$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa File: 7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa (raw, json) Hash identifier: shaLrauCE5eN6mwp7SN3FZlk2D/MIrSTaDXMfrHJZu8= Subject key identifier: A3:F8:14:E8:E1:85:78:FE:B3:59:EF:89:76:58:AE:8D:A7:AC:AA:69 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6CB468736A08252A6E93E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 173.232.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b4:68:73:6a:08:25:2a:6e:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=a5642844-351f-43b7-a026-ba6f75b8fa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:84:e1:13:b4:08:bb:a6:1a:7f:9a:6b:89: 6c:eb:33:08:9e:eb:07:4f:27:d1:20:32:ee:23:aa: b7:bc:9a:cb:fa:59:69:e3:1e:d3:04:85:09:dd:2b: 57:e0:b6:36:2a:0b:cc:51:2b:7f:ea:a9:80:b9:42: 97:96:0c:d1:d7:c1:e7:e4:28:63:8f:ad:33:a1:a8: b2:93:fc:b7:cb:12:06:92:01:0f:31:a0:3f:bc:df: 29:56:02:5c:ec:23:0e:b5:cb:09:e0:9b:91:d0:4a: 15:d5:db:fb:a5:44:54:2e:c8:61:68:a7:c3:05:d3: a5:e5:83:32:c1:57:dc:d6:5f:30:69:59:09:69:cc: a5:a4:38:5a:88:27:00:50:dd:43:b4:af:f8:ea:bb: e9:ea:b9:3d:64:57:44:aa:93:d1:9b:45:39:87:75: 36:86:d3:f0:d9:cc:29:84:38:81:b3:cb:43:8a:d3: e9:b5:8b:71:0d:1a:44:2b:f1:f7:42:3a:0f:e3:6b: a5:f8:78:33:c5:38:63:86:86:3c:a4:d8:0f:f2:f5: 98:cd:9f:77:c8:9a:4c:db:bc:5b:a4:98:59:8d:e4: d5:d9:71:76:cc:06:18:fa:ca:32:61:d9:ee:f7:12: d3:19:4a:b4:79:f9:64:52:02:3a:6d:70:1e:d1:38: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:14:E8:E1:85:78:FE:B3:59:EF:89:76:58:AE:8D:A7:AC:AA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:61:d3:31:cf:52:75:fe:5e:ba:e1:e6:66:df:33:8f:a6: 15:90:ad:b2:f8:98:a5:15:e3:aa:4a:a1:b6:bd:f2:b3:0d:bd: db:7f:cc:df:43:81:9f:cd:9c:30:c8:4d:14:f2:bf:36:40:d2: 86:49:7d:5e:3d:8e:2e:3e:c7:06:85:69:50:82:b1:29:96:ac: b0:89:4a:b3:53:5c:a7:3e:7e:d2:44:a6:d3:7b:62:79:28:c2: 9c:b1:28:1b:fa:97:d5:33:d5:ca:6e:2d:99:66:1f:85:9c:ef: 80:05:08:57:dc:fe:5e:3a:e3:04:4f:44:fb:2d:f3:b3:c0:3e: 9e:69:c9:de:3b:38:f2:f2:2b:2a:00:d5:16:1d:7e:35:86:15: 4d:f1:88:78:63:be:65:8d:2c:3a:d9:84:3a:fb:46:2b:9f:39: cb:fb:bc:8d:3a:78:ae:e6:99:f2:39:88:17:d1:eb:f8:02:7e: d9:ec:b7:05:fa:aa:93:27:5e:77:bf:60:e0:ba:3b:2a:e0:b7: 24:ca:f4:c0:25:c2:b8:83:94:6f:e7:9a:9b:97:82:1a:2f:95: 79:0a:84:61:36:be:cd:73:7c:00:e7:c2:89:1a:f5:39:5f:34: 1d:58:de:a2:01:82:f5:7e:e0:92:8a:09:ed:50:8e:b2:7f:49: f7:64:31:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLRoc2oIJSpuk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YTU2NDI4NDQtMzUxZi00M2I3LWEwMjYtYmE2Zjc1YjhmYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi26E4RO0CLumGn+aa4ls6zMInusHTyfRIDLu I6q3vJrL+llp4x7TBIUJ3StX4LY2KgvMUSt/6qmAuUKXlgzR18Hn5Chjj60zoaiy k/y3yxIGkgEPMaA/vN8pVgJc7CMOtcsJ4JuR0EoV1dv7pURULshhaKfDBdOl5YMy wVfc1l8waVkJacylpDhaiCcAUN1DtK/46rvp6rk9ZFdEqpPRm0U5h3U2htPw2cwp hDiBs8tDitPptYtxDRpEK/H3QjoP42ul+HgzxThjhoY8pNgP8vWYzZ93yJpM27xb pJhZjeTV2XF2zAYY+soyYdnu9xLTGUq0eflkUgI6bXAe0Ti30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP4FOjhhXj+s1nviXZYro2nrKppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvN2E4MTVlZDQtNDIyNS0z NDIwLWE2YjctZWEzYjA4MjZhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf6YdMxz1J1/l664eZm3zOPphWQrbL4mKUV46pKoba98rMNvdt/zN9D gZ/NnDDITRTyvzZA0oZJfV49ji4+xwaFaVCCsSmWrLCJSrNTXKc+ftJEptN7Ynko wpyxKBv6l9Uz1cpuLZlmH4Wc74AFCFfc/l464wRPRPst87PAPp5pyd47OPLyKyoA 1RYdfjWGFU3xiHhjvmWNLDrZhDr7RiufOcv7vI06eK7mmfI5iBfR6/gCftnstwX6 qpMnXne/YOC6OyrgtyTK9MAlwriDlG/nmpuXghovlXkKhGE2vs1zfADnwoka9Tlf NB1Y3qIBgvV+4JKKCe1QjrJ/SfdkMTc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:49 2025 by rpki-client