$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa File: 23449119-80cd-3377-8e2e-c365ff0bf70a.roa (raw, json) Hash identifier: E8r+vNYLg1NjWk+myjP2oo0EsgqJ+IzMHyay3p14An0= Subject key identifier: F4:80:73:91:5C:47:55:10:C2:3F:F4:8E:BD:05:AC:2E:CB:CE:D5:D3 Certificate issuer: /CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Certificate serial: 010D0C9F4328584BB2F830948B8D2B9F1CC96BC0 Authority key identifier: 45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 33091 IP address blocks: 136.159.0.0/16 maxlen: 16 198.161.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:94:8b:8d:2b:9f:1c:c9:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d24712-56c2-4597-9573-0e2b1b7c1027 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=bc073214-eb20-49ba-8b46-a902d8dbe6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:62:79:3b:8f:b3:2d:4b:8b:77:8d:e8:bd: e1:76:c0:24:a8:72:95:7c:f0:e9:00:92:fa:60:7f: 1c:f8:1b:ff:6d:06:27:0c:6e:f4:75:2b:aa:f0:a6: c3:d3:ec:15:c3:3e:84:c5:38:d8:d9:59:a5:96:43: ee:69:39:7a:2d:ec:19:4a:03:ef:0d:18:3e:aa:f3: 0b:d8:c4:5d:06:f5:d8:f1:ce:1b:f9:52:b7:65:de: 71:89:a0:58:58:4b:c6:1a:04:d8:8c:1a:25:03:25: 9a:b0:11:d3:7c:82:f5:76:21:34:54:f4:71:14:c1: 41:21:15:0b:6e:4d:57:4a:f2:5f:d8:82:94:46:fa: 12:ab:67:0a:4b:91:d1:e2:de:bd:3a:88:c9:b2:71: 3f:73:99:13:e9:ed:b4:32:4c:3b:70:a7:25:66:91: b5:fd:f1:72:2c:d7:fb:0f:9c:bf:59:44:39:65:70: e2:a7:2d:c1:02:b0:ee:ee:73:15:6c:f1:69:14:8c: d1:83:17:d0:c9:0d:fb:23:b8:25:5a:98:9c:4d:5e: 43:a9:1d:4f:70:c9:d6:26:b1:9e:51:0e:ff:3c:71: 8b:be:7e:ae:c3:72:b0:a0:70:fd:db:f1:93:40:6f: 8a:2b:6c:99:7f:c6:6b:15:15:e2:bb:e4:e5:16:42: a9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:80:73:91:5C:47:55:10:C2:3F:F4:8E:BD:05:AC:2E:CB:CE:D5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/23449119-80cd-3377-8e2e-c365ff0bf70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027/47d24712-56c2-4597-9573-0e2b1b7c1027.crl X509v3 Authority Key Identifier: keyid:45:B8:77:EF:84:E0:37:C8:90:84:D5:01:B0:CA:55:A9:C3:A6:01:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d24712-56c2-4597-9573-0e2b1b7c1027.cer sbgp-ipAddrBlock: critical IPv4: 136.159.0.0/16 198.161.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c3:70:9b:a5:52:58:77:29:b9:6c:10:f2:82:ba:0a:de:ee: e4:2e:7e:2b:54:97:c7:03:d7:c7:c9:22:99:0b:de:e9:ee:f0: c2:6a:9b:27:74:a3:22:af:5e:db:f3:e6:fe:f7:0e:0c:1a:3f: 78:30:f1:6f:52:94:9b:0b:76:ce:f6:2d:99:71:e6:e1:3b:d2: 46:bd:6f:f7:9d:ef:3b:4c:c1:eb:a2:fb:de:cf:a8:9d:55:8e: 49:11:c9:8c:53:b2:45:19:16:24:b8:40:3d:b9:72:fd:14:11: 4f:e7:fc:c6:3a:90:f6:10:5a:72:40:03:81:89:2d:d4:59:75: 15:fe:55:2a:cd:3f:9a:80:f5:11:e1:eb:16:e3:58:6c:98:09: 34:98:78:17:fe:1f:00:c8:80:e4:a0:8e:b7:cf:06:1b:04:20: 69:36:53:fa:00:ea:b3:7d:f2:8d:09:97:55:74:9e:2f:41:94: 1f:37:1f:90:9b:87:39:ad:d1:23:4a:da:f7:08:03:aa:df:0b: b6:62:54:cc:8b:98:3a:ad:e4:a9:d4:4a:2e:57:15:b2:40:f0: 62:d6:37:a0:db:8d:b0:a0:cd:cd:04:a6:ca:98:a3:2e:bc:85: 8d:0a:68:65:5c:ec:2a:ea:ea:ed:02:03:66:3c:a7:cc:a7:8f: 05:91:6c:19 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuy+DCUi40rnxzJa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdkMjQ3MTItNTZjMi00NTk3LTk1NzMtMGUyYjFiN2Mx MDI3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YmMwNzMyMTQtZWIyMC00OWJhLThiNDYtYTkwMmQ4ZGJlNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+1ieTuPsy1Li3eN6L3hdsAkqHKVfPDpAJL6 YH8c+Bv/bQYnDG70dSuq8KbD0+wVwz6ExTjY2VmllkPuaTl6LewZSgPvDRg+qvML 2MRdBvXY8c4b+VK3Zd5xiaBYWEvGGgTYjBolAyWasBHTfIL1diE0VPRxFMFBIRUL bk1XSvJf2IKURvoSq2cKS5HR4t69OojJsnE/c5kT6e20Mkw7cKclZpG1/fFyLNf7 D5y/WUQ5ZXDipy3BArDu7nMVbPFpFIzRgxfQyQ37I7glWpicTV5DqR1PcMnWJrGe UQ7/PHGLvn6uw3KwoHD92/GTQG+KK2yZf8ZrFRXiu+TlFkKpPQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPSAc5FcR1UQwj/0jr0FrC7LztXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2Qy NDcxMi01NmMyLTQ1OTctOTU3My0wZTJiMWI3YzEwMjcvMjM0NDkxMTktODBjZC0z Mzc3LThlMmUtYzM2NWZmMGJmNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdkMjQ3MTItNTZjMi00NTk3LTk1 NzMtMGUyYjFiN2MxMDI3LzQ3ZDI0NzEyLTU2YzItNDU5Ny05NTczLTBlMmIxYjdj MTAyNy5jcmwwHwYDVR0jBBgwFoAURbh374TgN8iQhNUBsMpVqcOmAYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2QyNDcxMi01NmMyLTQ1OTctOTU3My0wZTJi MWI3YzEwMjcuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAiJ8DBADG oX8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAU8Nwm6VSWHcpuWwQ8oK6Ct7u5C5+K1SXxwPXx8kimQve6e7w wmqbJ3SjIq9e2/Pm/vcODBo/eDDxb1KUmwt2zvYtmXHm4TvSRr1v953vO0zB66L7 3s+onVWOSRHJjFOyRRkWJLhAPbly/RQRT+f8xjqQ9hBackADgYkt1Fl1Ff5VKs0/ moD1EeHrFuNYbJgJNJh4F/4fAMiA5KCOt88GGwQgaTZT+gDqs33yjQmXVXSeL0GU HzcfkJuHOa3RI0ra9wgDqt8LtmJUzIuYOq3kqdRKLlcVskDwYtY3oNuNsKDNzQSm ypijLryFjQpoZVzsKurq7QIDZjynzKePBZFsGQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:37 2025 by rpki-client