$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa File: bef29b0a-887f-3563-acf6-0a6587af29f2.roa (raw, json) Hash identifier: NQ/T0jR2QcJzvNzf0G7xqfXkes7Z8XaICdjIVydmTcg= Subject key identifier: 9C:10:51:5C:B3:6A:80:2D:A9:BE:57:C9:26:AE:E5:33:3C:BB:D3:5A Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F4328584BB02D03088CCE72196C8B2780 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 18914 IP address blocks: 23.147.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:03:08:8c:ce:72:19:6c:8b:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=197098fc-8dcd-47d5-b8f1-3e93fbeab031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:dc:e3:93:4d:01:a6:02:67:b9:5b:46:f6: d0:84:fb:09:86:c0:2a:34:11:46:be:35:e9:df:99: b0:2c:a1:55:b2:51:3a:d0:af:ed:8e:64:77:5f:70: 08:e3:61:43:4b:a1:cc:a6:3a:fd:a8:cf:8e:84:e6: a9:de:81:e6:24:2d:87:de:60:b0:32:72:c8:8e:54: aa:a6:9e:c2:7f:8e:b9:82:ff:44:4d:7a:de:e7:ae: 29:1e:9e:d1:c1:13:90:7f:39:a8:e7:57:e9:b0:a6: 7b:ee:52:8a:6e:1c:db:aa:fc:19:39:c0:ee:fd:a1: 15:35:f9:da:43:54:ba:6f:7e:93:f1:ce:8f:36:aa: 88:a8:89:ff:60:3d:3c:3e:23:d2:2d:b1:29:6f:6b: 69:2f:92:a0:99:36:b5:99:f1:60:7a:c8:1e:33:92: 3b:a4:a9:79:ba:23:5a:79:6d:4b:3f:f9:1c:a4:cb: af:34:80:7b:c1:0b:cc:9e:13:03:7a:35:d3:ee:90: af:14:46:f2:51:20:aa:e4:de:b5:72:1a:a6:3a:a3: db:0a:0e:94:e3:8e:85:30:32:d5:ef:db:12:73:b9: 85:87:2b:5c:e4:1e:fa:61:8e:98:1b:91:df:e2:bc: c6:cd:c7:13:f8:19:f6:38:24:c4:3b:ab:47:26:0c: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:10:51:5C:B3:6A:80:2D:A9:BE:57:C9:26:AE:E5:33:3C:BB:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/bef29b0a-887f-3563-acf6-0a6587af29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 23.147.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4d:4d:a4:09:c8:b9:a2:82:80:61:f5:b0:43:4a:99:14:66: a4:30:03:e9:ec:6e:c8:11:94:16:98:a3:06:d9:1e:00:1b:94: 18:33:f1:05:78:59:71:79:b8:86:9a:cc:d5:52:3d:b5:8f:61: 48:c3:f9:24:bf:e8:d2:b8:1c:61:12:4e:aa:f5:40:10:67:0e: 75:f1:81:9e:fa:d3:70:10:31:05:19:f7:06:b3:47:db:b3:7c: a8:33:91:21:97:f3:55:d6:fa:58:82:00:ab:c1:5c:5c:a7:00: 24:a6:49:af:ef:d5:7f:af:56:08:d5:61:5f:7a:69:4f:5a:31: 01:6e:ab:ca:af:56:05:50:b5:11:f8:35:5b:bc:ac:e0:82:af: dc:64:ce:0e:58:8b:a4:38:4d:a3:f9:ba:eb:0a:a2:78:e6:d7: 7c:01:a9:a3:2b:61:61:74:cf:d6:dc:d3:fb:b3:75:4d:8e:41: 77:f0:3d:c3:dc:c6:fb:7c:54:9c:02:40:95:25:ae:b6:18:da: 70:2e:b7:ef:49:49:d9:e1:45:9d:c7:04:6f:6e:dc:83:8b:a1: 21:ad:42:b1:a3:18:e5:92:c1:bc:cf:d7:ba:03:8d:df:e0:68: a3:13:03:96:11:f1:5c:5b:d3:cf:32:50:d7:f6:8b:d0:a4:f4: ab:78:44:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQMIjM5yGWyLJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MTk3MDk4ZmMtOGRjZC00N2Q1LWI4ZjEtM2U5M2ZiZWFiMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDTc45NNAaYCZ7lbRvbQhPsJhsAqNBFGvjXp 35mwLKFVslE60K/tjmR3X3AI42FDS6HMpjr9qM+OhOap3oHmJC2H3mCwMnLIjlSq pp7Cf465gv9ETXre564pHp7RwROQfzmo51fpsKZ77lKKbhzbqvwZOcDu/aEVNfna Q1S6b36T8c6PNqqIqIn/YD08PiPSLbEpb2tpL5KgmTa1mfFgesgeM5I7pKl5uiNa eW1LP/kcpMuvNIB7wQvMnhMDejXT7pCvFEbyUSCq5N61chqmOqPbCg6U446FMDLV 79sSc7mFhytc5B76YY6YG5Hf4rzGzccT+Bn2OCTEO6tHJgySmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwQUVyzaoAtqb5XySau5TM8u9NaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvYmVmMjliMGEtODg3Zi0z NTYzLWFjZjYtMGE2NTg3YWYyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChNTaQJyLmigoBh9bBDSpkUZqQwA+nsbsgRlBaYowbZHgAblBgz8QV4 WXF5uIaazNVSPbWPYUjD+SS/6NK4HGESTqr1QBBnDnXxgZ7603AQMQUZ9wazR9uz fKgzkSGX81XW+liCAKvBXFynACSmSa/v1X+vVgjVYV96aU9aMQFuq8qvVgVQtRH4 NVu8rOCCr9xkzg5Yi6Q4TaP5uusKonjm13wBqaMrYWF0z9bc0/uzdU2OQXfwPcPc xvt8VJwCQJUlrrYY2nAut+9JSdnhRZ3HBG9u3IOLoSGtQrGjGOWSwbzP17oDjd/g aKMTA5YR8Vxb088yUNf2i9Ck9Kt4RLg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:44 2025 by rpki-client