$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/b06dddd4-784d-3f7c-8e6c-9d1d5b1fc894.roa File: b06dddd4-784d-3f7c-8e6c-9d1d5b1fc894.roa (raw, json) Hash identifier: VVQuddMZwpcWW7Qt9L/4I8FEZzrcjb+35RxYhWZYzP0= Subject key identifier: 74:A6:1B:27:D6:F9:33:82:5C:C8:48:14:3E:06:85:98:0D:36:54:89 Certificate issuer: /CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83 Certificate serial: 010D0C9F4328584B9CA23629570B8D52C6ACC3C0 Authority key identifier: 05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/b06dddd4-784d-3f7c-8e6c-9d1d5b1fc894.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 401513 IP address blocks: 23.130.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:36:29:57:0b:8d:52:c6:ac:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2d4c2a-348d-4380-bc7d-7ec3ced46b83 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=16fd407c-ad07-4233-a0e3-b50f7d5e1fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:bc:55:93:c0:8c:53:f1:2b:af:81:38:d5: 1c:36:f5:b0:da:a8:9e:79:e7:dc:74:f6:b9:d1:f6: 2b:1d:65:36:7d:4d:26:3e:3b:bf:97:77:1f:4d:0f: da:02:97:ba:50:57:40:02:21:4e:bf:73:f2:be:99: c6:e9:b9:d4:e9:7f:3c:66:c5:71:11:87:0d:07:a7: 38:99:46:52:9f:d0:16:b1:f9:71:a5:40:91:52:23: 51:8c:5e:14:85:89:68:83:aa:b8:ea:03:f8:57:29: 9e:86:c8:ca:6b:69:78:10:8b:b4:87:d1:bd:52:39: 3a:69:6a:ca:4d:65:b8:78:5f:6e:2f:8f:94:97:d9: 20:a1:9f:74:75:f0:93:0b:66:5f:29:13:b5:3a:17: 46:ab:a5:e7:01:d0:cd:b8:45:25:27:65:bf:41:a7: 12:2f:85:1f:f5:4e:f9:70:37:e3:4c:11:b5:2c:a2: 11:ff:fc:8c:7b:f5:cd:60:af:e2:a6:76:cb:1a:4a: 26:12:7a:55:91:e3:f1:78:32:8d:85:30:c8:bc:10: cd:99:f0:0c:68:31:bd:0f:61:71:9f:64:78:70:01: cc:f0:52:35:98:8f:5d:d9:3e:3c:b1:30:e3:23:0d: 6b:23:b0:33:95:32:5a:55:58:70:c6:bd:04:e6:59: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A6:1B:27:D6:F9:33:82:5C:C8:48:14:3E:06:85:98:0D:36:54:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/b06dddd4-784d-3f7c-8e6c-9d1d5b1fc894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.crl X509v3 Authority Key Identifier: keyid:05:D9:33:DD:A3:8D:D5:3A:18:CA:6F:FA:6E:AC:CA:11:7E:65:6A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc2d4c2a-348d-4380-bc7d-7ec3ced46b83.cer sbgp-ipAddrBlock: critical IPv4: 23.130.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:48:e7:25:a2:23:f9:f6:76:1f:e2:ff:e9:16:2a:68:ee:7d: 37:67:2e:4a:76:38:41:85:33:bc:15:12:d6:50:f1:82:ac:8b: 4e:cf:67:91:80:6e:69:55:af:f0:d9:d1:9d:2c:7b:83:93:e2: ff:8d:28:56:82:dd:fc:a6:a4:8e:42:ab:81:be:b2:a7:fb:ce: 57:d0:c5:3c:36:b7:f2:e8:e7:3c:2a:df:81:f0:34:7a:4f:05: 39:3d:16:ac:bd:17:08:80:a5:05:9a:f4:7e:77:bb:48:52:09: b2:41:0b:8f:10:15:05:5d:16:8b:f1:f3:a8:79:ad:64:6e:2f: 0e:8f:20:93:78:86:94:d0:5b:29:d4:15:33:80:ba:e8:96:52: 21:02:c1:c0:25:b7:2d:5e:3c:0c:68:b1:24:53:f1:11:ee:33: 93:ff:f4:b5:0f:22:79:c1:51:c8:b7:ad:2f:aa:86:4e:88:3d: ee:77:53:bc:26:e9:39:6d:5f:ab:74:47:68:fb:0c:c9:33:94: b9:9f:be:cf:91:3e:06:34:95:17:56:e6:7d:30:dd:ef:e9:51: 43:ce:83:33:79:51:8e:7a:fb:75:21:c0:24:d3:56:14:7d:3a: 1f:fb:9c:8e:36:82:5e:4f:c8:5a:c8:52:5f:b4:5d:f5:1a:cc: a9:8f:bf:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojYpVwuNUsasw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyZDRjMmEtMzQ4ZC00MzgwLWJjN2QtN2VjM2NlZDQ2 YjgzMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MTZmZDQwN2MtYWQwNy00MjMzLWEwZTMtYjUwZjdkNWUxZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9S8VZPAjFPxK6+BONUcNvWw2qieeefcdPa5 0fYrHWU2fU0mPju/l3cfTQ/aApe6UFdAAiFOv3PyvpnG6bnU6X88ZsVxEYcNB6c4 mUZSn9AWsflxpUCRUiNRjF4UhYlog6q46gP4VymehsjKa2l4EIu0h9G9Ujk6aWrK TWW4eF9uL4+Ul9kgoZ90dfCTC2ZfKRO1OhdGq6XnAdDNuEUlJ2W/QacSL4Uf9U75 cDfjTBG1LKIR//yMe/XNYK/ipnbLGkomEnpVkePxeDKNhTDIvBDNmfAMaDG9D2Fx n2R4cAHM8FI1mI9d2T48sTDjIw1rI7AzlTJaVVhwxr0E5lmaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSmGyfW+TOCXMhIFD4GhZgNNlSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzJk NGMyYS0zNDhkLTQzODAtYmM3ZC03ZWMzY2VkNDZiODMvYjA2ZGRkZDQtNzg0ZC0z ZjdjLThlNmMtOWQxZDViMWZjODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2MyZDRjMmEtMzQ4ZC00MzgwLWJj N2QtN2VjM2NlZDQ2YjgzL2NjMmQ0YzJhLTM0OGQtNDM4MC1iYzdkLTdlYzNjZWQ0 NmI4My5jcmwwHwYDVR0jBBgwFoAUBdkz3aON1ToYym/6bqzKEX5lakowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzJkNGMyYS0zNDhkLTQzODAtYmM3ZC03ZWMz Y2VkNDZiODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4JMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBI5yWiI/n2dh/i/+kWKmjufTdnLkp2OEGFM7wVEtZQ8YKsi07PZ5GA bmlVr/DZ0Z0se4OT4v+NKFaC3fympI5Cq4G+sqf7zlfQxTw2t/Lo5zwq34HwNHpP BTk9Fqy9FwiApQWa9H53u0hSCbJBC48QFQVdFovx86h5rWRuLw6PIJN4hpTQWynU FTOAuuiWUiECwcAlty1ePAxosSRT8RHuM5P/9LUPInnBUci3rS+qhk6IPe53U7wm 6TltX6t0R2j7DMkzlLmfvs+RPgY0lRdW5n0w3e/pUUPOgzN5UY56+3UhwCTTVhR9 Oh/7nI42gl5PyFrIUl+0XfUazKmPvzs= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:49 2025 by rpki-client