$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa File: d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa (raw, json) Hash identifier: 8y4larqEogDclk1LFntVhtswLPWPI4J4GArLgdQH/ts= Subject key identifier: 9A:A2:96:DB:5F:E8:C3:B2:A3:D0:0B:F2:86:F4:41:E2:C8:55:BF:72 Certificate issuer: /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Certificate serial: 010D0C9F4328584B3F1C5CC6346427CCE747D280 Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 394256 IP address blocks: 23.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5c:c6:34:64:27:cc:e7:47:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=63325ae6-c7d5-434b-8058-2b74b6330b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:89:cf:33:74:28:a1:91:c3:44:51:29:af:d7: 30:e3:b6:16:11:e0:c3:f1:08:29:b4:87:c3:cf:eb: 70:c7:45:9a:a2:92:da:b8:5c:43:2f:99:fa:d9:16: f3:b8:c3:50:e4:38:08:21:95:03:2a:6c:47:b6:8c: ac:eb:f9:ad:d9:a1:c1:a3:24:67:f5:ab:96:a6:9f: 6c:4b:7d:01:ab:49:38:63:a1:58:05:5a:08:ae:62: 13:4d:ef:79:39:ec:95:95:71:a2:40:77:a9:59:c9: 50:38:31:51:05:b0:ce:48:a6:fe:5d:cc:f1:af:08: 15:80:76:2b:a2:00:06:10:98:69:65:f4:65:71:21: 1a:d2:28:a2:42:d7:95:cf:fb:ac:b8:68:08:dd:5c: 35:25:fa:ae:75:9a:4a:6d:10:66:b9:fb:72:d7:99: 52:8c:78:7a:44:30:45:5b:69:7a:46:db:c1:5d:55: 21:d7:a5:99:f4:bd:0c:54:d0:b4:2a:66:bf:8a:fa: 10:b7:c1:60:e0:66:95:12:73:3a:b6:10:32:f0:d9: 64:4a:d6:b9:99:2e:a0:0a:4b:05:48:38:3f:38:79: 98:49:ac:2d:ef:26:4c:dc:e2:2c:78:47:ac:7f:1f: ee:0b:e6:db:10:cc:24:f3:e9:b1:2b:38:7d:d2:43: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A2:96:DB:5F:E8:C3:B2:A3:D0:0B:F2:86:F4:41:E2:C8:55:BF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl X509v3 Authority Key Identifier: keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c4:c3:3b:e6:c5:60:a7:fe:12:05:85:67:7e:a3:4d:f4:5b: 83:ce:9d:ca:2c:af:36:92:20:71:e7:c4:fa:e8:a9:b4:95:a6: 7e:2d:dc:21:cc:ff:de:cf:f9:d5:df:7c:e0:69:09:aa:97:3b: 68:08:92:f3:be:21:1d:80:c4:cc:49:a0:28:6e:4a:06:fe:c0: 68:f3:d8:74:41:03:d0:ad:37:13:73:af:72:79:d4:0d:34:ef: a6:4f:67:34:d8:39:fa:ec:93:d6:53:e5:53:e0:ea:dc:1d:a5: a8:d0:cb:78:80:ba:c2:5f:15:93:c7:d2:42:5a:89:f2:a6:03: 4c:15:64:8f:54:4d:d4:44:76:c3:08:53:71:7a:82:84:6e:88: a6:4b:50:6c:53:86:ad:6c:d1:a0:67:50:39:31:be:17:c4:1b: 54:6b:4b:ec:8c:7d:8c:68:09:b4:ee:c2:0c:f3:54:f3:a8:0a: b8:31:ea:10:c1:f1:8f:b3:ea:55:91:57:5a:8b:58:3f:62:1a: b4:8f:5f:ce:98:b1:e7:b9:0c:4c:f3:e6:13:86:f2:58:d9:eb: db:9b:b1:cc:cf:b2:7d:c8:ef:21:99:84:3b:99:64:54:37:d6: 93:99:67:d1:eb:88:bc:01:61:97:f7:62:c2:b4:7b:7b:f9:f6: 2d:68:c7:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFzGNGQnzOdH0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRmNmRlNzQtOWFlZC00NzRkLWFlZDItYmE4YWIxM2E3 Y2YzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk NjMzMjVhZTYtYzdkNS00MzRiLTgwNTgtMmI3NGI2MzMwYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9onPM3QooZHDRFEpr9cw47YWEeDD8QgptIfD z+twx0WaopLauFxDL5n62RbzuMNQ5DgIIZUDKmxHtoys6/mt2aHBoyRn9auWpp9s S30Bq0k4Y6FYBVoIrmITTe95OeyVlXGiQHepWclQODFRBbDOSKb+XczxrwgVgHYr ogAGEJhpZfRlcSEa0iiiQteVz/usuGgI3Vw1JfqudZpKbRBmufty15lSjHh6RDBF W2l6RtvBXVUh16WZ9L0MVNC0Kma/ivoQt8Fg4GaVEnM6thAy8NlkSta5mS6gCksF SDg/OHmYSawt7yZM3OIseEesfx/uC+bbEMwk8+mxKzh90kNIpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqilttf6MOyo9AL8ob0QeLIVb9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGY2 ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThhYjEzYTdjZjMvZDBjOWRkZmItNzFiOC0z ZjFiLWE4ZDktNWJlZGVkZDUzMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRmNmRlNzQtOWFlZC00NzRkLWFl ZDItYmE4YWIxM2E3Y2YzLzJkZjZkZTc0LTlhZWQtNDc0ZC1hZWQyLWJhOGFiMTNh N2NmMy5jcmwwHwYDVR0jBBgwFoAUOHbPTq59AhW/BLdReMMbLZv9vOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGY2ZGU3NC05YWVkLTQ3NGQtYWVkMi1iYThh YjEzYTdjZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbEwzvmxWCn/hIFhWd+o030W4POncosrzaSIHHnxProqbSVpn4t3CHM /97P+dXffOBpCaqXO2gIkvO+IR2AxMxJoChuSgb+wGjz2HRBA9CtNxNzr3J51A00 76ZPZzTYOfrsk9ZT5VPg6twdpajQy3iAusJfFZPH0kJaifKmA0wVZI9UTdREdsMI U3F6goRuiKZLUGxThq1s0aBnUDkxvhfEG1RrS+yMfYxoCbTuwgzzVPOoCrgx6hDB 8Y+z6lWRV1qLWD9iGrSPX86Ysee5DEzz5hOG8ljZ69ubsczPsn3I7yGZhDuZZFQ3 1pOZZ9HriLwBYZf3YsK0e3v59i1ox5k= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:53 2025 by rpki-client