$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa File: b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa (raw, json) Hash identifier: deU/Vk5jsIoYsoPmUEbdV/1Gxmk9LPnMRfh141HM+Q0= Subject key identifier: 28:A6:18:C8:1B:86:C9:B0:D0:4C:5A:9F:AF:DF:83:72:A0:42:AB:56 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584BA0D245136817EA21F0DFC514 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 62707 IP address blocks: 23.166.226.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:45:13:68:17:ea:21:f0:df:c5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=600f1c0b-fb46-453a-a2e4-ce7d98c7092b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:75:46:44:7c:e4:0e:ae:30:92:2d:10:78: e6:71:b1:dc:60:5f:51:6a:38:a3:1f:3b:68:e2:95: 6b:3c:93:bc:88:0d:6d:63:52:86:dc:d1:b1:b4:d0: 55:de:64:3e:5d:e9:17:f9:88:c0:5b:06:1f:ae:96: 97:17:8f:ac:82:45:4a:00:51:91:51:a2:83:ff:85: f9:9e:06:26:5c:29:aa:4d:f7:1a:68:66:75:6b:f2: a9:5a:2c:13:fd:ba:f2:08:e1:a3:21:0d:58:41:47: 01:ab:01:2b:8a:0f:8b:4e:bb:43:84:f0:2f:c0:1e: 0f:8a:d8:a6:87:cb:79:b4:32:8d:7b:c4:ed:4d:53: ed:b8:e6:8f:5b:b4:06:29:cb:d8:9e:58:4e:50:26: f7:a3:ac:09:63:f1:6e:0d:df:49:76:6f:c1:79:1a: b9:f6:86:93:bd:fa:fb:67:16:63:4b:d2:e2:5d:ba: bf:79:d5:75:14:c1:09:6f:ee:3f:91:27:f9:7e:91: 63:d9:3a:44:52:06:36:db:aa:18:f6:20:0a:45:a6: 5b:9f:ba:f4:8d:a9:2c:c6:3a:d7:9f:77:11:95:3f: 02:5f:5b:a8:8e:f0:89:52:af:7a:00:bc:d7:b3:7d: 5c:c5:d7:40:99:43:f6:ce:0a:c1:29:ec:c7:ab:34: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A6:18:C8:1B:86:C9:B0:D0:4C:5A:9F:AF:DF:83:72:A0:42:AB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b2d29925-e4d4-3315-93d6-9b5b9e4a6884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 23.166.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d9:13:1a:e7:84:ab:33:c1:d2:85:fe:b0:ea:b8:ec:e0:7f: 41:fd:68:86:3e:6a:be:bc:88:81:b4:25:3f:ed:09:a2:d9:be: 34:bc:6e:fd:b6:79:d3:c2:ee:5e:da:86:7f:d6:7e:e8:9e:a4: 7f:2b:c9:0c:be:a0:b8:bc:02:21:63:04:d4:af:9d:80:75:d9: bd:bc:8b:a1:e3:a6:83:9c:47:b3:59:77:47:1a:8e:dd:f7:ab: 7d:95:ae:c8:a8:52:23:aa:fe:01:53:ed:c5:9e:e3:fe:69:ea: 42:9b:bf:d3:b8:01:1a:2a:ec:43:c6:3f:26:31:00:5c:b2:3a: e2:4b:1d:84:ce:27:83:2f:70:28:d9:fb:5d:11:96:a5:41:6d: a4:f9:5f:82:3e:95:c8:cf:90:c8:5c:a6:f8:98:cd:9f:a7:36: d0:53:5a:db:e8:46:42:3d:9a:9b:19:fa:fc:95:33:53:45:60: 7b:57:d4:db:c0:58:e5:58:0b:c1:b3:43:5e:c9:cf:11:c3:d4: 9f:8e:c4:65:c2:07:08:a2:15:0a:7e:a5:13:fc:e7:09:bd:0d: 21:b5:ec:03:73:57:fc:a0:2e:33:aa:9f:ca:5e:20:f9:6d:ed: e5:e1:c0:9d:a7:a1:64:9c:03:93:47:13:4d:d3:79:24:40:d7: 28:26:af:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kUTaBfqIfDfxRQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjAwZjFjMGItZmI0Ni00NTNhLWEyZTQtY2U3ZDk4YzcwOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzV1RkR85A6uMJItEHjmcbHcYF9RajijHzto 4pVrPJO8iA1tY1KG3NGxtNBV3mQ+XekX+YjAWwYfrpaXF4+sgkVKAFGRUaKD/4X5 ngYmXCmqTfcaaGZ1a/KpWiwT/bryCOGjIQ1YQUcBqwErig+LTrtDhPAvwB4Pitim h8t5tDKNe8TtTVPtuOaPW7QGKcvYnlhOUCb3o6wJY/FuDd9Jdm/BeRq59oaTvfr7 ZxZjS9LiXbq/edV1FMEJb+4/kSf5fpFj2TpEUgY226oY9iAKRaZbn7r0jaksxjrX n3cRlT8CX1uojvCJUq96ALzXs31cxddAmUP2zgrBKezHqzTF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCimGMgbhsmw0Exan6/fg3KgQqtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvYjJkMjk5MjUtZTRkNC0z MzE1LTkzZDYtOWI1YjllNGE2ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6biMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnZExrnhKszwdKF/rDquOzgf0H9aIY+ar68iIG0JT/tCaLZvjS8bv22 edPC7l7ahn/WfuiepH8ryQy+oLi8AiFjBNSvnYB12b28i6HjpoOcR7NZd0cajt33 q32VrsioUiOq/gFT7cWe4/5p6kKbv9O4ARoq7EPGPyYxAFyyOuJLHYTOJ4MvcCjZ +10RlqVBbaT5X4I+lcjPkMhcpviYzZ+nNtBTWtvoRkI9mpsZ+vyVM1NFYHtX1NvA WOVYC8GzQ17JzxHD1J+OxGXCBwiiFQp+pRP85wm9DSG17ANzV/ygLjOqn8peIPlt 7eXhwJ2noWScA5NHE03TeSRA1ygmr4I= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:13 2025 by rpki-client