$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33454899-3b49-3a28-b444-34936ab73a8d.roa File: 33454899-3b49-3a28-b444-34936ab73a8d.roa (raw, json) Hash identifier: nbv/fkTtS/G4CT8GAr9eQh3ltxA3fHMtlgRBAeYpw4E= Subject key identifier: 46:9B:51:91:5F:4B:93:AA:EB:E0:FC:A2:69:46:56:A7:65:AB:BD:BC Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584BBFCB44898A9EA1190E4C3380 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33454899-3b49-3a28-b444-34936ab73a8d.roa Signing time: Tue 04 Nov 2025 15:16:39 +0000 ROA not before: Tue 04 Nov 2025 15:16:39 +0000 ROA not after: Mon 02 Feb 2026 15:16:39 +0000 asID: 19157 IP address blocks: 23.85.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:cb:44:89:8a:9e:a1:19:0e:4c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Nov 4 15:16:39 2025 GMT Not After : Feb 2 15:16:39 2026 GMT Subject: CN=0fab06fb-0652-4cf6-be6a-97d7766a20bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:03:1a:e7:b7:e4:69:ef:e2:18:57:91:b7: ec:2d:7d:89:76:14:92:4d:02:79:f0:a2:37:84:76: 4c:50:f3:af:39:bc:73:59:5e:f9:be:1b:11:62:ef: 3f:f4:61:62:56:17:fb:e6:56:e5:4d:29:37:b9:fd: e0:5b:fa:d6:cc:9f:22:c6:ba:2b:4a:fc:92:17:5d: a2:b7:1e:f7:f2:55:6d:6e:e1:77:84:28:09:d9:26: e5:ba:a3:0f:4a:9e:ed:d5:a7:86:ca:b9:c9:16:c3: 8c:1b:6f:c0:53:95:17:2a:45:ee:0d:39:b6:7e:c9: e8:e5:79:14:2d:70:78:41:61:df:53:a1:00:e1:33: 34:7e:14:90:65:ed:3c:6f:7d:7e:c4:67:ea:33:a7: 37:e6:fc:4f:37:0e:76:c8:bd:93:70:d1:f2:7d:88: 32:df:32:8d:66:68:9b:26:ea:21:04:e2:65:5d:f3: 3b:7a:11:0c:82:de:e2:e4:5d:ee:df:ab:7d:81:ef: de:a7:14:24:9c:f4:1f:de:ec:de:e4:a4:e5:82:73: 17:fb:de:d2:4d:f7:4c:5a:ba:c3:ad:3b:4e:c3:af: d5:3e:cb:6f:92:04:86:f6:b5:33:15:68:52:cf:b9: f2:72:5b:0f:67:33:de:85:9b:bb:ad:d1:b9:50:ff: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:51:91:5F:4B:93:AA:EB:E0:FC:A2:69:46:56:A7:65:AB:BD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/33454899-3b49-3a28-b444-34936ab73a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 23.85.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:98:f5:93:39:eb:fb:2f:36:d6:b9:e2:00:75:7c:03:c8:c1: a0:ac:d6:8b:5d:95:76:a5:e3:ca:2b:86:ba:43:b9:1e:a8:80: 17:f3:8e:1d:84:7b:89:55:2b:ae:e9:2e:31:be:f0:6a:30:f7: 1b:24:22:17:05:3b:3d:23:e5:b1:9a:77:e5:4e:0c:38:a1:5c: f5:be:78:9c:97:e6:a7:c7:f3:bb:f8:3a:56:61:e1:00:a5:54: 5c:14:30:12:b9:9e:a4:54:5c:36:7b:8f:bf:83:fa:b5:6a:51: 99:ae:31:5f:97:97:c1:59:e3:e7:65:2b:3c:3e:4f:ec:27:8a: 5e:2f:7e:3d:d1:6b:d6:83:a2:e6:c3:36:c0:bf:8a:3a:5e:eb: 71:cf:1a:7c:80:96:1c:c4:76:05:a9:47:a1:70:02:a3:59:be: a3:e8:52:b4:44:9a:80:76:06:35:cd:ce:c4:8d:ec:20:11:80: f4:0a:db:8a:35:11:47:25:5c:06:d8:cc:c7:e3:88:c2:a5:f9: 7d:e1:84:c5:8a:1b:a0:23:c6:d0:63:d7:b0:4a:2b:84:87:6e: 57:f6:f4:96:22:4e:6e:aa:2d:f1:b0:94:f2:b4:bc:63:aa:7e: 99:03:d7:13:d5:3e:e7:15:01:17:06:22:e2:cc:a2:3f:c1:11: 74:c3:5f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/y0SJip6hGQ5MM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTEwNDE1MTYzOVoXDTI2MDIwMjE1MTYzOVowLzEtMCsGA1UEAxMk MGZhYjA2ZmItMDY1Mi00Y2Y2LWJlNmEtOTdkNzc2NmEyMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbgDGue35Gnv4hhXkbfsLX2JdhSSTQJ58KI3 hHZMUPOvObxzWV75vhsRYu8/9GFiVhf75lblTSk3uf3gW/rWzJ8ixrorSvySF12i tx738lVtbuF3hCgJ2SbluqMPSp7t1aeGyrnJFsOMG2/AU5UXKkXuDTm2fsno5XkU LXB4QWHfU6EA4TM0fhSQZe08b31+xGfqM6c35vxPNw52yL2TcNHyfYgy3zKNZmib JuohBOJlXfM7ehEMgt7i5F3u36t9ge/epxQknPQf3uze5KTlgnMX+97STfdMWrrD rTtOw6/VPstvkgSG9rUzFWhSz7nyclsPZzPehZu7rdG5UP/McQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEabUZFfS5Oq6+D8omlGVqdlq728MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzM0NTQ4OTktM2I0OS0z YTI4LWI0NDQtMzQ5MzZhYjczYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKY9ZM56/svNta54gB1fAPIwaCs1otdlXal48orhrpDuR6ogBfzjh2E e4lVK67pLjG+8Gow9xskIhcFOz0j5bGad+VODDihXPW+eJyX5qfH87v4OlZh4QCl VFwUMBK5nqRUXDZ7j7+D+rVqUZmuMV+Xl8FZ4+dlKzw+T+wnil4vfj3Ra9aDoubD NsC/ijpe63HPGnyAlhzEdgWpR6FwAqNZvqPoUrREmoB2BjXNzsSN7CARgPQK24o1 EUclXAbYzMfjiMKl+X3hhMWKG6AjxtBj17BKK4SHblf29JYiTm6qLfGwlPK0vGOq fpkD1xPVPucVARcGIuLMoj/BEXTDX6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 06:39:48 2025 by rpki-client