$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa File: cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (raw, json) Hash identifier: XhQ5lLM5vRwJ+1QHLHocXpOiEejtK6wRvyygwKgMYog= Subject key identifier: CE:A7:EA:05:45:1B:DD:06:61:09:A8:44:35:D0:95:7F:B4:88:A4:CB Certificate issuer: /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Certificate serial: 010D0C9F4328584BA39D22FDB9D00DDC68015500 Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 39937 IP address blocks: 23.160.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:22:fd:b9:d0:0d:dc:68:01:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0422f6cd-3a6b-4d7a-89e6-387112cbf1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:b6:99:eb:1d:fe:04:23:1f:9b:04:79:ef: d0:ee:d7:2e:9e:10:8f:be:7b:81:f8:0b:9b:1e:d7: a1:a3:80:69:c9:f3:82:68:3c:dc:c0:6f:d6:ef:c0: 65:6a:c8:5d:dc:ec:b4:89:18:65:05:2d:5e:96:0b: 18:8c:a0:3f:1e:b9:cb:1a:ec:79:5f:e3:4b:93:72: 1f:59:6a:94:3c:cc:b2:42:7e:ca:d3:3e:0f:5e:2d: 70:a8:42:82:f7:5c:e8:4b:36:0e:dc:99:2f:ef:41: ba:6d:46:73:51:13:bb:d5:14:2f:da:20:f8:ec:7c: c6:20:fa:41:f9:d0:e3:d9:f3:c4:b8:59:1d:99:03: 50:d2:a4:26:a8:cb:0f:30:2b:19:70:a4:7d:0a:66: 26:31:90:b5:46:c6:2f:76:f0:60:62:30:42:55:c0: a3:a5:02:84:50:24:28:fc:9a:84:f9:ab:c0:49:7c: 97:26:ec:4a:5b:dd:49:19:36:41:15:3e:14:1c:6b: 04:1a:73:db:1b:fe:90:88:df:e1:2d:b1:8f:a7:b2: 19:69:fa:38:57:f8:03:7f:87:52:e8:2e:aa:01:d4: fa:53:ca:d2:91:f5:9f:c4:5f:ba:33:29:2b:99:cd: 8b:49:22:1a:17:f8:5e:f7:1c:b7:b9:eb:b3:6d:03: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A7:EA:05:45:1B:DD:06:61:09:A8:44:35:D0:95:7F:B4:88:A4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl X509v3 Authority Key Identifier: keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer sbgp-ipAddrBlock: critical IPv4: 23.160.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:93:ef:f7:80:76:d0:78:1d:83:fc:f5:6e:33:e0:b3:9b: c7:82:ae:79:cc:65:fc:b3:ff:77:12:31:6b:b0:8c:19:40:60: 55:e0:b0:64:87:2c:bd:95:7f:d3:67:c5:b2:d6:f5:12:73:d6: c3:8f:a8:fe:0b:d1:4f:1f:14:68:30:47:7f:1c:f4:e3:db:97: b0:58:37:f8:07:94:8e:a9:90:50:b5:12:b4:c2:d1:2b:d7:43: ea:64:7b:83:9d:b8:1e:2e:8a:f4:0c:d2:f3:48:ba:2b:9f:05: ff:c6:bd:28:2c:b0:05:0c:b4:b9:cc:51:56:82:d4:c2:80:c4: a5:4d:b2:dd:9d:83:f7:eb:31:1c:8a:66:d7:40:1a:7b:ee:4b: 0b:11:b1:40:cc:f9:4d:5d:c6:ce:a5:68:1b:3e:25:a5:b1:3a: 20:5d:20:7d:b4:a1:7b:e0:3c:bb:11:39:e7:f1:71:8d:23:20: c1:3d:ae:c9:96:91:33:61:d0:35:1c:65:93:db:ad:25:e6:6f: 5b:e8:b5:d8:8f:b3:2c:62:01:c4:8e:ae:7f:d6:98:c2:ba:73: bd:ce:bc:4a:87:98:09:dd:2a:66:3b:79:a6:2b:bb:98:ef:99: 4a:42:1a:a9:7b:9c:a9:74:82:c2:f0:3c:b9:aa:3e:81:b0:0b: bd:c9:41:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSL9udAN3GgBVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4 ZjYxMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDQyMmY2Y2QtM2E2Yi00ZDdhLTg5ZTYtMzg3MTEyY2JmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsty2mesd/gQjH5sEee/Q7tcunhCPvnuB+Aub Hteho4BpyfOCaDzcwG/W78Blashd3Oy0iRhlBS1elgsYjKA/HrnLGux5X+NLk3If WWqUPMyyQn7K0z4PXi1wqEKC91zoSzYO3Jkv70G6bUZzURO71RQv2iD47HzGIPpB +dDj2fPEuFkdmQNQ0qQmqMsPMCsZcKR9CmYmMZC1RsYvdvBgYjBCVcCjpQKEUCQo /JqE+avASXyXJuxKW91JGTZBFT4UHGsEGnPbG/6QiN/hLbGPp7IZafo4V/gDf4dS 6C6qAdT6U8rSkfWfxF+6Mykrmc2LSSIaF/he9xy3ueuzbQNzvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6n6gVFG90GYQmoRDXQlX+0iKTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4 NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvY2YwM2M0YmQtZWI3Yy0z Y2VlLTk5MDAtZDNjYzljNGQxMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4 OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy NTE1ODhmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnsk+/3gHbQeB2D/PVuM+Czm8eCrnnMZfyz/3cSMWuwjBlAYFXgsGSH LL2Vf9NnxbLW9RJz1sOPqP4L0U8fFGgwR38c9OPbl7BYN/gHlI6pkFC1ErTC0SvX Q+pke4OduB4uivQM0vNIuiufBf/GvSgssAUMtLnMUVaC1MKAxKVNst2dg/frMRyK ZtdAGnvuSwsRsUDM+U1dxs6laBs+JaWxOiBdIH20oXvgPLsROefxcY0jIME9rsmW kTNh0DUcZZPbrSXmb1votdiPsyxiAcSOrn/WmMK6c73OvEqHmAndKmY7eaYru5jv mUpCGql7nKl0gsLwPLmqPoGwC73JQX8= -----END CERTIFICATE-----Generated at Thu Nov 6 03:01:25 2025 by rpki-client