$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa File: 3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json) Hash identifier: eWxMdLYe2Go0wGKhYKFbYvkB4MV7XKvVufqIbEkYfzY= Subject key identifier: 6C:7E:12:D4:37:FD:3A:41:BD:3C:3F:EB:DE:D7:69:F9:B3:E4:3E:AD Certificate issuer: /CN=903dbcce-bb2a-403e-ad25-67981ea1de21 Certificate serial: 010D0C9F4328584BAEC7C435EA1D50160936BB00 Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 149020 IP address blocks: 23.131.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c4:35:ea:1d:50:16:09:36:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=88d40123-3a58-42c5-8875-ff39ec73f8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:d8:45:f8:0f:9c:f9:cb:84:9f:8d:8b:ed: 02:5d:6d:19:ec:7b:e5:3a:fa:06:9b:73:3a:8e:88: 0e:66:17:e6:81:a9:6b:c3:69:91:be:32:39:c5:8b: 07:e5:e6:98:84:0b:d3:07:0b:96:cf:a5:0d:44:d9: 65:58:2f:f0:fa:2c:d6:a9:54:2d:ff:5f:42:1b:5c: 5f:9f:65:df:a8:37:c2:e1:13:7e:5d:1e:71:a3:02: a5:f4:f5:1c:6a:6e:df:7f:92:d1:0c:f3:c0:9e:c5: 7f:79:a0:60:44:5c:62:26:4c:83:1b:96:be:8f:43: 5e:5c:6c:0a:12:32:ba:ea:c4:59:a5:37:be:0c:7f: 1d:c4:a3:15:2f:20:0e:37:1a:6b:bc:a8:0d:f4:76: fc:8b:ef:4b:27:9a:fb:c0:4e:7a:11:1f:65:43:bb: d3:cc:b4:ec:e6:ff:3a:b1:c2:0b:28:40:af:74:31: 4c:51:57:9b:13:d8:7b:6c:54:1f:b5:35:e0:52:a4: 39:96:35:28:81:d5:01:5d:84:a2:7d:ad:c8:a6:2d: 8c:b1:e7:4c:43:8a:e1:2c:d4:0b:1a:2c:59:08:07: 57:65:07:8e:7e:81:01:63:d2:5e:f6:df:3d:1d:e1: 97:44:41:9e:36:2e:aa:1b:0a:4d:f5:25:47:09:72: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7E:12:D4:37:FD:3A:41:BD:3C:3F:EB:DE:D7:69:F9:B3:E4:3E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl X509v3 Authority Key Identifier: keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer sbgp-ipAddrBlock: critical IPv4: 23.131.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f7:b0:fe:93:8a:64:3a:a8:a3:8c:94:dc:dd:b4:65:29:a0: 63:3f:aa:b3:f6:e0:e2:5e:d0:45:08:b9:98:8a:b7:e8:86:9f: 4a:2e:40:80:d2:7c:8a:c8:e3:0c:5e:66:21:29:d5:91:df:3e: a7:78:de:32:6c:1d:12:2f:04:7b:2f:fa:22:69:ae:78:27:7c: ff:11:49:30:45:15:a2:78:bd:ce:d9:d3:7a:ac:ed:3a:85:5c: 3f:a1:ea:b8:b7:f7:ca:75:d7:b9:15:85:c0:34:e6:4c:41:02: 37:78:ec:2d:86:6e:f9:c3:7e:83:78:1f:51:78:44:cd:32:4d: 10:de:fe:e6:13:cd:05:22:9d:41:01:09:b3:cd:10:bc:ce:96: aa:71:1a:49:d4:3c:6b:9e:b5:13:58:9e:98:b9:0d:4b:fd:83: 97:9b:70:63:b3:cc:2f:74:eb:41:55:51:2e:bd:ba:79:4f:03: 76:a9:2f:73:65:ec:05:20:bc:23:57:3f:a9:72:7a:dc:15:e0: 4e:a6:c9:80:90:62:67:bb:c4:05:4d:8e:87:f5:36:9c:08:ac: 26:04:53:be:f8:0d:04:ba:86:3b:0e:87:0f:e2:41:68:b2:04: 7e:32:00:38:b2:b7:34:62:89:76:1c:6d:f8:e7:69:e8:a3:7e: 6d:33:29:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8Q16h1QFgk2uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZGJjY2UtYmIyYS00MDNlLWFkMjUtNjc5ODFlYTFk ZTIxMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ODhkNDAxMjMtM2E1OC00MmM1LTg4NzUtZmYzOWVjNzNmOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbrYRfgPnPnLhJ+Ni+0CXW0Z7HvlOvoGm3M6 jogOZhfmgalrw2mRvjI5xYsH5eaYhAvTBwuWz6UNRNllWC/w+izWqVQt/19CG1xf n2XfqDfC4RN+XR5xowKl9PUcam7ff5LRDPPAnsV/eaBgRFxiJkyDG5a+j0NeXGwK EjK66sRZpTe+DH8dxKMVLyAONxprvKgN9Hb8i+9LJ5r7wE56ER9lQ7vTzLTs5v86 scILKECvdDFMUVebE9h7bFQftTXgUqQ5ljUogdUBXYSifa3Ipi2MsedMQ4rhLNQL GixZCAdXZQeOfoEBY9Je9t89HeGXREGeNi6qGwpN9SVHCXI9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx+EtQ3/TpBvTw/697Xafmz5D6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MDNk YmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4MWVhMWRlMjEvMzU1NGE1NzAtZGZkZS0z ZjFiLWJiMzctMDVmNmJjOWFiMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTAzZGJjY2UtYmIyYS00MDNlLWFk MjUtNjc5ODFlYTFkZTIxLzkwM2RiY2NlLWJiMmEtNDAzZS1hZDI1LTY3OTgxZWEx ZGUyMS5jcmwwHwYDVR0jBBgwFoAUtdTji+hhvNy218k9W6s+zWZMaW4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MDNkYmNjZS1iYjJhLTQwM2UtYWQyNS02Nzk4 MWVhMWRlMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf3sP6TimQ6qKOMlNzdtGUpoGM/qrP24OJe0EUIuZiKt+iGn0ouQIDS fIrI4wxeZiEp1ZHfPqd43jJsHRIvBHsv+iJprngnfP8RSTBFFaJ4vc7Z03qs7TqF XD+h6ri398p117kVhcA05kxBAjd47C2GbvnDfoN4H1F4RM0yTRDe/uYTzQUinUEB CbPNELzOlqpxGknUPGuetRNYnpi5DUv9g5ebcGOzzC9060FVUS69unlPA3apL3Nl 7AUgvCNXP6lyetwV4E6myYCQYme7xAVNjof1NpwIrCYEU774DQS6hjsOhw/iQWiy BH4yADiytzRiiXYcbfjnaeijfm0zKdw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:01 2025 by rpki-client