$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json) Hash identifier: NDDf941GUOVVHt4k3IQXsvr9hasivdHlo6mO2A+d/+8= Subject key identifier: B3:2C:62:1C:83:EA:3A:61:86:A7:CA:77:29:BF:E7:41:F5:5B:71:3E Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Certificate serial: 010D0C9F4328584B8BE239BE452CD2ED82621E80 Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 209699 IP address blocks: 23.138.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:39:be:45:2c:d2:ed:82:62:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=c4ae7850-750e-4fc2-9696-2aafb2a275cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:34:75:f4:76:83:f2:ea:d8:8e:44:21:98: 69:5d:7e:b6:d3:a7:61:3d:78:a1:94:ca:dd:a8:41: f4:8b:9e:07:b3:70:e2:3d:1c:0f:34:14:64:13:bb: 41:f6:f5:2d:be:27:d8:a7:30:1f:45:2f:77:71:b0: 6b:f3:d2:d1:6d:89:08:fa:b6:72:27:9f:0b:01:bd: 3c:5f:34:e6:d6:c2:53:2b:c9:59:0d:3d:e3:4b:41: 5f:70:a4:87:67:4a:f2:a1:13:7c:72:d5:4a:1c:b2: 27:1e:a5:01:d5:94:15:f0:bd:ab:3b:b6:a2:c6:8d: 39:41:17:01:ec:a4:10:fc:5b:9c:b7:93:e1:77:dc: 0c:b3:c9:c5:a8:fb:42:5c:1f:59:94:b6:e4:a4:1e: aa:6c:10:fe:c2:be:3f:a2:46:11:8d:4d:ae:fe:53: 74:a8:ae:81:2d:fd:0d:0e:31:14:ad:5b:61:7d:9d: 9e:0f:e9:81:ad:66:03:79:6b:32:c6:1c:e4:6b:38: 2c:79:b8:d2:31:3c:6e:9c:bf:4c:37:40:0f:9e:87: 23:d0:e2:f1:85:65:41:09:e1:36:7e:7f:df:78:67: bd:5b:78:70:97:c7:ea:0a:51:f4:2b:1b:84:b6:59: 70:98:96:2c:64:14:2d:98:12:a6:6a:8c:a1:72:cd: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:62:1C:83:EA:3A:61:86:A7:CA:77:29:BF:E7:41:F5:5B:71:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl X509v3 Authority Key Identifier: keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:96:80:1e:cb:7e:8b:3a:49:7c:87:08:aa:59:a5:49:be:08: 4e:3d:21:89:ff:2c:db:f4:a8:25:6f:45:53:d2:e7:d7:34:a0: d0:c9:c7:97:49:61:fc:56:db:df:fd:ec:a7:af:da:e3:6d:ae: a7:00:2b:b0:eb:d0:ef:d4:32:d7:b0:4c:9e:0c:47:b8:6b:7b: 1f:76:34:b8:33:59:da:97:57:05:5f:0f:bb:5f:a0:aa:64:d0: 84:33:51:65:9d:aa:7a:ab:76:a1:1a:15:71:1f:31:45:89:47: 33:13:c9:8f:87:66:34:b5:02:9f:95:63:4d:36:9b:5e:ba:ba: 3f:4e:bb:52:e7:b2:b4:c4:0c:d1:e6:26:7a:7b:76:60:63:a8: 75:9a:4f:9a:ab:b4:a1:0e:11:8f:47:5d:0b:58:0d:69:ef:e1: 83:d1:c5:49:be:c8:b4:cc:68:ee:63:0f:12:32:d1:5a:d8:06: a0:e5:f3:c7:5d:bf:0a:7f:64:51:a1:5f:79:19:f5:b4:99:23: e1:ef:56:99:fa:64:16:06:ad:ed:31:f6:51:fc:24:b3:d2:f8: 5b:95:c2:74:aa:78:cf:d3:19:de:d9:30:da:08:7c:ab:7a:b1: 80:6c:7c:5a:fb:77:2d:2f:3e:f3:22:e1:b0:50:b3:4a:e0:56: 3d:79:7c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jm+RSzS7YJiHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMzZGRiYjItZmYyMS00YjA3LWI0ZTctMjY2ZDZkZjVh NmI1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YzRhZTc4NTAtNzUwZS00ZmMyLTk2OTYtMmFhZmIyYTI3NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/I0dfR2g/Lq2I5EIZhpXX6206dhPXihlMrd qEH0i54Hs3DiPRwPNBRkE7tB9vUtvifYpzAfRS93cbBr89LRbYkI+rZyJ58LAb08 XzTm1sJTK8lZDT3jS0FfcKSHZ0ryoRN8ctVKHLInHqUB1ZQV8L2rO7aixo05QRcB 7KQQ/Fuct5Phd9wMs8nFqPtCXB9ZlLbkpB6qbBD+wr4/okYRjU2u/lN0qK6BLf0N DjEUrVthfZ2eD+mBrWYDeWsyxhzkazgsebjSMTxunL9MN0APnocj0OLxhWVBCeE2 fn/feGe9W3hwl8fqClH0KxuEtllwmJYsZBQtmBKmaoyhcs1O2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMsYhyD6jphhqfKdym/50H1W3E+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNk ZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZkNmRmNWE2YjUvNzBhNDY1MzQtZThlNS0z MTgxLWFiYjUtMmY0NGRjNzkwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjMzZGRiYjItZmYyMS00YjA3LWI0 ZTctMjY2ZDZkZjVhNmI1L2IzM2RkYmIyLWZmMjEtNGIwNy1iNGU3LTI2NmQ2ZGY1 YTZiNS5jcmwwHwYDVR0jBBgwFoAU2/Ttm+j9vTSYXGp/0tGrKinYiuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNkZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZk NmRmNWE2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+WgB7Lfos6SXyHCKpZpUm+CE49IYn/LNv0qCVvRVPS59c0oNDJx5dJ YfxW29/97Kev2uNtrqcAK7Dr0O/UMtewTJ4MR7hrex92NLgzWdqXVwVfD7tfoKpk 0IQzUWWdqnqrdqEaFXEfMUWJRzMTyY+HZjS1Ap+VY002m166uj9Ou1LnsrTEDNHm Jnp7dmBjqHWaT5qrtKEOEY9HXQtYDWnv4YPRxUm+yLTMaO5jDxIy0VrYBqDl88dd vwp/ZFGhX3kZ9bSZI+HvVpn6ZBYGre0x9lH8JLPS+FuVwnSqeM/TGd7ZMNoIfKt6 sYBsfFr7dy0vPvMi4bBQs0rgVj15fFg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:54 2025 by rpki-client