$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa File: a76cef73-8d84-320c-80d4-c259fca41903.roa (raw, json) Hash identifier: b65+dgHXEihWm9CtFS0gl4BPYEk482jz4uH3TMiwc+Y= Subject key identifier: 91:AE:A5:85:EE:D8:60:B0:F7:7D:32:79:D5:43:A0:25:14:04:D6:FA Certificate issuer: /CN=c7f28602-ca8c-4d41-8405-9ee13915b8a5 Certificate serial: 010D0C9F4328584B9CA2310039F468AE4D3AB9E0 Authority key identifier: A1:9A:97:C9:16:64:74:01:8E:7A:DF:EB:3C:A8:FC:DB:BD:64:A8:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 10804 IP address blocks: 23.174.216.0/24 maxlen: 24 2607:a3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:31:00:39:f4:68:ae:4d:3a:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f28602-ca8c-4d41-8405-9ee13915b8a5 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=168d3376-28a5-4200-86cc-f21befa3e3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:79:ae:d9:dd:df:22:4d:a1:e4:4b:90:27: ff:2b:61:4a:47:f9:26:d2:fc:5a:b0:51:89:e0:16: c6:34:df:7a:0a:1b:fc:ac:52:67:2a:11:4a:83:43: b5:8b:be:33:1f:19:7e:ab:cb:00:35:75:7f:8b:8f: 0f:8a:07:3b:db:25:8f:b6:38:58:b8:3c:3b:3b:2e: c9:c2:e4:0d:b3:ab:be:53:fe:09:24:e1:51:35:fd: 24:10:b8:74:69:a1:88:80:00:a5:40:0b:07:84:c3: 7f:b8:e6:1e:e8:72:ee:dd:05:28:97:15:c4:cf:be: 20:4c:88:67:09:9a:49:40:d5:56:72:5a:cf:bc:4c: 74:89:ce:51:ef:5d:90:f5:4e:dd:b1:9f:a6:a2:0e: cb:56:49:bf:8b:47:a7:6b:7e:5a:56:b5:b7:d2:d1: c9:9d:ca:bc:fa:b8:98:36:88:eb:45:93:25:09:b7: 27:3b:29:f7:47:08:ec:63:a3:aa:c5:1f:a3:6e:85: f2:98:ed:bc:2e:45:ad:b6:a8:df:65:aa:ad:c6:e4: ab:e3:28:56:f8:a0:7e:41:4d:4b:ba:8c:d5:38:fc: 63:72:93:b4:9b:e1:42:de:d4:3c:db:ac:2f:05:f4: ea:57:52:bd:01:96:b5:45:96:be:e2:6e:6f:34:35: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:A5:85:EE:D8:60:B0:F7:7D:32:79:D5:43:A0:25:14:04:D6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.crl X509v3 Authority Key Identifier: keyid:A1:9A:97:C9:16:64:74:01:8E:7A:DF:EB:3C:A8:FC:DB:BD:64:A8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer sbgp-ipAddrBlock: critical IPv4: 23.174.216.0/24 IPv6: 2607:a3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cb:9a:65:63:4d:ee:59:51:45:78:0b:2b:86:93:38:00:21: bc:ba:34:95:c7:27:70:e2:5b:70:2b:e0:c7:84:54:c6:97:a5: 50:39:01:f9:46:fd:c0:5b:d6:9a:ef:d3:64:9c:83:d1:56:8f: 5c:3f:b1:34:d4:0f:1c:89:0e:ad:24:c8:15:59:00:87:11:fe: 28:50:ce:3a:4d:fd:60:1f:72:23:a6:fd:d8:12:2d:e4:25:df: 00:23:72:eb:db:af:83:b4:7d:28:d5:3b:77:3e:c4:83:2d:0b: 04:fb:3c:66:a5:94:7a:15:6f:db:e8:26:30:dc:7e:4c:96:7a: f3:07:35:4f:37:8c:bf:a9:79:e3:61:5e:20:7f:ea:30:a1:1b: 07:17:50:9d:fa:c9:9c:b4:b8:41:41:02:9f:a4:29:f0:f6:b8: b8:fd:68:27:c4:24:e4:f9:04:a1:fa:6c:46:49:b5:4d:31:3e: 36:1e:4f:ed:8c:5f:2e:16:53:58:1d:58:28:8a:d9:06:90:c1: bd:75:56:93:60:19:0d:29:12:0b:b0:9b:5a:b8:e0:f5:8d:d1: f0:56:57:0a:e2:31:92:ae:38:4e:19:04:a0:e4:c6:47:f4:5d: 72:0d:ab:df:4e:82:c5:2c:e2:fa:13:fd:2c:43:bf:52:bf:38: e1:52:af:51 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEucojEAOfRork06ueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmMjg2MDItY2E4Yy00ZDQxLTg0MDUtOWVlMTM5MTVi OGE1MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MTY4ZDMzNzYtMjhhNS00MjAwLTg2Y2MtZjIxYmVmYTNlM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZt5rtnd3yJNoeRLkCf/K2FKR/km0vxasFGJ 4BbGNN96Chv8rFJnKhFKg0O1i74zHxl+q8sANXV/i48Pigc72yWPtjhYuDw7Oy7J wuQNs6u+U/4JJOFRNf0kELh0aaGIgAClQAsHhMN/uOYe6HLu3QUolxXEz74gTIhn CZpJQNVWclrPvEx0ic5R712Q9U7dsZ+mog7LVkm/i0ena35aVrW30tHJncq8+riY NojrRZMlCbcnOyn3RwjsY6OqxR+jboXymO28LkWttqjfZaqtxuSr4yhW+KB+QU1L uozVOPxjcpO0m+FC3tQ826wvBfTqV1K9AZa1RZa+4m5vNDXTFQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJGupYXu2GCw930yedVDoCUUBNb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Yy ODYwMi1jYThjLTRkNDEtODQwNS05ZWUxMzkxNWI4YTUvYTc2Y2VmNzMtOGQ4NC0z MjBjLTgwZDQtYzI1OWZjYTQxOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmMjg2MDItY2E4Yy00ZDQxLTg0 MDUtOWVlMTM5MTViOGE1L2M3ZjI4NjAyLWNhOGMtNGQ0MS04NDA1LTllZTEzOTE1 YjhhNS5jcmwwHwYDVR0jBBgwFoAUoZqXyRZkdAGOet/rPKj8271kqHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2YyODYwMi1jYThjLTRkNDEtODQwNS05ZWUx MzkxNWI4YTUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF67YMA0E AgACMAcDBQAmB6PAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB/LmmVjTe5ZUUV4CyuGkzgAIby6NJXHJ3Di W3Ar4MeEVMaXpVA5AflG/cBb1prv02Scg9FWj1w/sTTUDxyJDq0kyBVZAIcR/ihQ zjpN/WAfciOm/dgSLeQl3wAjcuvbr4O0fSjVO3c+xIMtCwT7PGallHoVb9voJjDc fkyWevMHNU83jL+peeNhXiB/6jChGwcXUJ36yZy0uEFBAp+kKfD2uLj9aCfEJOT5 BKH6bEZJtU0xPjYeT+2MXy4WU1gdWCiK2QaQwb11VpNgGQ0pEguwm1q44PWN0fBW VwriMZKuOE4ZBKDkxkf0XXINq99OgsUs4voT/SxDv1K/OOFSr1E= -----END CERTIFICATE-----Generated at Thu Nov 6 00:41:54 2025 by rpki-client