$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa File: afe04a10-6d20-3764-bd84-54723556b6bc.roa (raw, json) Hash identifier: zvin/IG7a9krZN4rtvHo7vhL6ipjchpRpjL1Krh9iM4= Subject key identifier: 89:23:17:64:58:88:20:AA:4C:C0:A9:A0:C9:2A:DD:52:A2:F7:A8:3F Certificate issuer: /CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Certificate serial: 010D0C9F4328584AE4611BB0D4ADBF9616227F00 Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 54082 IP address blocks: 23.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1b:b0:d4:ad:bf:96:16:22:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=fe203238-d593-4445-8e7a-90b180e66203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:09:ed:8c:09:0e:32:42:4e:20:31:8f:a0: 86:7b:15:fe:dc:29:38:d1:0d:83:a9:bd:13:64:6a: a3:6b:86:6f:a1:16:64:de:ca:25:3c:da:5e:46:62: ca:d5:c6:cb:3b:6a:1a:33:34:6a:0b:4b:9c:d3:31: 3d:70:ef:6b:02:e0:5c:08:37:22:7c:24:5f:e6:05: cb:8c:5c:a9:39:39:32:57:94:1f:86:3f:25:d2:67: f5:09:17:18:29:6e:e0:d6:49:d4:fc:e9:3a:a8:9c: 31:0f:1d:10:f3:f5:56:8d:67:b7:b1:37:4c:44:34: f8:e1:c2:0d:47:a3:4c:a7:84:65:a1:bb:cf:ec:49: 82:f2:b2:96:60:13:fe:50:3e:c3:82:7c:78:b8:ba: d8:08:2e:ae:9f:64:77:7d:5e:0f:f0:dc:48:f0:45: 18:bd:35:d3:7e:35:6f:90:9a:b3:14:40:5d:f5:8c: 46:13:26:b7:3f:a6:5b:86:c3:ef:91:98:ed:d7:1d: 70:40:fe:73:5f:cf:ee:fc:ad:05:1b:fc:2c:3e:4d: e3:89:5f:1e:ca:2c:fb:bd:69:e5:0c:a1:8a:81:cd: 6c:fb:6a:79:52:b5:f9:1c:48:9b:d9:c4:8f:e2:fb: 8b:fd:17:fd:f4:d9:fc:46:cf:d7:5a:3b:4f:90:b0: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:17:64:58:88:20:AA:4C:C0:A9:A0:C9:2A:DD:52:A2:F7:A8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/afe04a10-6d20-3764-bd84-54723556b6bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl X509v3 Authority Key Identifier: keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6a:0a:d7:0b:74:df:4e:32:45:8a:ce:76:f3:b0:ac:9f:90: fd:b5:6f:fb:a2:41:2b:17:2c:58:5d:f2:38:84:13:d3:dd:e9: 75:9b:5b:0d:14:d1:b0:71:89:e6:d1:55:0d:28:1d:06:24:89: d1:c9:a7:d5:d1:0b:4b:9d:f1:c4:2b:23:5f:d6:0a:d8:bd:a4: e3:3d:99:1c:3e:ce:87:25:37:af:c6:ed:6b:89:f0:b8:bd:f1: 05:11:73:19:71:c5:f1:86:25:0b:3e:dd:5e:41:2b:44:f6:8c: 8b:ce:00:a9:8a:99:f5:b1:c3:c7:f0:4e:27:a3:1c:6b:d5:e7: 1e:85:7d:a2:10:ac:0b:fb:9c:c6:3d:cb:4f:68:50:a4:70:71: 65:28:7d:01:bc:65:d9:a5:6c:3f:2f:ad:2d:7c:22:4d:b7:fd: ca:fb:a1:70:8f:8c:5f:d5:43:39:64:7f:70:5b:ce:84:df:be: 5c:e7:3b:96:f6:da:18:33:89:b6:09:a5:4f:6f:fd:09:11:02: 6b:86:d3:35:e5:43:1a:9b:4a:9c:f1:db:6e:f2:26:ae:6b:99: 9f:95:dc:78:71:dc:17:2d:81:a3:41:83:c1:cc:69:7e:c1:21: d6:f6:cb:e3:76:82:17:f4:3e:48:b9:16:09:1c:c0:81:29:c9: 20:46:f0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRuw1K2/lhYifwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRl ZmExMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmUyMDMyMzgtZDU5My00NDQ1LThlN2EtOTBiMTgwZTY2MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij8J7YwJDjJCTiAxj6CGexX+3Ck40Q2Dqb0T ZGqja4ZvoRZk3solPNpeRmLK1cbLO2oaMzRqC0uc0zE9cO9rAuBcCDcifCRf5gXL jFypOTkyV5Qfhj8l0mf1CRcYKW7g1knU/Ok6qJwxDx0Q8/VWjWe3sTdMRDT44cIN R6NMp4RlobvP7EmC8rKWYBP+UD7Dgnx4uLrYCC6un2R3fV4P8NxI8EUYvTXTfjVv kJqzFEBd9YxGEya3P6ZbhsPvkZjt1x1wQP5zX8/u/K0FG/wsPk3jiV8eyiz7vWnl DKGKgc1s+2p5UrX5HEib2cSP4vuL/Rf99Nn8Rs/XWjtPkLA4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkjF2RYiCCqTMCpoMkq3VKi96g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFj ZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvYWZlMDRhMTAtNmQyMC0z NzY0LWJkODQtNTQ3MjM1NTZiNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWYxY2RhZTUtYjA0MS00OTkzLTk2 M2QtNmY4NTVmNzRlZmExLzFmMWNkYWU1LWIwNDEtNDk5My05NjNkLTZmODU1Zjc0 ZWZhMS5jcmwwHwYDVR0jBBgwFoAUPqQNj3LysTdkekv3WOeHd1ylvpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1 NWY3NGVmYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFqCtcLdN9OMkWKznbzsKyfkP21b/uiQSsXLFhd8jiEE9Pd6XWbWw0U 0bBxiebRVQ0oHQYkidHJp9XRC0ud8cQrI1/WCti9pOM9mRw+zoclN6/G7WuJ8Li9 8QURcxlxxfGGJQs+3V5BK0T2jIvOAKmKmfWxw8fwTiejHGvV5x6FfaIQrAv7nMY9 y09oUKRwcWUofQG8ZdmlbD8vrS18Ik23/cr7oXCPjF/VQzlkf3BbzoTfvlznO5b2 2hgzibYJpU9v/QkRAmuG0zXlQxqbSpzx227yJq5rmZ+V3Hhx3BctgaNBg8HMaX7B Idb2y+N2ghf0Pki5FgkcwIEpySBG8H0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:18 2025 by rpki-client