$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json) Hash identifier: rHtTx8P14zTlNAsauq0U2b9HtsaNKusFjtn3LsD3Ab0= Subject key identifier: FC:3B:E9:1A:BC:C7:7B:3A:9F:A0:A3:16:F1:DC:93:0B:8B:49:08:AF Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584BA39D07D4296309811AFA471C Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14297 IP address blocks: 199.189.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:07:d4:29:63:09:81:1a:fa:47:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2db5ba83-1115-4eca-968c-0260d18cfcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:57:32:7f:37:e8:00:42:c6:e1:6e:ce:70: 94:d7:76:b6:24:70:81:4c:25:a7:5f:ca:db:42:88: 5f:cf:e6:7d:6d:b2:d6:ec:f9:f6:3c:5b:bc:65:92: 19:da:9f:48:d9:11:e8:6b:07:9a:48:3a:7b:6b:29: c9:bc:ef:48:95:d2:9e:32:bc:9d:03:d1:bc:3e:a1: 56:56:45:a3:e1:c0:34:c9:92:3d:c2:c7:5c:6a:0c: 8b:4f:14:47:0f:ac:fa:0f:28:23:90:2b:6b:9d:a3: b4:68:8d:af:3a:11:9f:7d:7d:6d:25:ef:ff:72:9b: 8e:42:2a:35:64:4e:9d:9d:48:07:1c:b2:f4:63:ad: da:0b:60:ef:0a:73:73:a9:c3:f5:95:9a:db:4f:da: 6f:05:1b:18:a1:04:7e:d7:3c:5d:b5:82:d8:f9:44: 91:7c:19:a9:f1:8a:c1:9f:eb:e4:22:68:bf:1a:e5: 61:06:7d:d0:05:ec:ee:56:d8:2e:3f:96:8c:fc:db: dc:62:51:3e:05:79:ee:e1:c8:cd:3c:34:12:14:ac: 29:cd:f8:ac:67:c8:3d:fe:b3:95:14:3c:3d:05:ca: 05:3d:0c:b1:98:ec:3a:1d:c5:94:11:58:20:26:bb: ca:e5:a0:79:11:9e:45:37:fd:76:8e:46:5c:6a:d9: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3B:E9:1A:BC:C7:7B:3A:9F:A0:A3:16:F1:DC:93:0B:8B:49:08:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 199.189.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:32:90:89:1e:02:12:0c:07:b2:48:3d:f6:97:83:c1:24:27: dd:e9:20:84:07:d7:98:5f:af:91:a4:80:c1:2b:c4:a6:6f:5e: a2:11:91:48:0b:eb:ed:67:b8:b1:2f:77:8b:03:ee:85:7f:f0: 4f:42:78:69:3a:fe:15:94:0b:25:e4:dd:b4:75:f7:3e:f8:8e: 23:ad:ed:e8:d6:8a:9f:2d:a5:c4:6a:2f:68:e8:d7:6b:84:46: bd:35:38:47:3c:04:ec:72:f9:6b:45:28:e8:3c:4b:fb:f1:58: 0a:66:94:5a:1f:6e:a7:9c:73:15:37:a6:93:75:39:ef:97:52: 1e:11:6a:7e:99:21:36:7a:7e:36:93:06:f4:03:bf:6c:ff:c2: a2:b6:4d:e1:58:13:35:28:51:68:c5:e9:59:aa:91:ac:d2:86: f6:33:21:70:2d:cc:b2:2f:3f:7a:16:74:28:e5:34:52:81:ce: 65:b7:56:65:69:e7:29:a6:43:6c:3e:92:db:07:52:09:65:b2: dc:6d:2b:70:d4:9e:c8:a7:12:f0:c7:e8:e3:9a:07:f1:e3:cd: 28:c4:9d:e6:e8:d3:40:c9:3b:d3:a4:fd:7d:c6:21:64:e9:8b: 93:42:1d:2d:98:09:bb:a4:56:10:de:4f:a1:02:72:ec:9e:f0: 03:fd:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQfUKWMJgRr6RxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmRiNWJhODMtMTExNS00ZWNhLTk2OGMtMDI2MGQxOGNmY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuJXMn836ABCxuFuznCU13a2JHCBTCWnX8rb Qohfz+Z9bbLW7Pn2PFu8ZZIZ2p9I2RHoaweaSDp7aynJvO9IldKeMrydA9G8PqFW VkWj4cA0yZI9wsdcagyLTxRHD6z6DygjkCtrnaO0aI2vOhGffX1tJe//cpuOQio1 ZE6dnUgHHLL0Y63aC2DvCnNzqcP1lZrbT9pvBRsYoQR+1zxdtYLY+USRfBmp8YrB n+vkImi/GuVhBn3QBezuVtguP5aM/NvcYlE+BXnu4cjNPDQSFKwpzfisZ8g9/rOV FDw9BcoFPQyxmOw6HcWUEVggJrvK5aB5EZ5FN/12jkZcatlSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw76Rq8x3s6n6CjFvHckwuLSQivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzIzYWM1NTgtNjlmNS0z YzkyLTlhNGEtZTEyZTM3ZTc3NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMykIkeAhIMB7JIPfaXg8EkJ93pIIQH15hfr5GkgMErxKZvXqIRkUgL 6+1nuLEvd4sD7oV/8E9CeGk6/hWUCyXk3bR19z74jiOt7ejWip8tpcRqL2jo12uE Rr01OEc8BOxy+WtFKOg8S/vxWApmlFofbqeccxU3ppN1Oe+XUh4Ran6ZITZ6fjaT BvQDv2z/wqK2TeFYEzUoUWjF6VmqkazShvYzIXAtzLIvP3oWdCjlNFKBzmW3VmVp 5ymmQ2w+ktsHUgllstxtK3DUnsinEvDH6OOaB/HjzSjEnebo00DJO9Ok/X3GIWTp i5NCHS2YCbukVhDeT6ECcuye8AP9Qis= -----END CERTIFICATE-----Generated at Wed Nov 5 15:09:55 2025 by rpki-client