$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa File: 1f4fa054-5b55-3502-aeef-38673b6dda28.roa (raw, json) Hash identifier: mGr8wUVrmnH0FpKHu6EiUz602E3hI6f03HkcW36HJxY= Subject key identifier: A5:31:29:8C:35:6F:1E:B7:9F:76:00:8C:10:5C:68:D4:B2:CF:A0:06 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F4328584B9E07D11DB8F01081D0208180 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 23.128.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d1:1d:b8:f0:10:81:d0:20:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=99f7488e-17d4-448e-ba40-95e204a58df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3a:ae:c7:12:8f:91:02:60:83:1b:9f:97:21: 25:68:55:02:96:43:90:7f:d3:12:55:d5:46:68:a0: f0:4a:47:98:33:8f:29:4d:c5:9a:9c:47:ce:9b:af: 42:ee:10:e4:74:b4:23:7d:a7:b4:5d:a3:2f:47:e7: a6:f9:17:58:8f:c6:6f:2b:56:10:fb:0f:01:6d:fe: 50:1d:4f:43:79:09:10:9a:eb:fd:fe:90:05:76:12: d6:61:17:78:3d:e4:f8:99:f9:24:c4:74:78:c5:9f: 34:97:0d:be:2f:bd:8f:2c:2e:44:99:67:a7:c8:91: fe:5c:3c:de:69:c5:b4:ba:37:44:62:cd:58:99:ba: 12:a6:fc:34:a3:98:0b:3e:dd:fb:ae:7b:62:78:32: db:83:a4:a3:9d:46:b6:9b:57:c2:48:bc:32:5a:4d: e8:16:e1:ef:ef:b7:57:3c:69:89:66:7d:a8:7c:43: 0b:e2:20:fb:1c:18:ed:d4:40:a5:d1:69:52:b4:f0: 6a:b9:1a:dc:be:75:eb:72:46:9d:56:d0:a4:03:c7: 8c:32:6e:ae:70:70:6c:49:c1:ea:11:73:ac:04:7f: d5:97:a8:4b:45:7e:87:e3:11:b9:1d:70:8f:54:c8: 87:dd:ce:46:5d:a5:5c:f6:5f:7d:56:6c:5b:07:d1: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:31:29:8C:35:6F:1E:B7:9F:76:00:8C:10:5C:68:D4:B2:CF:A0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 23.128.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0b:06:3b:4a:32:62:de:4b:34:5f:73:35:54:f1:70:f6:f0: 0f:b3:51:b2:fe:49:91:e5:a2:4f:18:8f:31:2a:e0:f9:ad:54: 1d:47:b3:5d:f5:32:50:24:22:f6:20:3b:66:61:c4:dd:1f:7a: 27:9f:7d:48:9a:e8:d1:ba:18:8c:29:cc:1f:1c:d4:3f:8e:72: 2f:b6:c4:4a:fb:e3:9b:44:32:db:91:55:0d:ee:b0:6b:db:c8: 10:fe:e8:af:3b:f4:94:79:f3:45:58:f2:0e:57:45:7e:cf:0c: 8c:c2:b5:82:01:63:aa:40:5d:81:0b:66:8f:8c:c6:19:de:63: 41:f8:ff:e4:e0:9b:8d:b0:6a:bb:81:3d:f7:3e:8d:32:9d:e7: b9:2f:3d:99:01:bb:f9:6a:60:b3:14:e9:e7:63:ac:bd:e5:aa: 0a:85:c7:e3:1b:70:73:ce:64:a7:69:13:83:d3:96:2f:0f:c5: e6:2e:65:30:8d:8e:3f:e5:3d:de:ae:0c:e8:49:37:ea:3a:c2: 4b:fa:c0:5a:18:d9:89:04:29:cb:62:da:0a:74:e6:f6:bd:49: 4a:2d:30:1a:3a:57:25:bf:3b:df:2d:c6:75:bc:89:41:9c:a9: 23:fc:d2:d2:ef:07:74:3d:76:11:2f:49:a7:f7:d6:34:bc:b7: 11:a8:1e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9EduPAQgdAggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OTlmNzQ4OGUtMTdkNC00NDhlLWJhNDAtOTVlMjA0YTU4ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDquxxKPkQJggxuflyElaFUClkOQf9MSVdVG aKDwSkeYM48pTcWanEfOm69C7hDkdLQjfae0XaMvR+em+RdYj8ZvK1YQ+w8Bbf5Q HU9DeQkQmuv9/pAFdhLWYRd4PeT4mfkkxHR4xZ80lw2+L72PLC5EmWenyJH+XDze acW0ujdEYs1YmboSpvw0o5gLPt37rntieDLbg6SjnUa2m1fCSLwyWk3oFuHv77dX PGmJZn2ofEML4iD7HBjt1ECl0WlStPBquRrcvnXrckadVtCkA8eMMm6ucHBsScHq EXOsBH/Vl6hLRX6H4xG5HXCPVMiH3c5GXaVc9l99VmxbB9FEJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUxKYw1bx63n3YAjBBcaNSyz6AGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWY0ZmEwNTQtNWI1NS0z NTAyLWFlZWYtMzg2NzNiNmRkYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQLBjtKMmLeSzRfczVU8XD28A+zUbL+SZHlok8YjzEq4PmtVB1Hs131 MlAkIvYgO2ZhxN0feieffUia6NG6GIwpzB8c1D+Oci+2xEr745tEMtuRVQ3usGvb yBD+6K879JR580VY8g5XRX7PDIzCtYIBY6pAXYELZo+MxhneY0H4/+Tgm42waruB Pfc+jTKd57kvPZkBu/lqYLMU6edjrL3lqgqFx+MbcHPOZKdpE4PTli8PxeYuZTCN jj/lPd6uDOhJN+o6wkv6wFoY2YkEKcti2gp05va9SUotMBo6VyW/O98txnW8iUGc qSP80tLvB3Q9dhEvSaf31jS8txGoHpk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:06:53 2025 by rpki-client