$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa File: afe8120a-69d1-34fa-83db-c6fd11615b6d.roa (raw, json) Hash identifier: HGnvZhz+JrHccAYBDDOrLluUVcqso2fzKUVkS9enqp0= Subject key identifier: C8:A5:A3:5E:13:38:C8:A1:46:00:BA:52:C1:76:21:EF:64:DF:D1:9C Certificate issuer: /CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Certificate serial: 010D0C9F4328584BA6D7AA5A9AD63ABC29D166C0 Authority key identifier: 51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa Signing time: Sun 26 Oct 2025 16:46:25 +0000 ROA not before: Sun 26 Oct 2025 16:46:25 +0000 ROA not after: Sat 24 Jan 2026 17:46:25 +0000 asID: 979 IP address blocks: 23.144.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:d7:aa:5a:9a:d6:3a:bc:29:d1:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7f7925-1c13-4bc8-bda4-43bd8af82fe3 Validity Not Before: Oct 26 16:46:25 2025 GMT Not After : Jan 24 17:46:25 2026 GMT Subject: CN=1452bba7-d962-47f2-99db-5fcae9c31c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:85:70:68:2e:de:8a:19:ce:d5:cb:26:91: dd:4f:f7:13:39:0d:52:cd:a4:5f:29:b0:84:16:74: c3:d3:c8:48:f0:27:e2:80:05:e7:d7:ee:23:c2:48: bc:4e:75:ce:34:bc:ba:bb:15:4b:35:5a:60:d7:dd: 84:66:2a:2d:02:fc:21:fa:b6:c4:b2:69:bf:ca:db: 55:43:53:97:92:81:a5:43:10:e0:b0:d0:9d:d8:3c: 25:91:dd:34:78:35:dd:3e:45:66:74:d7:7e:7a:79: a5:65:be:8a:37:18:a9:2f:fc:e3:93:d5:5b:4f:97: 57:c0:18:b2:25:ec:36:39:c1:4e:a7:3b:7d:19:64: 58:ca:6e:17:5a:06:67:dc:eb:03:53:47:f7:33:a3: 3d:af:9d:f1:45:74:b5:2d:54:7d:bc:ff:82:ff:5e: 42:ff:88:70:00:44:a1:4e:27:69:35:f4:8d:19:42: 89:5f:2a:b7:d7:c7:6d:55:24:b2:80:ad:e5:ee:12: e5:26:df:b3:01:6e:50:9a:16:97:22:ba:a1:16:b8: bf:90:e0:4c:58:f6:2d:50:6a:ec:cc:b9:ba:bc:9f: c2:65:f7:9e:32:1f:ba:32:81:b0:20:4c:32:22:dc: 8e:1f:87:3a:00:02:df:f8:74:b7:7f:e1:fd:7e:33: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:A3:5E:13:38:C8:A1:46:00:BA:52:C1:76:21:EF:64:DF:D1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/afe8120a-69d1-34fa-83db-c6fd11615b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.crl X509v3 Authority Key Identifier: keyid:51:F2:64:E1:0A:95:A7:56:CA:B1:00:1F:64:96:DA:11:93:C2:A7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7f7925-1c13-4bc8-bda4-43bd8af82fe3.cer sbgp-ipAddrBlock: critical IPv4: 23.144.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:70:8e:f8:42:e7:44:7a:1b:85:72:6d:e0:bc:7a:7b:65:df: 35:1e:5e:95:75:6d:ed:5a:59:ce:66:9b:69:33:a6:4a:8c:d9: f1:d5:c4:bd:c5:f7:6f:f2:b7:1b:93:c3:3c:20:af:8e:c7:cc: 11:71:84:12:11:02:51:f9:c5:9c:91:68:c4:e9:00:45:77:05: d2:a3:37:bf:7d:a8:14:cb:c4:6c:dc:cb:93:83:71:95:1e:e0: f7:58:b0:9b:f9:c5:56:ff:25:4f:f6:1a:2e:8d:01:5a:0d:47: 60:e3:41:04:7f:32:4d:2d:b9:1b:08:e6:8a:53:c3:9d:cb:ad: 18:6d:71:27:88:31:fd:2e:b5:fc:81:9a:50:00:11:be:40:03: 92:ed:9e:06:86:83:56:89:5f:4e:02:35:d9:45:f5:e0:22:1c: 19:e7:b7:78:40:bf:07:2d:be:19:6b:21:2b:54:0f:c4:12:a1: a3:54:eb:6b:7a:a6:54:fe:d4:98:1c:1e:b6:e5:fa:5d:3d:c0: 82:2d:53:0e:d9:9d:bc:dd:1d:79:c0:4a:bf:51:3f:ff:68:83: 51:31:da:57:4e:de:c2:67:3c:86:ae:2c:70:dd:63:a3:dd:5c: af:c4:56:d1:d4:ab:35:6a:42:d3:74:e3:eb:94:d3:0f:4c:50: cf:f8:8a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEum16pamtY6vCnRZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3Zjc5MjUtMWMxMy00YmM4LWJkYTQtNDNiZDhhZjgy ZmUzMB4XDTI1MTAyNjE2NDYyNVoXDTI2MDEyNDE3NDYyNVowLzEtMCsGA1UEAxMk MTQ1MmJiYTctZDk2Mi00N2YyLTk5ZGItNWZjYWU5YzMxYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilaFcGgu3ooZztXLJpHdT/cTOQ1SzaRfKbCE FnTD08hI8CfigAXn1+4jwki8TnXONLy6uxVLNVpg192EZiotAvwh+rbEsmm/yttV Q1OXkoGlQxDgsNCd2Dwlkd00eDXdPkVmdNd+enmlZb6KNxipL/zjk9VbT5dXwBiy Jew2OcFOpzt9GWRYym4XWgZn3OsDU0f3M6M9r53xRXS1LVR9vP+C/15C/4hwAESh TidpNfSNGUKJXyq318dtVSSygK3l7hLlJt+zAW5QmhaXIrqhFri/kOBMWPYtUGrs zLm6vJ/CZfeeMh+6MoGwIEwyItyOH4c6AALf+HS3f+H9fjMWGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMilo14TOMihRgC6UsF2Ie9k39GcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdm NzkyNS0xYzEzLTRiYzgtYmRhNC00M2JkOGFmODJmZTMvYWZlODEyMGEtNjlkMS0z NGZhLTgzZGItYzZmZDExNjE1YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3Zjc5MjUtMWMxMy00YmM4LWJk YTQtNDNiZDhhZjgyZmUzLzZkN2Y3OTI1LTFjMTMtNGJjOC1iZGE0LTQzYmQ4YWY4 MmZlMy5jcmwwHwYDVR0jBBgwFoAUUfJk4QqVp1bKsQAfZJbaEZPCp0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdmNzkyNS0xYzEzLTRiYzgtYmRhNC00M2Jk OGFmODJmZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5BEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNwjvhC50R6G4VybeC8entl3zUeXpV1be1aWc5mm2kzpkqM2fHVxL3F 92/ytxuTwzwgr47HzBFxhBIRAlH5xZyRaMTpAEV3BdKjN799qBTLxGzcy5ODcZUe 4PdYsJv5xVb/JU/2Gi6NAVoNR2DjQQR/Mk0tuRsI5opTw53LrRhtcSeIMf0utfyB mlAAEb5AA5LtngaGg1aJX04CNdlF9eAiHBnnt3hAvwctvhlrIStUD8QSoaNU62t6 plT+1JgcHrbl+l09wIItUw7ZnbzdHXnASr9RP/9og1Ex2ldO3sJnPIauLHDdY6Pd XK/EVtHUqzVqQtN04+uU0w9MUM/4isE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:00:07 2025 by rpki-client