$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: UV66CPKw/c138N9yAOD47RxeIwB8un7bSN1yGdjyTvA= Subject key identifier: 4D:94:83:C8:CA:47:9B:04:99:96:62:87:24:E3:1C:C8:3F:EF:3C:0E Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584BBB75975F6C1DF259E353F740 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:97:5f:6c:1d:f2:59:e3:53:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=2d29df30-2af5-4713-8538-df0cd908b7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:0c:f4:ae:5a:bb:2a:7a:2b:a9:09:83:f7: 04:24:e3:2a:64:7f:17:14:c8:e8:84:97:e7:0f:ac: 39:ba:1f:e9:13:89:17:d8:22:35:b5:2b:2d:d9:47: 22:de:aa:f2:7f:d9:e5:89:eb:0d:ab:aa:f5:a9:53: 6e:12:d3:1e:7c:bc:ef:76:32:70:15:40:97:8c:0e: b7:2e:26:27:d1:15:ec:ee:14:9a:d9:e0:ca:46:a4: bb:77:94:78:87:f0:1e:78:10:17:4b:32:42:cd:61: c5:08:0a:6f:7a:c7:05:62:24:3d:0c:3a:e6:ad:08: 10:7c:2b:48:fe:1d:09:07:4b:5e:14:88:93:9e:58: 0a:c8:7f:dd:a9:0b:e9:1a:7a:d2:79:c9:6c:d8:93: 8b:2d:05:e9:12:5c:d7:2a:aa:6c:9f:ab:00:f5:62: e9:c9:4f:09:3c:6b:9a:8d:25:ca:d3:79:15:25:af: 2f:a6:a9:18:9a:d7:17:a2:b9:53:4d:80:09:c6:ac: 58:16:2e:e6:48:cc:e0:a6:17:3c:a5:74:6e:76:8e: 63:11:e7:34:80:fa:3f:e8:90:e7:50:f5:a6:6a:a8: e9:1e:27:8e:31:f2:f9:96:13:96:50:66:8b:94:32: 4d:6d:a4:82:02:a2:ca:84:77:6c:a5:d1:5c:5e:92: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:83:C8:CA:47:9B:04:99:96:62:87:24:E3:1C:C8:3F:EF:3C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cd:02:91:dd:1f:f3:bd:fa:01:8f:80:3d:05:cd:27:b6:74: 82:c1:da:58:d7:e4:79:ea:6a:2e:9b:59:52:9f:75:41:74:3b: 7f:3f:68:09:6c:71:ab:04:5d:6e:fc:7f:70:3f:f1:0e:61:ec: 74:54:29:9b:6b:1f:ae:f3:07:be:45:ef:cc:19:9f:fe:b7:3c: df:75:5b:48:82:2f:3d:49:27:04:49:67:0d:12:cc:68:1e:61: 82:de:b4:3f:eb:77:46:ea:ba:59:f5:c7:49:ef:50:d8:28:9b: 21:a6:c1:d7:08:ca:14:a5:6b:88:49:c3:24:2f:dd:fe:66:4b: 4b:91:27:ad:12:8f:79:9a:fb:b8:e0:6c:8c:56:81:d4:17:45: 98:ac:d6:0f:ae:61:41:a9:1b:d4:d6:7f:96:a1:07:e6:dc:c2: 8c:3e:89:ec:1f:33:cc:d2:9c:bd:e7:b9:8a:f0:55:f2:cd:65: 8f:63:23:5a:9f:fe:d3:fa:21:e7:9f:e6:b3:21:5a:c5:4f:c7: f1:d4:74:5f:ce:61:35:c8:2b:09:b7:3e:5e:09:b4:a1:5a:16: 92:63:f0:f2:1f:d0:f6:96:46:92:20:eb:83:9e:53:ba:18:f8: f8:2d:42:e9:21:e8:89:dd:06:0d:c1:6a:d6:e5:36:7d:55:15: 53:cc:1a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZdfbB3yWeNT90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MmQyOWRmMzAtMmFmNS00NzEzLTg1MzgtZGYwY2Q5MDhiN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZoM9K5auyp6K6kJg/cEJOMqZH8XFMjohJfn D6w5uh/pE4kX2CI1tSst2Uci3qryf9nliesNq6r1qVNuEtMefLzvdjJwFUCXjA63 LiYn0RXs7hSa2eDKRqS7d5R4h/AeeBAXSzJCzWHFCApvescFYiQ9DDrmrQgQfCtI /h0JB0teFIiTnlgKyH/dqQvpGnrSecls2JOLLQXpElzXKqpsn6sA9WLpyU8JPGua jSXK03kVJa8vpqkYmtcXorlTTYAJxqxYFi7mSMzgphc8pXRudo5jEec0gPo/6JDn UPWmaqjpHieOMfL5lhOWUGaLlDJNbaSCAqLKhHdspdFcXpLZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Ug8jKR5sEmZZihyTjHMg/7zwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnNApHdH/O9+gGPgD0FzSe2dILB2ljX5Hnqai6bWVKfdUF0O38/aAls casEXW78f3A/8Q5h7HRUKZtrH67zB75F78wZn/63PN91W0iCLz1JJwRJZw0SzGge YYLetD/rd0bquln1x0nvUNgomyGmwdcIyhSla4hJwyQv3f5mS0uRJ60Sj3ma+7jg bIxWgdQXRZis1g+uYUGpG9TWf5ahB+bcwow+iewfM8zSnL3nuYrwVfLNZY9jI1qf /tP6Ieef5rMhWsVPx/HUdF/OYTXIKwm3Pl4JtKFaFpJj8PIf0PaWRpIg64OeU7oY +PgtQukh6IndBg3BatblNn1VFVPMGjU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:19 2025 by rpki-client