$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa File: 7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json) Hash identifier: 24oRBzAHV+P9UHpnsb/TGOKatP2Sd59HO5IA2MH3Ge0= Subject key identifier: 12:7B:68:CA:37:84:46:78:A3:53:09:6C:CD:B0:12:49:D1:99:9A:98 Certificate issuer: /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687 Certificate serial: 010D0C9F4328584B99D787A71417484EBE4B8600 Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398898 IP address blocks: 23.168.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:87:a7:14:17:48:4e:be:4b:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9bf9eb63-1545-43c6-9fcc-ad3e65cbc814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:21:49:4f:55:94:c2:99:b3:f4:45:3d:3c: 3b:bc:8d:74:37:75:0a:95:83:d1:50:f3:3a:5f:2e: ef:14:ab:73:65:6e:63:f8:04:86:22:24:1c:65:9c: d8:1c:61:04:11:94:b8:e5:4b:7d:f4:f8:d5:4f:df: 30:64:6d:47:5e:85:7a:a4:cb:74:51:28:ea:05:5e: fb:73:b0:81:e3:f0:4a:30:36:c4:0a:aa:67:11:1e: e3:b3:81:78:92:2a:73:df:49:d7:80:4e:cd:55:d8: 88:ef:f7:a1:ba:b5:aa:63:fd:58:14:b7:ff:a6:ce: f2:85:36:15:0a:60:58:5a:55:e4:91:36:a7:b9:4a: ce:12:e0:7f:eb:d3:bf:9b:46:7d:9b:43:fb:d6:97: 83:b3:dd:52:98:8a:b0:17:e6:b0:d4:e4:2d:40:03: e3:22:da:84:61:9d:94:78:a3:3a:b6:bd:fd:d0:a4: 35:a1:af:76:0c:db:f3:f3:e0:0d:5f:a9:94:5c:43: 8e:2e:4d:bc:25:33:bc:7e:d9:e6:c2:1c:2b:46:7d: d9:c4:6a:7c:35:fe:2b:2d:3f:6d:0f:0e:a3:53:f3: 20:55:a7:25:0a:86:3e:7a:fc:e5:23:3b:3f:4d:11: 7c:bb:f7:e8:29:0b:9e:5d:ac:28:a1:3c:8b:1b:1b: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:68:CA:37:84:46:78:A3:53:09:6C:CD:B0:12:49:D1:99:9A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl X509v3 Authority Key Identifier: keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer sbgp-ipAddrBlock: critical IPv4: 23.168.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:26:0b:b3:bc:4b:45:ab:64:54:14:a5:76:ae:62:40:33:fc: fe:c5:d1:49:3e:7d:98:d2:66:37:47:3e:8a:e2:98:5c:29:95: 97:f5:2e:1b:3e:0b:6e:b2:82:5e:fa:60:5d:d4:6a:7d:de:ed: c8:37:a3:b6:b2:52:84:91:1e:43:da:ef:99:9e:f6:9e:0f:31: ce:10:19:05:58:b9:87:72:06:5e:1a:9d:c8:b3:81:66:6c:02: ff:5e:12:cd:61:7f:e6:57:fd:64:5e:6c:5b:db:41:5f:d2:fb: 25:aa:4a:ca:0a:1f:1e:0f:9f:2a:7e:9e:2b:d3:e8:c7:12:81: 65:04:76:a1:24:bb:1d:c0:53:1b:e4:05:2d:cf:d3:bf:ae:7e: a8:08:94:67:85:9d:2e:2b:fa:3e:9a:ec:16:43:09:e5:81:d0: 7b:75:d5:50:89:76:96:3f:68:77:84:77:19:a3:a5:63:33:e6: 30:9f:f5:e9:8b:e4:dc:83:85:b2:79:8c:07:31:1a:f7:d1:aa: c3:77:9e:6c:2f:7e:17:6b:ff:e0:60:63:77:1c:7f:c1:66:f8: 96:21:7b:c4:74:31:5b:22:39:e0:c2:98:b3:fa:b0:6d:10:68: 18:33:40:ab:58:ac:6e:1e:ca:c4:6b:74:f3:af:29:d5:1f:6f: 29:94:c4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14enFBdITr5LhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NjOWYzYmQtNzVkOC00MWE1LWJlYzgtMmU3YWY2NWY1 Njg3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWJmOWViNjMtMTU0NS00M2M2LTlmY2MtYWQzZTY1Y2JjODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNwhSU9VlMKZs/RFPTw7vI10N3UKlYPRUPM6 Xy7vFKtzZW5j+ASGIiQcZZzYHGEEEZS45Ut99PjVT98wZG1HXoV6pMt0USjqBV77 c7CB4/BKMDbECqpnER7js4F4kipz30nXgE7NVdiI7/ehurWqY/1YFLf/ps7yhTYV CmBYWlXkkTanuUrOEuB/69O/m0Z9m0P71peDs91SmIqwF+aw1OQtQAPjItqEYZ2U eKM6tr390KQ1oa92DNvz8+ANX6mUXEOOLk28JTO8ftnmwhwrRn3ZxGp8Nf4rLT9t Dw6jU/MgVaclCoY+evzlIzs/TRF8u/foKQueXawooTyLGxtXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ7aMo3hEZ4o1MJbM2wEknRmZqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Y2M5 ZjNiZC03NWQ4LTQxYTUtYmVjOC0yZTdhZjY1ZjU2ODcvN2ZhMGNjMzAtNjVlMy0z Nzk0LWIxNWQtOTkxZDhmMGE1NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2NjOWYzYmQtNzVkOC00MWE1LWJl YzgtMmU3YWY2NWY1Njg3LzdjYzlmM2JkLTc1ZDgtNDFhNS1iZWM4LTJlN2FmNjVm NTY4Ny5jcmwwHwYDVR0jBBgwFoAUCwl5WN7NNi8nTNFDF2w3yy4FutAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83Y2M5ZjNiZC03NWQ4LTQxYTUtYmVjOC0yZTdh ZjY1ZjU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQmC7O8S0WrZFQUpXauYkAz/P7F0Uk+fZjSZjdHPorimFwplZf1Lhs+ C26ygl76YF3Uan3e7cg3o7ayUoSRHkPa75me9p4PMc4QGQVYuYdyBl4ancizgWZs Av9eEs1hf+ZX/WRebFvbQV/S+yWqSsoKHx4Pnyp+nivT6McSgWUEdqEkux3AUxvk BS3P07+ufqgIlGeFnS4r+j6a7BZDCeWB0Ht11VCJdpY/aHeEdxmjpWMz5jCf9emL 5NyDhbJ5jAcxGvfRqsN3nmwvfhdr/+BgY3ccf8Fm+JYhe8R0MVsiOeDCmLP6sG0Q aBgzQKtYrG4eysRrdPOvKdUfbymUxJI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:50 2025 by rpki-client