$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa File: 0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa (raw, json) Hash identifier: WkNJYxm0/TSGmWNvrcNXvy7QDvRk3cBQKKmaR6LFTro= Subject key identifier: D8:30:66:8E:11:2E:8D:64:AE:B1:C9:B8:18:15:AF:E2:83:8F:51:2C Certificate issuer: /CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770 Certificate serial: 010D0C9F4328584BC162B0E462115E4C7351ECC0 Authority key identifier: 42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa Signing time: Wed 05 Nov 2025 04:57:34 +0000 ROA not before: Wed 05 Nov 2025 04:57:34 +0000 ROA not after: Tue 03 Feb 2026 04:57:34 +0000 asID: 153391 IP address blocks: 23.128.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:62:b0:e4:62:11:5e:4c:73:51:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770 Validity Not Before: Nov 5 04:57:34 2025 GMT Not After : Feb 3 04:57:34 2026 GMT Subject: CN=5eb5c70a-2ba4-49fa-8664-89bb11d29266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:6c:aa:3a:3c:ad:a3:d5:31:1e:c7:ed:fb: 22:16:19:de:bb:70:d5:e1:c7:e5:9b:cd:2e:a1:13: e0:f3:d6:41:1d:69:ba:81:8d:c3:67:58:14:33:44: 58:3c:b3:e3:52:d4:f2:3e:92:2e:17:6f:1e:69:5d: 1b:bf:31:8d:fc:a0:ed:bd:44:ae:c9:f0:27:1e:b7: ac:14:89:10:71:a1:df:85:69:27:61:3b:3d:9c:e6: 5f:24:b4:fd:ed:1f:27:c5:a3:91:7a:21:52:51:32: 9c:14:2a:a8:29:e0:3b:ce:0a:0c:32:f2:db:a7:12: a9:41:e0:3d:b8:0a:cc:6a:cb:87:71:37:52:89:77: dd:da:ba:b2:ad:ef:cd:79:3a:f2:dd:e1:a4:e5:18: e4:b3:cf:9a:6d:4b:5c:02:15:23:ca:a2:11:1d:7d: 92:9c:c4:c8:d0:50:02:da:1d:ae:be:7e:b7:62:91: 18:67:e1:c1:16:81:ac:00:70:cc:ed:11:f3:ab:13: 6d:d4:75:12:37:8e:56:23:11:57:c9:14:c9:3a:77: 7d:78:97:5c:7a:10:d3:2f:e0:9b:9d:55:43:03:17: 49:e6:a6:17:ba:ff:8b:9e:d3:11:de:c6:fa:b7:c4: 68:a0:90:be:96:33:68:68:a8:09:68:81:95:c4:ef: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:66:8E:11:2E:8D:64:AE:B1:C9:B8:18:15:AF:E2:83:8F:51:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl X509v3 Authority Key Identifier: keyid:42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer sbgp-ipAddrBlock: critical IPv4: 23.128.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ef:8e:96:fa:cf:30:f5:73:ca:08:03:5d:88:fd:b3:3f:de: b1:f3:23:bb:1b:a6:e8:68:b4:71:21:c0:8c:5e:cb:19:e8:7a: 36:ef:d0:ea:b8:55:47:2b:8e:07:19:36:67:c1:45:fa:f7:ab: 6d:2e:7f:8a:e0:04:8b:f6:16:9f:26:a9:40:aa:2a:7c:8d:6f: 9c:56:15:51:e7:cd:36:6e:ff:75:b2:d3:52:eb:39:0a:9e:d1: 81:ff:73:97:7a:37:a4:af:42:d1:0d:62:8a:b5:c9:b5:3d:22: db:a9:98:ae:7a:7d:13:62:86:b0:1a:f1:45:6c:3a:f9:d4:f7: a9:26:fe:c6:60:24:51:8f:54:16:c2:1b:c3:62:b2:84:c4:26: 44:d9:e5:4e:2a:ce:58:ca:cf:1a:2b:cb:be:b9:ad:67:74:73: cd:e5:48:8c:a2:46:64:f1:c8:03:d0:41:fb:1c:97:74:08:77: 95:00:f6:22:53:b7:6a:32:b9:98:01:0e:a4:f9:72:59:f6:93: dc:91:0f:f0:cb:00:41:a4:47:51:0c:a8:b0:18:bf:81:6c:c2: fc:22:55:08:73:9c:15:f7:18:8c:ae:7c:8a:46:1d:d1:a9:b4: 57:56:30:ed:d0:5d:0e:31:ea:44:9e:cf:80:06:4a:2e:01:ee: ec:bd:0c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBYrDkYhFeTHNR7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VjZDZjNzAtMmE0ZS00MGE2LWJkOTQtNGFlMWNhZTRk NzcwMB4XDTI1MTEwNTA0NTczNFoXDTI2MDIwMzA0NTczNFowLzEtMCsGA1UEAxMk NWViNWM3MGEtMmJhNC00OWZhLTg2NjQtODliYjExZDI5MjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBsqjo8raPVMR7H7fsiFhneu3DV4cflm80u oRPg89ZBHWm6gY3DZ1gUM0RYPLPjUtTyPpIuF28eaV0bvzGN/KDtvUSuyfAnHres FIkQcaHfhWknYTs9nOZfJLT97R8nxaOReiFSUTKcFCqoKeA7zgoMMvLbpxKpQeA9 uArMasuHcTdSiXfd2rqyre/NeTry3eGk5Rjks8+abUtcAhUjyqIRHX2SnMTI0FAC 2h2uvn63YpEYZ+HBFoGsAHDM7RHzqxNt1HUSN45WIxFXyRTJOnd9eJdcehDTL+Cb nVVDAxdJ5qYXuv+LntMR3sb6t8RooJC+ljNoaKgJaIGVxO8eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgwZo4RLo1krrHJuBgVr+KDj1EsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWNk NmM3MC0yYTRlLTQwYTYtYmQ5NC00YWUxY2FlNGQ3NzAvMGFmNWY5ODktYWE4Yy0z NmQ4LTk0NjYtOTUzYjdiZmUyN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VjZDZjNzAtMmE0ZS00MGE2LWJk OTQtNGFlMWNhZTRkNzcwLzdlY2Q2YzcwLTJhNGUtNDBhNi1iZDk0LTRhZTFjYWU0 ZDc3MC5jcmwwHwYDVR0jBBgwFoAUQjq1SsjBEOVPDFS4rAdHLlWXaqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWNkNmM3MC0yYTRlLTQwYTYtYmQ5NC00YWUx Y2FlNGQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7vjpb6zzD1c8oIA12I/bM/3rHzI7sbpuhotHEhwIxeyxnoejbv0Oq4 VUcrjgcZNmfBRfr3q20uf4rgBIv2Fp8mqUCqKnyNb5xWFVHnzTZu/3Wy01LrOQqe 0YH/c5d6N6SvQtENYoq1ybU9ItupmK56fRNihrAa8UVsOvnU96km/sZgJFGPVBbC G8NisoTEJkTZ5U4qzljKzxory765rWd0c83lSIyiRmTxyAPQQfscl3QId5UA9iJT t2oyuZgBDqT5cln2k9yRD/DLAEGkR1EMqLAYv4FswvwiVQhznBX3GIyufIpGHdGp tFdWMO3QXQ4x6kSez4AGSi4B7uy9DPg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:19:06 2025 by rpki-client