hq8BcSoQKdVwC9HLadeTJ3gN9 LtXbiEYPZgo61M+nBcYFceOaPxNZjXB/RLw8rC9wAkFCUv6Uv1MDSy7hhZUrKARZ ury8RKYIZJwfidp4Z6Ickqst4uhaBsJ0sd6x/dsaQn0UIiXqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1FBV6224sjh5CJw2Vi3gLAa21MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTJhZjdjODEtYWE4Mi0z YzE1LWE3OGYtZDY5NDUzYWU2MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDqMIYFiFebUbAcwNXBvwjmE87u5ZoD3b2kmfrGBgQKUTT1hah36vUY 5lwOO1Y1ZWXG2Oq1jyf/YxLwRQjWM73MINkmXXR1sITrNGZF7TihbFpsm+3VmLlc XL2feMpcuw4Iny7v1/plLB8+JGh8XK14fwZPxuRLEgxLQ5/sNe8sZzmr5Yf3n+SP bg2fxtPfdqFXzkHoFoG/iNZr3wODFXG+WfXUQTT56UkxWFCVdkjD0Zk+/CpHoNHX Il+R+bJsjh8vYdkyJU/Tynuo025973t9XaXEjZpwtZr56VaMYRvkMxNMmbzBXCiR 0BcZaCu93wU5iPKrV5ev2iNpnnl6quw= -----END CERTIFICATE-----Generated at Tue Nov 4 18:31:45 2025 by rpki-client