$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa File: 957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json) Hash identifier: ndrpV+XiX5yEDJ35ykyKbFGa87r6daPOuCwX2MV8puU= Subject key identifier: 22:17:9D:2A:D3:0E:7F:82:EE:BD:7B:B1:5D:31:EF:11:77:A7:AF:E1 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584BBA103591D3F7DF9A0395F600 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 23.179.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:35:91:d3:f7:df:9a:03:95:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=fa0faf94-8c6e-4ddb-9fbb-4435c54ca587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:17:b3:1f:1f:79:0a:03:e0:43:16:84:ff: 8b:d3:26:b1:46:33:c6:f6:41:ee:bc:0e:a6:79:a1: bf:40:7a:c0:18:44:3b:c9:4d:a3:af:67:8f:e7:69: ad:55:76:8f:36:5c:62:92:91:c9:1e:27:c5:c4:78: dc:8a:38:96:80:de:8d:df:9e:81:17:d5:f5:73:08: 93:57:87:5f:fb:7e:35:9d:a1:c9:a7:1c:03:80:b5: 5b:33:05:6f:30:72:8e:f4:dc:00:3d:82:9a:fa:f9: 57:b8:65:8b:78:36:86:bc:66:7f:ce:61:bd:09:bc: ce:81:2a:6a:b5:0a:09:e4:17:81:9c:82:42:48:38: 1d:f3:a0:89:17:74:36:65:1f:24:91:cf:fe:28:79: c8:88:1f:5b:0e:46:68:79:a7:2a:1c:34:d3:e0:c0: 16:bf:0a:f6:2a:9d:e6:1e:40:4d:20:bc:d5:9c:45: a4:74:10:13:b6:5d:1f:d6:2a:7b:ea:6c:4c:f1:d9: 8e:0c:07:96:6b:4a:e4:4c:e0:09:54:eb:69:48:ed: d3:2a:e1:2b:52:a2:fd:71:0d:f8:e8:5d:fb:2a:d2: 25:cf:35:5c:1d:53:e1:ee:88:a6:ae:19:c1:d2:98: 11:24:7a:9a:31:55:d1:e5:a9:d4:c8:ed:30:e0:ec: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:9D:2A:D3:0E:7F:82:EE:BD:7B:B1:5D:31:EF:11:77:A7:AF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:50:d3:34:f0:88:fc:fe:1f:4b:bd:02:f1:0c:e1:2b:42:71: 40:72:e7:08:4f:3d:4b:16:f3:24:07:6d:52:56:c9:dd:9e:8b: c8:82:be:55:18:ba:1b:a0:ff:d9:ac:b5:3f:17:b1:2d:e8:c2: b3:9e:00:66:0f:1a:0d:b9:31:da:3d:45:7a:ce:f3:6d:49:57: 05:e9:c6:8a:d4:c6:15:3a:31:16:b2:8f:7e:04:1f:76:1f:8d: 2d:f7:3e:0d:f9:56:9b:c6:fb:e0:65:fa:32:28:b0:ed:36:be: ce:52:11:40:0b:52:8e:02:c4:50:81:d0:9d:1a:a9:6f:1d:14: 5f:84:99:67:46:08:99:e4:da:b6:82:d1:8f:14:81:ff:37:1f: 32:bc:4a:b6:b9:57:46:b0:e0:80:de:5d:8f:c9:63:d9:28:85: 61:ad:66:ed:34:82:89:2e:f5:b0:c6:14:0c:04:90:0d:f0:dc: ae:b0:11:2c:f3:93:5f:1b:e5:89:8f:dd:59:fd:c7:a4:13:7b: 43:19:c8:53:95:1d:bc:18:53:75:81:82:1b:ad:59:03:f9:37: 32:6f:96:5b:1b:31:b3:ae:1b:fb:79:c3:58:d7:e1:92:ae:75: 30:47:2c:3b:39:89:51:5b:36:cb:38:94:ca:eb:43:ae:19:6f: a8:68:8d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDWR0/ffmgOV9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmEwZmFmOTQtOGM2ZS00ZGRiLTlmYmItNDQzNWM1NGNhNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovEXsx8feQoD4EMWhP+L0yaxRjPG9kHuvA6m eaG/QHrAGEQ7yU2jr2eP52mtVXaPNlxikpHJHifFxHjcijiWgN6N356BF9X1cwiT V4df+341naHJpxwDgLVbMwVvMHKO9NwAPYKa+vlXuGWLeDaGvGZ/zmG9CbzOgSpq tQoJ5BeBnIJCSDgd86CJF3Q2ZR8kkc/+KHnIiB9bDkZoeacqHDTT4MAWvwr2Kp3m HkBNILzVnEWkdBATtl0f1ip76mxM8dmODAeWa0rkTOAJVOtpSO3TKuErUqL9cQ34 6F37KtIlzzVcHVPh7oimrhnB0pgRJHqaMVXR5anUyO0w4OwVdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIXnSrTDn+C7r17sV0x7xF3p6/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTU3ZTU0MWYtM2IyNS0z MWNmLWEwZTktZTdkZWNmZThhMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Q0zTwiPz+H0u9AvEM4StCcUBy5whPPUsW8yQHbVJWyd2ei8iCvlUY uhug/9mstT8XsS3owrOeAGYPGg25Mdo9RXrO821JVwXpxorUxhU6MRayj34EH3Yf jS33Pg35VpvG++Bl+jIosO02vs5SEUALUo4CxFCB0J0aqW8dFF+EmWdGCJnk2raC 0Y8Ugf83HzK8Sra5V0aw4IDeXY/JY9kohWGtZu00goku9bDGFAwEkA3w3K6wESzz k18b5YmP3Vn9x6QTe0MZyFOVHbwYU3WBghutWQP5NzJvllsbMbOuG/t5w1jX4ZKu dTBHLDs5iVFbNss4lMrrQ64Zb6hojc4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:09:56 2025 by rpki-client