$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa File: f431a01d-ccef-3853-a33e-26804741b948.roa (raw, json) Hash identifier: jByV6hsKXR3D6jVE5JOKdOsIDdberC4WYWrGGdRrdec= Subject key identifier: 32:25:50:8C:A3:CA:8E:48:D9:D6:FC:76:C5:93:24:61:7B:20:6A:85 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB2F7A9C20F93832579958780 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 18809 IP address blocks: 64.213.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:c2:0f:93:83:25:79:95:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9f1286d1-2b17-464a-844d-e80060cfc07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:a1:e9:02:76:94:dc:04:bf:9c:de:7e:f4: 31:71:c4:1f:83:0d:4c:9c:a6:75:53:a8:f8:db:04: 10:4d:59:de:5c:d2:65:d4:dd:fd:68:63:42:bc:a4: fc:7b:8b:c0:57:2e:be:71:fe:d7:f3:c9:be:dd:88: 16:79:cd:dd:af:9f:00:18:ba:12:d9:d8:20:b4:ce: 4e:b4:f1:4b:f1:7e:9c:3f:ff:d6:d7:94:8d:14:0e: 28:dc:dc:62:d6:7f:28:bd:d1:1a:b2:53:38:18:08: d8:c1:a8:78:a9:db:dd:d1:aa:08:f1:93:38:f9:ea: 10:d7:0f:d7:00:62:fc:78:e0:a1:d7:22:01:8a:5e: c1:53:4d:bd:f7:5b:90:49:a1:89:13:9e:02:16:17: 67:6c:39:6c:1b:e7:50:0a:86:1e:11:a8:8f:d7:1d: 03:bb:2e:62:88:d1:53:24:4e:be:77:89:41:a5:5f: ce:9d:1b:9a:40:7a:73:17:6f:0d:97:58:c7:4e:be: ff:6f:fe:9e:e7:94:91:23:aa:6e:9c:cc:08:74:a9: af:34:1d:38:dd:3d:fd:15:e4:bb:c7:b0:93:3a:e9: c0:b1:d9:bb:01:b9:87:02:dc:c6:51:5f:cc:34:80: 98:82:15:6d:d0:70:cd:ff:ee:7c:70:ba:93:e7:62: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:50:8C:A3:CA:8E:48:D9:D6:FC:76:C5:93:24:61:7B:20:6A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:23:80:3f:ad:8f:70:b6:3b:fc:b8:11:e1:e8:7f:e4:df:3f: c7:be:70:5c:97:1e:9e:2f:3c:9a:c1:ee:16:32:58:f9:38:d7: 27:7d:9c:d6:47:ab:36:f5:d6:5e:3e:d1:5a:77:39:58:db:50: b4:28:54:85:f6:72:cd:88:b8:89:52:b5:82:a2:4b:5c:97:9c: c0:10:c0:ab:c1:62:a4:e7:08:05:30:3c:20:01:ca:89:eb:5d: 64:8c:c4:e6:b7:25:dd:d9:fc:81:19:67:06:30:fa:81:59:a1: 13:31:fa:1d:d6:8d:67:86:f6:df:dd:b8:d8:3b:14:cb:29:17: d2:30:71:0e:4f:85:07:76:2e:4e:e1:bd:4a:f5:b8:f2:01:86: e2:c8:aa:48:51:70:80:44:2e:91:52:e4:5d:50:b5:56:86:33: 0d:c2:54:3f:e9:60:d7:5c:70:e7:9e:cf:31:d9:0c:8c:b4:ab: 93:fd:74:08:e4:13:0f:27:73:f5:e1:b3:72:42:91:de:65:cb: eb:28:05:98:56:68:0e:a2:2c:69:af:1a:9e:b0:e8:c1:05:a4: a2:d0:32:f2:12:1c:14:16:57:10:28:06:e4:22:f0:25:f4:c3: 51:79:8b:dd:54:62:cc:89:b5:68:83:f3:ce:c7:9b:a8:7d:67: 0c:b8:6e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96nCD5ODJXmVh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWYxMjg2ZDEtMmIxNy00NjRhLTg0NGQtZTgwMDYwY2ZjMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y+h6QJ2lNwEv5zefvQxccQfgw1MnKZ1U6j4 2wQQTVneXNJl1N39aGNCvKT8e4vAVy6+cf7X88m+3YgWec3dr58AGLoS2dggtM5O tPFL8X6cP//W15SNFA4o3Nxi1n8ovdEaslM4GAjYwah4qdvd0aoI8ZM4+eoQ1w/X AGL8eOCh1yIBil7BU02991uQSaGJE54CFhdnbDlsG+dQCoYeEaiP1x0Duy5iiNFT JE6+d4lBpV/OnRuaQHpzF28Nl1jHTr7/b/6e55SRI6punMwIdKmvNB043T39FeS7 x7CTOunAsdm7AbmHAtzGUV/MNICYghVt0HDN/+58cLqT52J0pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIlUIyjyo5I2db8dsWTJGF7IGqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjQzMWEwMWQtY2NlZi0z ODUzLWEzM2UtMjY4MDQ3NDFiOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEjgD+tj3C2O/y4EeHof+TfP8e+cFyXHp4vPJrB7hYyWPk41yd9nNZH qzb11l4+0Vp3OVjbULQoVIX2cs2IuIlStYKiS1yXnMAQwKvBYqTnCAUwPCAByonr XWSMxOa3Jd3Z/IEZZwYw+oFZoRMx+h3WjWeG9t/duNg7FMspF9IwcQ5PhQd2Lk7h vUr1uPIBhuLIqkhRcIBELpFS5F1QtVaGMw3CVD/pYNdccOeezzHZDIy0q5P9dAjk Ew8nc/Xhs3JCkd5ly+soBZhWaA6iLGmvGp6w6MEFpKLQMvISHBQWVxAoBuQi8CX0 w1F5i91UYsyJtWiD887Hm6h9Zwy4brA= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:35 2025 by rpki-client