$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa File: d80747d8-996b-3001-a7b6-ff5d773c0798.roa (raw, json) Hash identifier: U+4pusMlsu689ojhzOqpA96UhH7qcf9fnbcCibq3J3M= Subject key identifier: F0:CD:22:CD:DE:00:1F:8A:06:7B:93:16:4B:E8:0A:34:D9:55:8B:05 Certificate issuer: /CN=2c0e066c-a2ca-4abc-83a9-75511150e8be Certificate serial: 010D0C9F4328584B8F62F598E40B39654B615970 Authority key identifier: 19:F3:CC:33:72:58:6E:12:69:EA:77:AF:9A:23:B2:D7:40:A9:B5:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa Signing time: Sat 18 Oct 2025 07:07:41 +0000 ROA not before: Sat 18 Oct 2025 07:07:41 +0000 ROA not after: Fri 16 Jan 2026 08:07:41 +0000 asID: 401990 IP address blocks: 23.147.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:62:f5:98:e4:0b:39:65:4b:61:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0e066c-a2ca-4abc-83a9-75511150e8be Validity Not Before: Oct 18 07:07:41 2025 GMT Not After : Jan 16 08:07:41 2026 GMT Subject: CN=b2f768d9-f6c6-4e46-ba44-b8cd7dea2c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:1b:b8:55:a7:6a:96:80:12:3f:dd:58:d2: 02:a0:b9:8b:8c:73:f5:82:df:19:74:7e:8f:45:b2: b4:01:df:3a:f5:1e:f1:7e:3e:12:d3:05:41:31:dc: 1f:e2:3c:8d:01:21:ad:5f:b0:e2:87:e4:af:9a:f4: 44:4d:2e:64:a6:05:05:c9:a6:81:08:1d:3a:58:87: 70:7c:89:75:26:bb:2b:07:4e:da:14:73:5c:30:78: 30:02:3a:af:aa:83:7d:5b:4f:a9:c0:dc:7b:e2:c0: c8:40:12:fc:79:ab:27:0f:4d:04:21:07:1e:37:8e: db:b8:36:40:35:eb:98:34:47:4a:fb:2f:b4:54:9d: bf:d9:fe:68:1d:c9:92:cb:bd:09:b3:fd:d2:70:fa: 48:29:98:19:ae:df:9b:ad:da:23:bf:ef:1e:f5:91: 99:97:36:d2:87:42:f8:64:b9:49:7c:f1:1b:2c:39: da:35:e4:74:67:d4:84:f7:c7:44:94:f4:a4:8e:4d: c0:e3:12:38:ce:2f:13:9c:50:56:cb:83:f8:e1:72: bc:f7:73:52:e3:cd:f5:28:98:6a:68:92:59:b0:72: f9:b9:35:2d:d2:84:31:04:1a:05:53:2a:a6:e6:3b: e9:b0:6f:6a:b1:d9:a7:78:3b:d2:bc:dd:a3:57:74: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CD:22:CD:DE:00:1F:8A:06:7B:93:16:4B:E8:0A:34:D9:55:8B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/d80747d8-996b-3001-a7b6-ff5d773c0798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be/2c0e066c-a2ca-4abc-83a9-75511150e8be.crl X509v3 Authority Key Identifier: keyid:19:F3:CC:33:72:58:6E:12:69:EA:77:AF:9A:23:B2:D7:40:A9:B5:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2c0e066c-a2ca-4abc-83a9-75511150e8be.cer sbgp-ipAddrBlock: critical IPv4: 23.147.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:77:4c:55:23:e4:a5:ea:54:84:6a:e4:0b:17:84:0c:98:42: 04:17:1f:64:53:c6:21:18:5a:3f:15:5a:5c:2f:93:75:dd:68: 67:d0:68:96:2d:93:3c:36:52:29:74:0c:4c:96:32:f4:40:3e: 04:38:7a:d6:de:d4:09:0f:69:a9:08:a4:2d:3c:b3:4d:78:f6: b1:0f:b1:92:fe:fe:5e:dc:67:6a:ed:2e:88:d0:41:96:02:76: 4a:02:63:b6:0a:90:2d:d0:e0:7a:b0:25:ed:30:f2:19:84:27: dd:a5:04:10:53:fd:85:c1:90:c4:9a:0d:91:ec:cc:b4:9c:f6: c2:bb:e3:46:0a:fe:1a:3b:fa:5d:fa:75:71:c9:ce:19:d7:5a: 8b:5f:9e:ce:bc:29:0a:ec:48:09:13:f5:2e:ab:60:46:0e:df: 47:49:ba:12:87:5f:97:4d:99:6c:06:93:9d:2e:72:e7:08:a5: 0a:b4:a0:5d:4e:74:b3:3d:dd:57:3a:b1:22:86:64:ca:63:43: 34:bf:42:43:2b:04:23:34:b2:8f:50:45:01:1c:81:1f:36:fd: ed:34:fc:a5:e5:15:f4:0b:e8:ab:e7:9c:d7:8f:a2:28:32:d1: 4b:39:9a:6d:d1:42:50:24:13:ac:ae:93:e3:6d:45:53:4a:b1: fc:87:be:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPYvWY5As5ZUthWXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwZTA2NmMtYTJjYS00YWJjLTgzYTktNzU1MTExNTBl OGJlMB4XDTI1MTAxODA3MDc0MVoXDTI2MDExNjA4MDc0MVowLzEtMCsGA1UEAxMk YjJmNzY4ZDktZjZjNi00ZTQ2LWJhNDQtYjhjZDdkZWEyYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcobuFWnapaAEj/dWNICoLmLjHP1gt8ZdH6P RbK0Ad869R7xfj4S0wVBMdwf4jyNASGtX7Dih+SvmvRETS5kpgUFyaaBCB06WIdw fIl1JrsrB07aFHNcMHgwAjqvqoN9W0+pwNx74sDIQBL8easnD00EIQceN47buDZA NeuYNEdK+y+0VJ2/2f5oHcmSy70Js/3ScPpIKZgZrt+brdojv+8e9ZGZlzbSh0L4 ZLlJfPEbLDnaNeR0Z9SE98dElPSkjk3A4xI4zi8TnFBWy4P44XK893NS4831KJhq aJJZsHL5uTUt0oQxBBoFUyqm5jvpsG9qsdmneDvSvN2jV3SuiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDNIs3eAB+KBnuTFkvoCjTZVYsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYzBl MDY2Yy1hMmNhLTRhYmMtODNhOS03NTUxMTE1MGU4YmUvZDgwNzQ3ZDgtOTk2Yi0z MDAxLWE3YjYtZmY1ZDc3M2MwNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmMwZTA2NmMtYTJjYS00YWJjLTgz YTktNzU1MTExNTBlOGJlLzJjMGUwNjZjLWEyY2EtNGFiYy04M2E5LTc1NTExMTUw ZThiZS5jcmwwHwYDVR0jBBgwFoAUGfPMM3JYbhJp6nevmiOy10CptRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYzBlMDY2Yy1hMmNhLTRhYmMtODNhOS03NTUx MTE1MGU4YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt3TFUj5KXqVIRq5AsXhAyYQgQXH2RTxiEYWj8VWlwvk3XdaGfQaJYt kzw2Uil0DEyWMvRAPgQ4etbe1AkPaakIpC08s0149rEPsZL+/l7cZ2rtLojQQZYC dkoCY7YKkC3Q4HqwJe0w8hmEJ92lBBBT/YXBkMSaDZHszLSc9sK740YK/ho7+l36 dXHJzhnXWotfns68KQrsSAkT9S6rYEYO30dJuhKHX5dNmWwGk50ucucIpQq0oF1O dLM93Vc6sSKGZMpjQzS/QkMrBCM0so9QRQEcgR82/e00/KXlFfQL6KvnnNePoigy 0Us5mm3RQlAkE6yuk+NtRVNKsfyHviY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:20 2025 by rpki-client