$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa File: cf670401-9d4b-3637-856f-5c947821a74c.roa (raw, json) Hash identifier: HSb3SdB49+SG6tGabeeYCdlO/w+Rl8ZIx2dTp2xJzsE= Subject key identifier: 53:4B:1A:83:83:EE:A4:3F:05:B1:F1:E1:8E:A9:89:36:97:6A:D7:7D Certificate issuer: /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Certificate serial: 010D0C9F4328584B92DCF802F47E340BCA448700 Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 15333 IP address blocks: 23.189.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f8:02:f4:7e:34:0b:ca:44:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=bbfd1695-d6d8-4536-be62-638d252ed88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:2b:4c:2f:92:d6:b6:7a:c7:36:58:ef:77: 41:4b:fc:33:f8:48:d2:05:e6:6c:49:9d:9e:0c:b3: 44:1c:f6:f8:e5:2f:3d:c2:91:09:d8:9d:5d:ed:12: 01:26:80:2c:24:fb:3e:bb:3f:6f:e6:2a:fb:d0:61: 7c:23:b4:17:b1:2a:51:a9:7f:4f:a4:fa:6c:dc:20: 8d:7d:cb:47:13:bc:48:9a:85:ba:24:d9:38:5e:f3: f2:8e:c7:d9:43:03:70:f1:55:61:e1:77:7c:61:0c: 2a:4e:2b:9d:86:fc:db:f9:88:b1:e4:7c:5f:af:4e: fc:7c:c6:78:5c:0b:96:77:e4:19:e8:f0:c3:c0:21: 61:1d:0e:5a:a5:b8:bb:51:6d:15:b1:96:50:df:9a: a4:f6:c4:10:d0:5e:dc:ea:05:09:76:1b:2c:44:bc: d6:5f:6f:41:86:67:fb:dd:fa:7f:5d:29:21:ad:1c: b6:8d:45:01:20:47:df:d1:61:92:a1:56:b8:18:10: 97:5b:c7:30:20:b3:6b:09:da:8a:77:65:9f:16:83: 00:fe:d1:d6:dd:ad:0e:4c:d5:b3:f7:24:74:ee:33: ac:bb:c0:bc:c7:9e:62:db:41:a6:ed:a7:ce:39:01: 5a:f7:b4:a2:16:1c:b3:91:de:a6:c1:26:5c:ce:64: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:1A:83:83:EE:A4:3F:05:B1:F1:E1:8E:A9:89:36:97:6A:D7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl X509v3 Authority Key Identifier: keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer sbgp-ipAddrBlock: critical IPv4: 23.189.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:eb:65:ef:c9:a7:8c:02:3e:71:5c:ac:7d:06:17:0d:40:2f: a1:39:4c:ff:47:f8:1d:c7:5b:bc:5f:df:4b:9e:a9:06:21:60: 45:0e:da:18:af:da:1c:78:03:d4:8e:d0:19:17:6d:9c:38:10: 78:48:6a:8e:ab:0c:34:58:3b:c8:ae:47:b6:09:94:32:23:2a: e1:29:d1:b8:27:9f:b5:60:26:51:2b:a7:e7:cf:59:50:ca:26: 06:42:31:b8:61:a5:27:5d:0f:44:b7:00:eb:f1:0f:9d:04:bb: 20:0d:7a:5a:02:33:8f:51:e7:81:b3:7d:f0:ae:9c:2d:1e:61: 89:fd:c7:e9:19:54:f5:f8:7d:d6:9d:a1:18:1c:3c:e9:cf:3a: 89:34:12:27:04:bc:b6:5c:89:d7:53:d1:93:26:9d:82:a0:6b: e1:38:de:18:47:19:50:fd:ab:73:98:a8:69:3f:5b:c6:34:54: 81:d8:86:90:74:21:36:f6:87:40:a0:cf:fa:84:68:68:24:c9: d2:6e:04:df:d6:6b:39:35:d9:cd:98:c2:02:8b:e9:c6:85:a1: 7e:16:2b:6e:36:6e:54:44:79:95:df:21:1d:a1:8f:91:af:e5: 2a:49:0a:a9:a0:9e:92:5d:a8:85:d3:5b:ef:19:f0:bc:8f:1a: a8:ae:c9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PgC9H40C8pEhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzYWZjYjYtMDhmYi00YmEyLTlkOTYtYTRlMGMzYzFl Mjk5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmJmZDE2OTUtZDZkOC00NTM2LWJlNjItNjM4ZDI1MmVkODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8rTC+S1rZ6xzZY73dBS/wz+EjSBeZsSZ2e DLNEHPb45S89wpEJ2J1d7RIBJoAsJPs+uz9v5ir70GF8I7QXsSpRqX9PpPps3CCN fctHE7xImoW6JNk4XvPyjsfZQwNw8VVh4Xd8YQwqTiudhvzb+Yix5Hxfr078fMZ4 XAuWd+QZ6PDDwCFhHQ5apbi7UW0VsZZQ35qk9sQQ0F7c6gUJdhssRLzWX29Bhmf7 3fp/XSkhrRy2jUUBIEff0WGSoVa4GBCXW8cwILNrCdqKd2WfFoMA/tHW3a0OTNWz 9yR07jOsu8C8x55i20Gm7afOOQFa97SiFhyzkd6mwSZczmStzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNLGoOD7qQ/BbHx4Y6piTaXatd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNh ZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUwYzNjMWUyOTkvY2Y2NzA0MDEtOWQ0Yi0z NjM3LTg1NmYtNWM5NDc4MjFhNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzYWZjYjYtMDhmYi00YmEyLTlk OTYtYTRlMGMzYzFlMjk5L2ViM2FmY2I2LTA4ZmItNGJhMi05ZDk2LWE0ZTBjM2Mx ZTI5OS5jcmwwHwYDVR0jBBgwFoAU8a57D7k/Lwnk1YXpfkaIRDqFZa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNhZmNiNi0wOGZiLTRiYTItOWQ5Ni1hNGUw YzNjMWUyOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLrZe/Jp4wCPnFcrH0GFw1AL6E5TP9H+B3HW7xf30ueqQYhYEUO2hiv 2hx4A9SO0BkXbZw4EHhIao6rDDRYO8iuR7YJlDIjKuEp0bgnn7VgJlErp+fPWVDK JgZCMbhhpSddD0S3AOvxD50EuyANeloCM49R54GzffCunC0eYYn9x+kZVPX4fdad oRgcPOnPOok0EicEvLZciddT0ZMmnYKga+E43hhHGVD9q3OYqGk/W8Y0VIHYhpB0 ITb2h0Cgz/qEaGgkydJuBN/Wazk12c2YwgKL6caFoX4WK242blREeZXfIR2hj5Gv 5SpJCqmgnpJdqIXTW+8Z8LyPGqiuyVw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:03 2025 by rpki-client