$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa File: ce64ca20-b012-3206-8040-dbfd9b9e2557.roa (raw, json) Hash identifier: QNPZFb+6zc+B3YJPQ5ZHjVGhSL5BaWSqwuU7LcVnFyU= Subject key identifier: 11:AF:37:D7:31:A0:85:07:5A:6F:DA:2A:10:B4:AA:13:E9:76:C6:5D Certificate issuer: /CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Certificate serial: 010D0C9F4328584BBB758FA777F6F6D103AE8C40 Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 30463 IP address blocks: 23.130.228.0/24 maxlen: 24 2602:f76c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8f:a7:77:f6:f6:d1:03:ae:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=01baf6fd-d284-4940-9cb0-14944fa1dec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:20:40:73:76:83:b0:8a:49:20:25:85:73: aa:c4:04:d0:a5:3f:d3:31:17:4a:b0:39:11:42:82: 6e:56:4e:58:3a:df:ec:bf:61:7a:5f:58:ce:7f:f3: a4:50:8e:e0:37:ac:76:b2:69:08:e6:b8:2f:87:34: 0a:a8:da:84:03:ae:cf:3c:66:9b:53:90:d9:1e:b7: 18:39:aa:bc:f6:ce:07:f4:92:9b:ed:2e:aa:4b:8e: 59:aa:4b:0b:12:de:4c:94:09:98:9f:9d:11:a2:17: 0b:0e:36:4e:21:2a:19:42:7c:f1:f9:e9:bd:32:8f: 95:67:bc:85:98:a9:e1:a4:d8:18:b0:08:44:92:94: 9e:ea:33:97:3a:06:1c:4a:aa:8b:69:97:fe:f5:9d: ac:29:90:b4:9b:eb:47:89:e7:d5:2e:ce:2e:35:2b: 18:b4:32:29:42:c3:3c:a5:b9:71:54:83:4b:d4:47: ed:13:6a:d5:01:73:be:e9:ef:cd:47:6d:3c:5e:e8: 9c:7e:4e:35:f8:ac:2d:f0:e5:0b:f0:f8:e7:a3:37: 66:ef:dd:f7:0a:c0:09:28:aa:a9:39:eb:5e:9f:44: 6f:f7:bd:cf:34:2c:76:f4:25:76:08:30:3f:f0:86: 27:eb:5b:1e:98:db:0e:45:b8:e8:ac:af:d8:5c:1a: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:37:D7:31:A0:85:07:5A:6F:DA:2A:10:B4:AA:13:E9:76:C6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl X509v3 Authority Key Identifier: keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.228.0/24 IPv6: 2602:f76c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c5:14:9a:e2:15:8a:9f:99:df:0e:14:15:ef:37:10:78:cd: dd:31:c8:a4:65:eb:0b:2f:35:5e:4c:b3:c4:94:9e:ed:6c:49: b3:2b:a3:84:1e:6a:dc:f6:20:be:79:71:d4:32:df:ec:6a:6d: 76:f0:91:0e:31:48:00:56:87:46:84:68:40:10:b0:99:c5:80: a1:83:f9:e3:07:f1:89:a4:aa:61:d1:42:8c:11:3d:d5:8f:1c: a3:8c:cd:7a:f8:d5:72:5d:da:5f:b0:01:ec:c1:6c:50:66:f2: f8:4c:29:05:01:64:05:61:2a:0d:9d:47:2b:b0:b0:e8:bb:a3: 17:34:81:cb:49:3a:ad:b1:b8:f7:35:06:35:2f:44:6f:9d:d4: 8b:64:43:a4:8c:2d:0e:51:01:db:d2:0f:c6:9c:00:95:3f:76: 3c:0c:8e:53:9a:2a:cf:18:5f:2a:b7:dc:1d:68:a1:6b:15:69: b5:15:5e:73:27:82:22:f4:25:7b:57:c9:aa:c6:81:4f:8b:a0: 5b:51:ad:03:e1:b7:3b:81:4c:4f:5f:75:92:7e:e6:b0:45:57: 0a:5a:e8:4c:99:f9:53:db:61:f3:52:3e:30:38:82:d8:7c:41: 96:a2:4f:8c:ff:a0:a6:14:bc:9e:d4:2d:0f:22:c6:2b:cd:f4: 64:58:ae:8a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu7dY+nd/b20QOujEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjczNTk5ZWYtNWIwYi00Nzk4LTlmNDctODExZDRjMTIw Y2IwMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MDFiYWY2ZmQtZDI4NC00OTQwLTljYjAtMTQ5NDRmYTFkZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrAgQHN2g7CKSSAlhXOqxATQpT/TMRdKsDkR QoJuVk5YOt/sv2F6X1jOf/OkUI7gN6x2smkI5rgvhzQKqNqEA67PPGabU5DZHrcY Oaq89s4H9JKb7S6qS45ZqksLEt5MlAmYn50RohcLDjZOISoZQnzx+em9Mo+VZ7yF mKnhpNgYsAhEkpSe6jOXOgYcSqqLaZf+9Z2sKZC0m+tHiefVLs4uNSsYtDIpQsM8 pblxVINL1EftE2rVAXO+6e/NR208Xuicfk41+Kwt8OUL8Pjnozdm7933CsAJKKqp Oeten0Rv973PNCx29CV2CDA/8IYn61semNsORbjorK/YXBo6qwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBGvN9cxoIUHWm/aKhC0qhPpdsZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1 OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMxMjBjYjAvY2U2NGNhMjAtYjAxMi0z MjA2LTgwNDAtZGJmZDliOWUyNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjczNTk5ZWYtNWIwYi00Nzk4LTlm NDctODExZDRjMTIwY2IwLzI3MzU5OWVmLTViMGItNDc5OC05ZjQ3LTgxMWQ0YzEy MGNiMC5jcmwwHwYDVR0jBBgwFoAUrNfVqNLwYnXQNaiSrEGS3xM0YYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFk NGMxMjBjYjAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LkMA4E AgACMAgDBgQmAvdsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdxRSa4hWKn5nfDhQV7zcQeM3dMcikZesL LzVeTLPElJ7tbEmzK6OEHmrc9iC+eXHUMt/sam128JEOMUgAVodGhGhAELCZxYCh g/njB/GJpKph0UKMET3VjxyjjM16+NVyXdpfsAHswWxQZvL4TCkFAWQFYSoNnUcr sLDou6MXNIHLSTqtsbj3NQY1L0RvndSLZEOkjC0OUQHb0g/GnACVP3Y8DI5TmirP GF8qt9wdaKFrFWm1FV5zJ4Ii9CV7V8mqxoFPi6BbUa0D4bc7gUxPX3WSfuawRVcK WuhMmflT22HzUj4wOILYfEGWok+M/6CmFLye1C0PIsYrzfRkWK6K -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:09 2025 by rpki-client