$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa File: 7b07ff38-005d-377c-95d7-6ce9da3de600.roa (raw, json) Hash identifier: +CKvrZJZJJDpUFpAFkQdyoNXp8LH5nSADIny8nh/CYg= Subject key identifier: E7:79:EF:6E:C7:1C:A2:6D:BB:42:A2:F2:04:44:68:F5:45:B1:5F:72 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584B153C218098C15D3CD0CB0E00 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 11776 IP address blocks: 23.152.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:21:80:98:c1:5d:3c:d0:cb:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=3f20acdd-6b88-4765-8f41-e84ec8211c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:0b:be:f1:22:f7:6a:9a:1f:3f:d2:db:15: 4d:c1:8f:de:20:d1:20:ac:79:9d:24:28:fe:a8:f3: 45:51:46:d0:0e:df:1d:d6:99:64:7b:eb:f8:ad:31: 2b:2a:46:2a:e2:b0:f0:da:85:ac:de:03:bc:ce:77: 6b:e9:75:c9:9b:ee:91:4e:d2:17:04:b7:7b:90:b7: 40:d0:95:79:ea:25:e8:a5:5b:0b:f3:f7:be:1c:5e: 5c:32:08:ec:35:33:fc:77:95:9f:13:55:7f:c6:d1: 51:ac:5f:c3:fd:1e:a0:46:2d:7c:9a:38:1f:47:53: 6e:4d:22:8a:ef:ec:e8:fa:c0:e4:96:33:66:15:70: 4b:79:8a:f5:17:72:8b:b6:4c:39:a8:2e:65:c4:96: a1:14:9b:09:83:db:81:f1:14:41:e9:e0:c5:86:45: 4d:e5:cf:94:ae:3d:a3:ea:e4:87:38:a9:90:fc:c7: 99:ee:f2:99:95:ac:2e:73:b6:82:a4:fd:f6:63:95: 04:dd:c9:54:5a:1c:ae:79:c9:f1:de:3e:29:34:b9: 8c:c5:85:9d:9b:04:62:f5:3e:a2:c4:0f:6f:d0:86: 95:e0:fc:8a:55:93:5a:ca:9c:ba:8e:45:17:ca:57: ae:77:ee:b0:22:1c:95:c5:19:82:b2:d1:4f:e9:e5: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:79:EF:6E:C7:1C:A2:6D:BB:42:A2:F2:04:44:68:F5:45:B1:5F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:69:e3:da:d2:a5:e9:a4:0d:a7:f8:95:c1:8c:48:e9:f1:e3: 67:89:18:3c:7b:cf:68:11:6e:64:f5:ff:5a:66:28:fa:af:19: 2c:ca:b2:4e:7a:0c:59:d0:82:a3:f8:58:09:49:a6:e3:84:c1: 14:b0:96:7b:ea:42:f9:63:d0:6c:05:4c:8a:0d:3b:2c:6d:4e: 89:cf:d7:7a:56:cc:73:b0:d4:44:fd:c3:e8:37:45:19:a7:f0: 32:a9:59:b5:c6:e6:3b:f6:d3:ae:1e:f6:b1:6c:1f:6d:fc:e2: 79:9f:60:ad:b5:47:97:37:73:db:20:8a:07:ab:ee:66:a8:27: b1:42:4e:70:63:fd:58:52:da:a2:de:f6:8c:96:75:1f:c6:5e: 54:b7:48:3e:cd:29:d3:c8:58:4b:e4:71:11:f1:8d:52:1e:88: 2c:40:ed:6a:81:d5:db:22:ea:56:48:26:81:df:1d:f2:6e:27: ee:f9:22:1e:a5:41:a6:1f:9c:0d:05:40:b3:8b:4d:90:90:ea: 29:5b:3e:52:d5:81:cc:43:54:b0:93:fc:3f:49:bf:d3:3c:3d: bc:b4:2d:83:07:b4:2c:8f:59:ff:0f:e5:28:b8:67:91:b2:bf: d2:50:cb:94:42:76:42:1a:e4:47:4e:e6:86:2a:97:fb:98:1e: f4:8b:6c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCGAmMFdPNDLDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk M2YyMGFjZGQtNmI4OC00NzY1LThmNDEtZTg0ZWM4MjExYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6QLvvEi92qaHz/S2xVNwY/eINEgrHmdJCj+ qPNFUUbQDt8d1plke+v4rTErKkYq4rDw2oWs3gO8zndr6XXJm+6RTtIXBLd7kLdA 0JV56iXopVsL8/e+HF5cMgjsNTP8d5WfE1V/xtFRrF/D/R6gRi18mjgfR1NuTSKK 7+zo+sDkljNmFXBLeYr1F3KLtkw5qC5lxJahFJsJg9uB8RRB6eDFhkVN5c+Urj2j 6uSHOKmQ/MeZ7vKZlawuc7aCpP32Y5UE3clUWhyuecnx3j4pNLmMxYWdmwRi9T6i xA9v0IaV4PyKVZNaypy6jkUXyleud+6wIhyVxRmCstFP6eXRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd5727HHKJtu0Ki8gREaPVFsV9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvN2IwN2ZmMzgtMDA1ZC0z NzdjLTk1ZDctNmNlOWRhM2RlNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJp49rSpemkDaf4lcGMSOnx42eJGDx7z2gRbmT1/1pmKPqvGSzKsk56 DFnQgqP4WAlJpuOEwRSwlnvqQvlj0GwFTIoNOyxtTonP13pWzHOw1ET9w+g3RRmn 8DKpWbXG5jv2064e9rFsH2384nmfYK21R5c3c9sgiger7maoJ7FCTnBj/VhS2qLe 9oyWdR/GXlS3SD7NKdPIWEvkcRHxjVIeiCxA7WqB1dsi6lZIJoHfHfJuJ+75Ih6l QaYfnA0FQLOLTZCQ6ilbPlLVgcxDVLCT/D9Jv9M8Pby0LYMHtCyPWf8P5Si4Z5Gy v9JQy5RCdkIa5EdO5oYql/uYHvSLbHA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:39 2025 by rpki-client