$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa File: f069f00f-676a-3490-bfe2-b5427e021c6d.roa (raw, json) Hash identifier: OJ8KYaSERWoXHIjpnf4lgYs2RZc1ZX4a2OT5P1DWyFE= Subject key identifier: 01:EE:E4:80:F2:88:29:3E:97:E6:BB:3A:25:49:43:0C:FE:11:56:E8 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584B970CF040C05364702934F580 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 397181 IP address blocks: 23.128.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f0:40:c0:53:64:70:29:34:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=27e76596-0739-46ef-b108-9e5f0dde7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6f:17:78:38:ff:0a:cd:16:b0:dc:75:d8:7e: 50:fa:d2:18:c0:db:ac:75:fc:35:be:30:6b:b3:e1: f1:e8:c9:be:8a:8a:5a:02:8d:10:d8:26:2b:3e:72: a3:32:1e:25:3f:2f:58:90:08:52:6d:1a:ea:42:60: cc:02:49:0f:92:46:44:74:7f:89:76:cf:42:07:e3: ee:1b:d7:38:c2:94:d1:3b:49:22:dd:20:98:bb:78: 7e:2b:fd:1c:e7:b6:51:c9:26:3f:27:49:4e:f1:d0: 97:ef:46:e6:b2:79:a0:d0:9d:56:22:de:92:80:a8: 0d:e3:29:3c:3d:31:30:4a:e2:9a:43:1c:96:04:9b: 5a:71:ca:33:cd:b1:bf:1b:2f:ad:8e:95:17:dd:55: 94:cc:f9:12:69:02:00:96:c3:11:99:ed:f5:8a:d7: de:91:3f:20:fe:32:c6:fd:21:56:9c:2b:0c:45:81: 27:03:86:ac:3e:e9:2d:cd:9b:8e:2f:86:74:b4:7f: 11:c9:ec:ca:68:4e:de:3c:c6:4e:50:fb:8e:a9:3f: dd:ec:ba:35:bd:51:8a:98:03:6c:cc:7f:a3:a3:c5: 8b:1a:44:d4:69:d8:78:36:0e:28:a3:4d:4f:b7:50: f0:40:59:61:ab:dc:57:4e:ac:7c:3c:59:4e:2f:4a: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:E4:80:F2:88:29:3E:97:E6:BB:3A:25:49:43:0C:FE:11:56:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/f069f00f-676a-3490-bfe2-b5427e021c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 23.128.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:17:cb:c4:fb:a1:eb:98:22:4f:a7:90:ba:27:7c:c7:3c:d9: 3f:a9:16:74:59:73:fb:50:be:59:76:b1:83:ab:f6:1e:86:c5: 8e:5d:ec:a0:33:30:04:5c:cb:c3:f0:3d:c5:b0:80:e8:c5:c8: f9:25:1c:72:8c:d6:0a:d2:6f:19:25:7d:b9:b3:28:60:01:0d: a8:82:73:3b:9a:4b:53:e4:75:9a:e2:ba:d2:4f:84:e0:ef:c8: 39:15:31:49:0e:cd:a9:5c:65:0a:8a:e0:8b:6c:86:ae:f9:36: 14:b7:df:2c:65:ca:3f:b5:ca:63:b8:c5:e7:e2:13:e8:80:aa: ab:ea:4b:1b:60:bd:5b:4a:09:4d:20:39:c0:8c:71:13:76:aa: 85:79:42:21:0a:73:f2:40:1b:9f:a4:dc:bb:b8:62:73:95:6b: 63:6f:9f:0b:49:ba:42:c3:3d:8b:f2:cb:bb:19:94:8f:b5:a3: f6:c4:ec:88:7c:f9:74:1e:8f:39:b0:8d:ad:6a:88:84:d6:fd: a5:87:58:cf:7a:41:3b:94:df:44:27:23:84:3a:c7:b1:29:23: be:18:00:72:ad:5b:f2:d2:89:91:cf:6a:72:5c:c0:15:c9:5d: ff:47:c5:92:06:0e:04:0d:c0:eb:88:8c:2a:5a:ad:c8:12:7d: af:c3:6a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPBAwFNkcCk09YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MjdlNzY1OTYtMDczOS00NmVmLWIxMDgtOWU1ZjBkZGU3NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG8XeDj/Cs0WsNx12H5Q+tIYwNusdfw1vjBr s+Hx6Mm+iopaAo0Q2CYrPnKjMh4lPy9YkAhSbRrqQmDMAkkPkkZEdH+Jds9CB+Pu G9c4wpTRO0ki3SCYu3h+K/0c57ZRySY/J0lO8dCX70bmsnmg0J1WIt6SgKgN4yk8 PTEwSuKaQxyWBJtaccozzbG/Gy+tjpUX3VWUzPkSaQIAlsMRme31itfekT8g/jLG /SFWnCsMRYEnA4asPuktzZuOL4Z0tH8RyezKaE7ePMZOUPuOqT/d7Lo1vVGKmANs zH+jo8WLGkTUadh4Ng4oo01Pt1DwQFlhq9xXTqx8PFlOL0oYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHu5IDyiCk+l+a7OiVJQwz+EVboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvZjA2OWYwMGYtNjc2YS0z NDkwLWJmZTItYjU0MjdlMDIxYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4Xy8T7oeuYIk+nkLonfMc82T+pFnRZc/tQvll2sYOr9h6GxY5d7KAz MARcy8PwPcWwgOjFyPklHHKM1grSbxklfbmzKGABDaiCczuaS1PkdZriutJPhODv yDkVMUkOzalcZQqK4Itshq75NhS33yxlyj+1ymO4xefiE+iAqqvqSxtgvVtKCU0g OcCMcRN2qoV5QiEKc/JAG5+k3Lu4YnOVa2NvnwtJukLDPYvyy7sZlI+1o/bE7Ih8 +XQejzmwja1qiITW/aWHWM96QTuU30QnI4Q6x7EpI74YAHKtW/LSiZHPanJcwBXJ Xf9HxZIGDgQNwOuIjCparcgSfa/Dar0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:48:38 2025 by rpki-client