$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa File: d966c9f0-9be2-3d51-9991-195024ed1379.roa (raw, json) Hash identifier: /8JjvvyHH8jsN0vj6G9kTSI2OCYmCOxlry0iHt6znAM= Subject key identifier: 4B:E5:57:13:1D:80:37:6C:A5:FF:12:80:2C:6E:2B:97:B2:4C:A5:A8 Certificate issuer: /CN=ccba4c8d-2584-485e-91b3-1671bcfa81b2 Certificate serial: 010D0C9F4328584BBE40654BC994ED889A8BC480 Authority key identifier: F5:6E:46:B0:09:1A:3F:E2:11:DA:81:E6:D6:0C:FB:B5:41:0B:CA:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 23.143.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:65:4b:c9:94:ed:88:9a:8b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccba4c8d-2584-485e-91b3-1671bcfa81b2 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=61643214-2c19-4a4e-8f3e-436659f96f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:6c:c6:85:12:ac:f1:dd:30:dd:a1:59:25: dc:ae:98:68:89:4d:7f:44:30:61:02:86:25:0d:4f: 23:c2:bf:ae:5a:45:84:4c:92:4e:23:38:eb:73:4e: 25:fa:a0:da:0c:ad:47:bb:b7:13:23:55:ae:88:09: a0:24:ab:f1:76:c4:d4:af:f7:83:3b:98:9d:b5:91: 2c:4e:b0:79:3f:d6:62:65:25:62:7e:f1:2f:15:a1: e6:b6:8f:a8:d5:11:18:6e:6f:ea:d9:c5:cb:38:2f: cd:33:85:86:63:94:cb:1b:40:35:e3:34:bf:cf:60: 65:c9:bd:29:7b:ea:f8:c2:98:0c:d4:2c:76:26:82: e8:61:7c:d3:da:01:3b:a3:b9:2d:6f:15:b1:ac:1f: c4:a6:ab:43:fa:ad:54:d6:90:df:d6:bf:de:f5:d1: a0:79:93:e0:dd:ac:a4:df:a0:43:3a:30:1a:1e:26: 5b:a5:21:76:f1:e7:56:ea:c3:06:b1:34:39:55:31: f8:fc:13:8a:46:1c:4e:c9:7a:f4:c7:4c:fe:fd:67: 7c:86:17:e4:e5:6f:e2:97:89:80:b3:41:be:f8:4b: 83:bf:f9:ea:ae:06:6c:4c:47:7c:10:c0:b3:aa:e7: 96:30:d5:4c:8d:89:41:fe:95:bc:3d:46:c1:82:ee: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:57:13:1D:80:37:6C:A5:FF:12:80:2C:6E:2B:97:B2:4C:A5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.crl X509v3 Authority Key Identifier: keyid:F5:6E:46:B0:09:1A:3F:E2:11:DA:81:E6:D6:0C:FB:B5:41:0B:CA:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer sbgp-ipAddrBlock: critical IPv4: 23.143.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bd:03:f9:be:a7:c7:6b:f7:ef:f6:79:05:f5:c4:b2:6a:24: 38:56:7f:57:53:7d:a4:43:3d:2d:52:81:97:3a:67:a0:f4:82: e3:22:83:e9:83:03:55:fb:bb:8d:a4:e5:ff:36:f5:0b:c1:aa: d8:07:c5:4f:4a:e3:73:68:a0:7d:d3:76:76:df:b2:8c:65:5b: f1:6e:44:c1:96:24:ff:db:79:87:53:2e:4a:29:45:f1:cf:2b: ad:73:65:f8:31:11:db:59:d2:c4:8a:75:77:db:79:22:c5:96: b3:dd:e2:e2:d9:2c:fe:74:3b:7c:e6:c3:f3:29:93:a4:3e:e9: 53:50:8b:f0:ba:00:7c:32:ff:3a:51:83:6f:89:53:cc:3b:83: 7c:d3:fa:46:4a:50:76:b8:59:d5:59:f6:0a:90:bc:b4:7b:be: 41:ee:09:53:0a:da:3f:08:d6:0b:87:29:56:5a:40:21:17:50: 0b:2d:65:3b:f7:67:b7:2a:8a:10:5b:71:18:62:56:05:8c:84: a8:26:b5:84:d0:cd:85:a6:a3:d0:51:02:95:63:f3:5f:dc:3c: 46:79:c1:5f:4a:c9:9b:29:4a:cd:db:17:aa:64:55:04:80:70: b0:17:4e:ea:90:b5:72:95:27:3b:e9:20:82:e6:91:32:b7:98: b6:09:44:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGVLyZTtiJqLxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NiYTRjOGQtMjU4NC00ODVlLTkxYjMtMTY3MWJjZmE4 MWIyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjE2NDMyMTQtMmMxOS00YTRlLThmM2UtNDM2NjU5Zjk2Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhRsxoUSrPHdMN2hWSXcrphoiU1/RDBhAoYl DU8jwr+uWkWETJJOIzjrc04l+qDaDK1Hu7cTI1WuiAmgJKvxdsTUr/eDO5idtZEs TrB5P9ZiZSVifvEvFaHmto+o1REYbm/q2cXLOC/NM4WGY5TLG0A14zS/z2Blyb0p e+r4wpgM1Cx2JoLoYXzT2gE7o7ktbxWxrB/EpqtD+q1U1pDf1r/e9dGgeZPg3ayk 36BDOjAaHiZbpSF28edW6sMGsTQ5VTH4/BOKRhxOyXr0x0z+/Wd8hhfk5W/il4mA s0G++EuDv/nqrgZsTEd8EMCzqueWMNVMjYlB/pW8PUbBgu6jEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvlVxMdgDdspf8SgCxuK5eyTKWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2Jh NGM4ZC0yNTg0LTQ4NWUtOTFiMy0xNjcxYmNmYTgxYjIvZDk2NmM5ZjAtOWJlMi0z ZDUxLTk5OTEtMTk1MDI0ZWQxMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2NiYTRjOGQtMjU4NC00ODVlLTkx YjMtMTY3MWJjZmE4MWIyL2NjYmE0YzhkLTI1ODQtNDg1ZS05MWIzLTE2NzFiY2Zh ODFiMi5jcmwwHwYDVR0jBBgwFoAU9W5GsAkaP+IR2oHm1gz7tUELyrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2JhNGM4ZC0yNTg0LTQ4NWUtOTFiMy0xNjcx YmNmYTgxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG9A/m+p8dr9+/2eQX1xLJqJDhWf1dTfaRDPS1SgZc6Z6D0guMig+mD A1X7u42k5f829QvBqtgHxU9K43NooH3TdnbfsoxlW/FuRMGWJP/beYdTLkopRfHP K61zZfgxEdtZ0sSKdXfbeSLFlrPd4uLZLP50O3zmw/Mpk6Q+6VNQi/C6AHwy/zpR g2+JU8w7g3zT+kZKUHa4WdVZ9gqQvLR7vkHuCVMK2j8I1guHKVZaQCEXUAstZTv3 Z7cqihBbcRhiVgWMhKgmtYTQzYWmo9BRApVj81/cPEZ5wV9KyZspSs3bF6pkVQSA cLAXTuqQtXKVJzvpIILmkTK3mLYJRAM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:57 2025 by rpki-client