$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa File: 4c7be311-6f85-3b93-8242-963a4e63a1ab.roa (raw, json) Hash identifier: HgoHGxkAVnVz8aTkG9YpznIRS4ieDOdk5gkLFjHlbTQ= Subject key identifier: 91:FB:24:AA:8F:4A:5B:F0:9F:50:45:2B:6E:98:CC:22:E9:35:AC:E5 Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584BB6E1CFD09A2DA1E39A49DB34 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 32595 IP address blocks: 23.172.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:e1:cf:d0:9a:2d:a1:e3:9a:49:db:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=cb848947-85bb-45b2-8306-d339fc41a666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:4f:f2:9e:d8:c5:10:04:08:0d:7d:82:04: 11:38:30:d9:44:38:49:78:ce:d6:c6:28:fa:1a:00: 40:ff:cd:cf:aa:5c:b7:fb:e4:d9:f1:2b:3b:5d:67: ad:ae:ea:7b:a3:ed:1c:3f:bb:a2:75:a9:31:f3:27: 36:e4:7b:b5:2b:cd:7b:e2:98:f2:ca:56:5e:4e:43: 80:a4:f7:ad:d2:74:69:fe:e7:13:ef:53:9f:dd:cf: ea:db:87:8d:81:ab:b0:10:31:31:05:34:23:88:11: fa:cd:5e:4c:c0:20:97:d4:f5:1e:1e:41:a1:10:df: 72:67:47:54:29:d8:a3:db:2a:7d:c0:73:1e:d5:3f: d2:43:e7:cc:77:82:36:88:63:03:d6:0a:25:c2:51: b1:f2:53:94:2c:f3:f2:df:69:fc:67:2d:22:fd:90: 44:17:3a:c3:2c:d0:7b:f1:d5:c3:45:a4:25:37:8e: 69:9c:ba:d3:30:3e:19:03:f4:67:77:a5:bc:29:31: 96:11:1d:14:ba:17:1b:e5:97:68:4b:1e:64:21:c3: c0:9d:a3:c5:df:ab:7b:42:45:63:39:44:02:50:5f: 6f:03:7d:de:e8:91:49:af:c6:8a:f9:71:2c:74:12: a0:b1:22:2b:d7:50:b3:65:83:72:15:8b:ae:03:4a: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:24:AA:8F:4A:5B:F0:9F:50:45:2B:6E:98:CC:22:E9:35:AC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d9:a4:72:46:25:8a:3e:7e:52:10:60:34:9e:b7:95:e5:48: a7:c2:f3:3e:53:6e:af:e6:f3:19:a2:24:6d:c4:dd:d5:74:05: de:79:a8:7f:e5:d5:e2:6e:ef:59:88:d5:41:b6:92:6b:75:a2: e1:46:f7:8d:11:21:59:20:21:f5:17:41:ff:bb:b1:70:04:62: 22:85:e7:a8:e7:e0:43:d0:dd:83:90:99:fa:f4:ad:43:8a:55: 0d:6b:4c:d8:7a:95:e1:d0:00:ba:56:22:7b:3c:7d:43:e0:18: d2:dc:07:55:4b:a3:b2:19:9e:fe:fe:53:82:fd:28:d7:3a:c0: f2:c4:b5:3a:ff:94:c3:84:c2:78:45:8e:f0:1e:ed:0a:a3:e6: a3:21:70:8c:02:36:0e:eb:2b:75:43:57:27:39:19:61:84:37: 4a:1b:ef:da:c1:fa:c9:80:10:42:e6:7b:95:60:55:bc:dd:9a: ae:c0:b1:79:f1:ce:f1:94:78:6d:1e:72:0b:2d:41:3e:93:89: 5f:84:8a:28:14:c9:61:6b:a7:21:97:83:b2:db:98:fd:dd:67: 69:f8:24:1c:46:70:00:b3:0e:e7:7d:29:6d:92:6e:2d:70:d2: a4:a4:ad:45:1d:76:15:98:ce:36:92:a9:79:28:3d:fa:f7:50: d9:11:2a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu24c/Qmi2h45pJ2zQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2I4NDg5NDctODViYi00NWIyLTgzMDYtZDMzOWZjNDFhNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUtP8p7YxRAECA19ggQRODDZRDhJeM7Wxij6 GgBA/83Pqly3++TZ8Ss7XWetrup7o+0cP7uidakx8yc25Hu1K8174pjyylZeTkOA pPet0nRp/ucT71Of3c/q24eNgauwEDExBTQjiBH6zV5MwCCX1PUeHkGhEN9yZ0dU Kdij2yp9wHMe1T/SQ+fMd4I2iGMD1golwlGx8lOULPPy32n8Zy0i/ZBEFzrDLNB7 8dXDRaQlN45pnLrTMD4ZA/Rnd6W8KTGWER0Uuhcb5ZdoSx5kIcPAnaPF36t7QkVj OUQCUF9vA33e6JFJr8aK+XEsdBKgsSIr11CzZYNyFYuuA0rGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH7JKqPSlvwn1BFK26YzCLpNazlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGM3YmUzMTEtNmY4NS0z YjkzLTgyNDItOTYzYTRlNjNhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ZpHJGJYo+flIQYDSet5XlSKfC8z5Tbq/m8xmiJG3E3dV0Bd55qH/l 1eJu71mI1UG2kmt1ouFG940RIVkgIfUXQf+7sXAEYiKF56jn4EPQ3YOQmfr0rUOK VQ1rTNh6leHQALpWIns8fUPgGNLcB1VLo7IZnv7+U4L9KNc6wPLEtTr/lMOEwnhF jvAe7Qqj5qMhcIwCNg7rK3VDVyc5GWGEN0ob79rB+smAEELme5VgVbzdmq7AsXnx zvGUeG0ecgstQT6TiV+EiigUyWFrpyGXg7LbmP3dZ2n4JBxGcACzDud9KW2Sbi1w 0qSkrUUddhWYzjaSqXkoPfr3UNkRKhU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:09 2025 by rpki-client