$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa File: f0621ac2-276f-3c57-aad1-63daa946e435.roa (raw, json) Hash identifier: PaVP5nCk2J+Cs/VsHaNScUdZPXbYMx26JmtKgegLK8o= Subject key identifier: 22:1F:76:96:CD:5D:05:6D:2E:67:E7:CA:F1:13:B2:82:C0:DE:B1:46 Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F4328584B4E77150BC9DE8D71DE009500 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 23539 IP address blocks: 23.138.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:15:0b:c9:de:8d:71:de:00:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=153cd053-2537-4a72-9d68-1fc693d2a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:6c:c5:e3:a5:0e:33:d5:98:c7:ea:45:fe: 81:b9:bc:32:cb:8e:c7:a3:84:5e:54:2d:69:60:a9: 6c:72:36:2b:d3:ad:c4:ce:5d:41:98:5f:94:fd:2a: 43:33:77:22:a5:d0:64:c2:7d:f6:15:1b:38:66:74: 0e:b7:4a:92:49:f7:23:9b:21:76:86:9f:b7:57:d3: d0:47:c5:43:b1:02:b0:2a:b6:94:5f:4d:04:34:a5: 42:29:53:c6:f8:5d:96:c9:08:27:70:88:49:e6:93: f0:a5:ef:35:b3:b7:66:ff:da:7f:82:f8:4f:4e:21: 7a:40:f9:98:9f:18:0d:20:51:af:23:f6:e1:f4:1a: 16:5e:64:57:31:c8:66:f8:85:24:74:e2:88:48:71: d3:e2:d5:21:d6:6b:c1:7e:42:8e:d1:61:34:45:17: ec:08:14:d6:c3:4f:5a:ad:e2:70:61:59:88:53:f6: 17:81:a4:32:fc:df:07:93:bf:f5:de:b2:54:da:af: 3f:81:9d:0d:a9:16:ba:5c:45:9d:0a:47:15:b7:f6: eb:8e:b2:62:2a:41:ae:48:73:7c:30:f9:b6:f9:61: 81:3d:95:b6:7d:a1:04:50:30:22:12:60:3f:1b:08: 31:8d:fa:26:95:a4:6a:d8:31:c7:65:2f:98:77:b4: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:76:96:CD:5D:05:6D:2E:67:E7:CA:F1:13:B2:82:C0:DE:B1:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 23.138.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3a:29:0e:84:f7:98:2c:73:b0:07:2e:02:76:a9:58:ce:26: 39:06:e0:3d:dd:9e:3b:b0:90:f4:f4:44:be:3b:4e:11:ea:9b: 14:f0:b5:86:1a:fc:98:95:c2:90:75:c8:78:1e:eb:80:8f:83: 80:72:d7:f0:91:98:a5:63:2e:80:4c:af:f8:82:91:59:f1:88: 1f:97:b9:e1:f7:5c:c1:cb:52:41:64:dd:05:5e:9a:e5:55:0a: bc:34:c8:e0:62:fe:9f:0d:42:6b:ce:85:17:a3:37:90:98:58: e8:ed:44:83:7a:13:e8:5a:08:86:70:02:50:14:31:c8:10:2a: 79:15:46:ed:76:06:20:49:a6:ff:c1:82:47:01:98:14:84:38: 78:04:c0:45:ea:e7:19:fb:08:74:be:3f:d3:14:76:ca:45:e7: 12:a7:a3:be:96:73:7b:67:ee:52:64:d8:86:d9:c5:08:a5:24: bf:5c:b6:51:d2:87:e9:25:3c:51:9e:e6:15:79:82:8e:c8:6d: ff:5a:3d:bb:b9:83:40:0b:92:ab:c5:32:e7:e8:a9:52:49:4f: db:d3:ec:6e:6f:10:59:2a:db:e6:54:af:d8:c3:0c:5c:18:e5: 65:aa:c1:62:07:e7:8b:a0:78:5d:f2:8a:e6:0c:73:0e:dd:13: 82:ce:76:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxULyd6Ncd4AlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MTUzY2QwNTMtMjUzNy00YTcyLTlkNjgtMWZjNjkzZDJhMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXxsxeOlDjPVmMfqRf6Bubwyy47Ho4ReVC1p YKlscjYr063Ezl1BmF+U/SpDM3cipdBkwn32FRs4ZnQOt0qSSfcjmyF2hp+3V9PQ R8VDsQKwKraUX00ENKVCKVPG+F2WyQgncIhJ5pPwpe81s7dm/9p/gvhPTiF6QPmY nxgNIFGvI/bh9BoWXmRXMchm+IUkdOKISHHT4tUh1mvBfkKO0WE0RRfsCBTWw09a reJwYVmIU/YXgaQy/N8Hk7/13rJU2q8/gZ0NqRa6XEWdCkcVt/brjrJiKkGuSHN8 MPm2+WGBPZW2faEEUDAiEmA/GwgxjfomlaRq2DHHZS+Yd7Q4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIfdpbNXQVtLmfnyvETsoLA3rFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvZjA2MjFhYzItMjc2Zi0z YzU3LWFhZDEtNjNkYWE5NDZlNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw6KQ6E95gsc7AHLgJ2qVjOJjkG4D3dnjuwkPT0RL47ThHqmxTwtYYa /JiVwpB1yHge64CPg4By1/CRmKVjLoBMr/iCkVnxiB+XueH3XMHLUkFk3QVemuVV Crw0yOBi/p8NQmvOhRejN5CYWOjtRIN6E+haCIZwAlAUMcgQKnkVRu12BiBJpv/B gkcBmBSEOHgEwEXq5xn7CHS+P9MUdspF5xKno76Wc3tn7lJk2IbZxQilJL9ctlHS h+klPFGe5hV5go7Ibf9aPbu5g0ALkqvFMufoqVJJT9vT7G5vEFkq2+ZUr9jDDFwY 5WWqwWIH54ugeF3yiuYMcw7dE4LOdmA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:10 2025 by rpki-client