$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/927e5223-3b4b-33b9-acf9-453565708494.roa File: 927e5223-3b4b-33b9-acf9-453565708494.roa (raw, json) Hash identifier: XPmaN989DDEQFXS4zUElIjD6dsPqt7RfeeltTZhJoNY= Subject key identifier: C7:CE:86:07:2F:70:69:BB:EB:4A:95:D7:1F:CE:99:BB:C0:A1:1D:AC Certificate issuer: /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8 Certificate serial: 010D0C9F4328584B1AD187180F6D47F256FD9420 Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/927e5223-3b4b-33b9-acf9-453565708494.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 23.92.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:87:18:0f:6d:47:f2:56:fd:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=249eaa3e-4926-44c5-95dd-3ff558fbb075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:c7:87:6d:74:cd:da:8e:b0:c3:85:ef:da: 5f:f5:41:c0:60:58:44:b8:12:9a:6a:a8:15:40:31: 03:1a:ba:2b:3e:74:c8:2c:e3:3d:1c:6d:9f:f3:2c: 54:1f:36:ab:d3:72:7b:9d:79:17:0a:20:ce:fb:47: 98:4f:5c:38:e4:37:94:95:40:df:e6:e1:78:74:c7: 88:ac:a6:36:a5:bc:0f:64:b5:e5:5a:29:81:e8:a2: 7d:16:e6:51:a8:8f:2c:a0:a1:74:59:62:d2:e9:b1: 8d:9c:41:08:c7:6a:17:62:82:fb:a1:a6:dc:af:44: 8a:d9:e9:65:f5:33:29:42:37:41:88:a9:12:0c:b1: 1d:2d:c3:47:fc:66:ed:f7:6e:0a:fd:9c:68:ab:0e: 01:51:0b:80:74:2e:13:d6:3c:70:83:8f:1f:7e:b5: 2b:22:a9:28:19:ce:13:08:81:56:84:f5:eb:a9:43: 85:63:1b:e1:50:eb:e5:75:79:22:54:d5:d0:21:d9: 8f:48:db:d9:33:86:28:32:ec:94:c7:c8:83:77:4b: 0a:c1:3c:b8:35:13:16:c0:41:50:21:cc:c9:bf:8d: 64:60:c5:bc:30:60:c7:86:66:99:f8:1f:38:a3:0c: 99:81:be:61:63:28:f2:6e:61:c0:f8:13:38:e0:96: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:86:07:2F:70:69:BB:EB:4A:95:D7:1F:CE:99:BB:C0:A1:1D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/927e5223-3b4b-33b9-acf9-453565708494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl X509v3 Authority Key Identifier: keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer sbgp-ipAddrBlock: critical IPv4: 23.92.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:65:2b:b7:0b:38:c2:02:72:b3:43:80:c4:72:a3:70:ae:a3: 6d:45:58:8f:7c:a9:3c:0a:22:54:d0:23:78:e1:11:d6:fb:e7: 6a:0d:0b:d0:76:58:c0:35:e2:8c:eb:6f:e7:9a:3f:5e:d5:70: 2a:16:44:64:03:18:0b:38:1d:c3:f0:54:ab:da:79:45:40:17: 67:c9:43:b5:61:12:81:3e:ae:0b:43:90:21:c2:9a:6e:7b:6b: 7b:41:79:07:4e:7c:df:cc:89:95:52:23:6a:29:70:59:79:a3: c0:84:b2:ab:a9:c7:68:96:26:7e:ca:26:5a:5c:ca:cf:78:cb: 7f:6d:cf:34:82:94:74:47:ef:74:e9:61:ea:83:80:89:71:33: 1a:1e:e1:28:ee:e5:49:9e:62:a9:29:32:00:95:32:90:dd:62: 50:88:9c:97:9b:32:75:70:63:44:ad:6a:8e:cc:02:e7:8c:0d: 4f:c4:76:44:21:08:60:01:07:b4:82:fe:4d:76:ac:9b:45:02: 57:4d:27:f2:bc:c2:99:7d:9e:9c:b8:ef:9d:37:cb:81:62:f4: 08:60:f1:21:ec:2c:f0:cf:3f:12:97:ba:9d:20:97:15:4c:7e: d3:9f:5f:73:79:33:76:e9:f7:29:be:05:71:0d:76:47:b5:d7: fb:2c:db:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YcYD21H8lb9lCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm NGU4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjQ5ZWFhM2UtNDkyNi00NGM1LTk1ZGQtM2ZmNTU4ZmJiMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d7Hh210zdqOsMOF79pf9UHAYFhEuBKaaqgV QDEDGrorPnTILOM9HG2f8yxUHzar03J7nXkXCiDO+0eYT1w45DeUlUDf5uF4dMeI rKY2pbwPZLXlWimB6KJ9FuZRqI8soKF0WWLS6bGNnEEIx2oXYoL7oabcr0SK2ell 9TMpQjdBiKkSDLEdLcNH/Gbt924K/Zxoqw4BUQuAdC4T1jxwg48ffrUrIqkoGc4T CIFWhPXrqUOFYxvhUOvldXkiVNXQIdmPSNvZM4YoMuyUx8iDd0sKwTy4NRMWwEFQ IczJv41kYMW8MGDHhmaZ+B84owyZgb5hYyjybmHA+BM44JZqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfOhgcvcGm760qV1x/OmbvAoR2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvOTI3ZTUyMjMtM2I0Yi0z M2I5LWFjZjktNDUzNTY1NzA4NDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1 ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1 OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF1yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhlK7cLOMICcrNDgMRyo3Cuo21FWI98qTwKIlTQI3jhEdb752oNC9B2 WMA14ozrb+eaP17VcCoWRGQDGAs4HcPwVKvaeUVAF2fJQ7VhEoE+rgtDkCHCmm57 a3tBeQdOfN/MiZVSI2opcFl5o8CEsqupx2iWJn7KJlpcys94y39tzzSClHRH73Tp YeqDgIlxMxoe4Sju5UmeYqkpMgCVMpDdYlCInJebMnVwY0Stao7MAueMDU/EdkQh CGABB7SC/k12rJtFAldNJ/K8wpl9npy47503y4Fi9Ahg8SHsLPDPPxKXup0glxVM ftOfX3N5M3bp9ym+BXENdke11/ss26s= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:18 2025 by rpki-client