$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/ab811883-c0f1-361d-8ce6-c95ee5a1769d.roa File: ab811883-c0f1-361d-8ce6-c95ee5a1769d.roa (raw, json) Hash identifier: +VojA5071RgWK++GxsMHO0ctIkzBFh2hZtaChUAV2lU= Subject key identifier: 4F:DC:37:3D:CD:F7:F2:C1:8B:A1:5C:3A:92:1A:22:68:01:8C:96:6A Certificate issuer: /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Certificate serial: 010D0C9F4328584BBD4776312851CBA83B91B100 Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/ab811883-c0f1-361d-8ce6-c95ee5a1769d.roa Signing time: Mon 03 Nov 2025 17:39:28 +0000 ROA not before: Mon 03 Nov 2025 17:39:28 +0000 ROA not after: Sun 01 Feb 2026 17:39:28 +0000 asID: 396982 IP address blocks: 23.148.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:47:76:31:28:51:cb:a8:3b:91:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b Validity Not Before: Nov 3 17:39:28 2025 GMT Not After : Feb 1 17:39:28 2026 GMT Subject: CN=c34d6ddb-35c9-4f6b-90fa-10f520b446d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:aa:ee:b5:99:f3:07:7f:bf:95:28:32:76: be:52:6d:6f:4a:70:16:02:99:e5:db:69:07:ad:ce: a2:97:77:fb:3a:36:9b:09:c0:c0:3a:ac:82:a2:7f: 97:1e:2f:a3:a1:c7:47:fb:e0:10:6f:dc:c7:79:08: e8:8b:3d:07:5e:d7:90:55:c9:0a:3a:2a:c4:cc:1f: 23:38:7a:76:31:e7:6c:eb:fd:88:09:57:b4:1a:5a: 47:74:21:d4:e1:cb:72:da:e2:55:d5:1b:c2:1f:6c: 6b:7a:a0:12:6f:f1:e8:b9:02:6c:c8:23:43:00:f5: 8a:ab:99:14:0b:73:1c:40:b8:84:b2:17:51:12:0f: 47:5f:41:11:7c:47:c0:e0:0b:4c:49:88:52:04:b7: 87:a2:b4:0c:9b:cc:32:d7:68:87:9c:cc:e7:c5:b1: 25:67:dd:e3:b5:1f:04:51:84:f3:5a:54:d9:b8:14: 1d:db:f9:f7:db:f1:4c:aa:c1:07:35:66:aa:0b:52: 92:50:11:cd:66:5b:31:92:52:17:00:ea:56:e6:ed: e9:68:78:92:47:36:bc:5f:3c:a3:40:15:19:5c:14: 04:93:6d:c6:b8:8b:0f:0e:da:83:4c:1e:28:68:53: 7a:41:36:d0:75:20:c6:f0:00:b0:7d:b8:3b:5a:c1: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DC:37:3D:CD:F7:F2:C1:8B:A1:5C:3A:92:1A:22:68:01:8C:96:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/ab811883-c0f1-361d-8ce6-c95ee5a1769d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl X509v3 Authority Key Identifier: keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer sbgp-ipAddrBlock: critical IPv4: 23.148.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fb:24:63:1b:48:0d:b9:33:88:aa:f0:a1:7b:54:e0:58:40: 60:dc:71:d8:b9:64:25:7f:13:68:4e:a4:42:08:75:26:31:0e: a3:bb:41:c4:ba:2b:ad:da:14:e5:ef:7e:cf:95:d9:01:f0:76: 26:3e:ad:f4:6b:8a:fe:3c:d7:92:c7:a3:2f:71:df:27:5d:1e: 9d:08:6c:7c:b8:31:14:69:25:43:e7:7f:d3:80:52:2b:ac:e3: dd:e4:09:69:8c:9b:66:f7:d1:d3:6f:0f:1a:e7:f1:59:22:38: 43:cc:d0:0e:27:3e:a3:d6:eb:b8:a2:2d:9a:5c:6a:f5:1f:30: aa:46:1c:03:96:cc:90:52:30:59:44:7c:fc:4e:2f:74:8b:23: 95:76:0b:8b:a0:7c:23:65:07:09:a4:4b:85:0c:a3:a5:69:25: 50:ec:02:62:31:6e:09:3c:82:42:ae:bd:f1:e9:3d:7f:68:10: d7:13:25:74:d5:75:4d:d2:fb:76:ae:3b:af:8e:fc:8e:f0:18: fe:39:56:32:af:fe:a2:c2:ec:ee:05:5a:5e:fb:70:65:7b:4c: 66:05:b6:9e:2e:64:01:9a:41:b8:22:5d:96:36:c4:d9:50:dc: c9:44:64:c4:68:70:e2:53:d0:0a:c6:53:b4:83:0e:24:de:c3: 50:1c:17:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9R3YxKFHLqDuRsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTlkZDcwYTctYTZmNS00OTc1LTljMjMtMGFiMTIzNmU2 MDJiMB4XDTI1MTEwMzE3MzkyOFoXDTI2MDIwMTE3MzkyOFowLzEtMCsGA1UEAxMk YzM0ZDZkZGItMzVjOS00ZjZiLTkwZmEtMTBmNTIwYjQ0NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk46q7rWZ8wd/v5UoMna+Um1vSnAWApnl22kH rc6il3f7OjabCcDAOqyCon+XHi+jocdH++AQb9zHeQjoiz0HXteQVckKOirEzB8j OHp2Meds6/2ICVe0GlpHdCHU4cty2uJV1RvCH2xreqASb/HouQJsyCNDAPWKq5kU C3McQLiEshdREg9HX0ERfEfA4AtMSYhSBLeHorQMm8wy12iHnMznxbElZ93jtR8E UYTzWlTZuBQd2/n32/FMqsEHNWaqC1KSUBHNZlsxklIXAOpW5u3paHiSRza8Xzyj QBUZXBQEk23GuIsPDtqDTB4oaFN6QTbQdSDG8ACwfbg7WsF3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/cNz3N9/LBi6FcOpIaImgBjJZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWRk NzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIxMjM2ZTYwMmIvYWI4MTE4ODMtYzBmMS0z NjFkLThjZTYtYzk1ZWU1YTE3NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTlkZDcwYTctYTZmNS00OTc1LTlj MjMtMGFiMTIzNmU2MDJiL2U5ZGQ3MGE3LWE2ZjUtNDk3NS05YzIzLTBhYjEyMzZl NjAyYi5jcmwwHwYDVR0jBBgwFoAU0RJH4f9RDhpe5bL8Dz2d+y6AlYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWRkNzBhNy1hNmY1LTQ5NzUtOWMyMy0wYWIx MjM2ZTYwMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr7JGMbSA25M4iq8KF7VOBYQGDccdi5ZCV/E2hOpEIIdSYxDqO7QcS6 K63aFOXvfs+V2QHwdiY+rfRriv4815LHoy9x3yddHp0IbHy4MRRpJUPnf9OAUius 493kCWmMm2b30dNvDxrn8VkiOEPM0A4nPqPW67iiLZpcavUfMKpGHAOWzJBSMFlE fPxOL3SLI5V2C4ugfCNlBwmkS4UMo6VpJVDsAmIxbgk8gkKuvfHpPX9oENcTJXTV dU3S+3auO6+O/I7wGP45VjKv/qLC7O4FWl77cGV7TGYFtp4uZAGaQbgiXZY2xNlQ 3MlEZMRocOJT0ArGU7SDDiTew1AcF7Q= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:56 2025 by rpki-client