$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa File: ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa (raw, json) Hash identifier: pCq0mavjWI/F4WBJqXyA3TNuVRB0dtFSk6ORAa+9CDE= Subject key identifier: CE:10:3B:D5:32:30:30:66:4D:A9:BD:D9:4C:EE:C1:44:C6:7D:78:02 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA39CF5968CAEEBE9FCA28180 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 40139 IP address blocks: 69.44.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f5:96:8c:ae:eb:e9:fc:a2:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f26be219-191f-47c4-9c70-6839e8d0af9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:0b:04:02:e0:71:00:90:0b:b9:87:bc:c7: 67:f8:74:3c:cc:1a:21:21:81:d8:e5:11:b5:13:a6: b4:00:dc:91:ea:c2:5b:72:80:c6:91:0c:70:af:cc: 57:27:00:02:a4:83:be:3a:b3:df:f2:01:17:b5:d3: 47:a2:2c:f6:eb:a1:d2:a4:34:ea:6c:fc:ba:5a:a0: e7:f0:ee:af:55:d6:60:2c:1a:90:c9:0e:20:b0:ea: 0c:a2:f3:73:3b:56:dc:95:af:25:4e:d7:f0:16:cf: 18:20:c9:c1:d6:2f:db:30:4b:52:5c:4a:dd:af:55: 05:27:1f:ed:7c:83:5c:e2:c2:80:48:f4:56:99:53: aa:5e:5d:49:f3:da:a7:d0:2e:36:3c:35:29:62:1b: 47:ec:81:18:19:cf:82:00:7f:73:95:a0:be:7a:43: 1f:07:f8:5f:ea:2a:47:ae:28:a7:69:72:a1:03:ab: 9e:d6:97:56:67:75:c6:58:50:b3:62:f9:7b:dc:f7: 32:c9:ac:d0:95:72:a8:12:21:4a:24:7b:1b:bf:5c: 2b:1b:65:66:c2:b5:59:af:02:ef:45:db:dd:fb:1c: f2:f7:c3:46:6a:10:1b:9f:c2:20:66:13:86:55:66: d6:91:c2:3f:31:f0:e5:a5:89:45:ab:1b:92:81:e7: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:3B:D5:32:30:30:66:4D:A9:BD:D9:4C:EE:C1:44:C6:7D:78:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ca7f5b37-4813-3ac1-95e8-a103cf47c8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 69.44.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:72:d7:f5:6f:7e:7f:24:e4:52:6b:b7:cb:91:dc:35:b7:7e: 1d:21:53:01:04:aa:e6:9f:c4:38:c6:73:84:b3:fc:11:17:b0: ef:66:54:0a:06:41:eb:2a:67:d9:9f:d3:05:cc:9d:40:bf:91: 57:bf:d1:73:62:0e:19:ee:4c:e5:39:cb:88:7e:53:96:0b:63: cf:d7:b2:c2:2b:ff:26:06:10:64:6e:36:1d:e3:cd:0c:9e:12: e3:86:d6:7f:0a:d9:63:7a:25:9e:c1:a8:4c:d1:7f:3e:7c:99: 63:28:36:88:95:8c:39:fd:9f:ab:34:27:3e:d5:49:92:0f:10: 52:b9:8e:5b:1e:80:29:8d:61:d2:c0:72:73:73:c7:3e:7b:a2: 81:d8:e9:bb:57:d5:03:13:60:10:c0:c6:4d:64:5e:a2:c9:87: a2:41:dd:84:70:86:6a:fe:25:06:e1:0b:49:16:31:2f:ed:56: 6c:a3:09:84:78:7a:28:61:4e:36:b3:87:bb:d2:f7:8d:bf:9f: 71:c4:49:d6:be:30:1d:f4:fe:17:ec:40:e5:e2:f8:fd:dd:d9: 44:26:96:14:73:78:35:73:79:29:2c:f9:7a:8a:e4:a0:01:35: 5c:30:08:8e:8d:d9:52:07:6c:28:08:93:19:db:94:ef:ba:d3: fe:5e:62:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPWWjK7r6fyigYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjI2YmUyMTktMTkxZi00N2M0LTljNzAtNjgzOWU4ZDBhZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaoLBALgcQCQC7mHvMdn+HQ8zBohIYHY5RG1 E6a0ANyR6sJbcoDGkQxwr8xXJwACpIO+OrPf8gEXtdNHoiz266HSpDTqbPy6WqDn 8O6vVdZgLBqQyQ4gsOoMovNzO1bcla8lTtfwFs8YIMnB1i/bMEtSXErdr1UFJx/t fINc4sKASPRWmVOqXl1J89qn0C42PDUpYhtH7IEYGc+CAH9zlaC+ekMfB/hf6ipH riinaXKhA6ue1pdWZ3XGWFCzYvl73PcyyazQlXKoEiFKJHsbv1wrG2VmwrVZrwLv Rdvd+xzy98NGahAbn8IgZhOGVWbWkcI/MfDlpYlFqxuSgecALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4QO9UyMDBmTam92UzuwUTGfXgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2E3ZjViMzctNDgxMy0z YWMxLTk1ZTgtYTEwM2NmNDdjOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSwuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRy1/Vvfn8k5FJrt8uR3DW3fh0hUwEEquafxDjGc4Sz/BEXsO9mVAoG QesqZ9mf0wXMnUC/kVe/0XNiDhnuTOU5y4h+U5YLY8/XssIr/yYGEGRuNh3jzQye EuOG1n8K2WN6JZ7BqEzRfz58mWMoNoiVjDn9n6s0Jz7VSZIPEFK5jlsegCmNYdLA cnNzxz57ooHY6btX1QMTYBDAxk1kXqLJh6JB3YRwhmr+JQbhC0kWMS/tVmyjCYR4 eihhTjazh7vS942/n3HESda+MB30/hfsQOXi+P3d2UQmlhRzeDVzeSks+XqK5KAB NVwwCI6N2VIHbCgIkxnblO+60/5eYg0= -----END CERTIFICATE-----Generated at Tue Nov 4 18:37:53 2025 by rpki-client