$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa File: b4a1398d-1b75-3e42-b92c-420bd70b3810.roa (raw, json) Hash identifier: 5+y3tCapAPDMaEOklFbW/fK0ejwIeoyw1BknVkr/Mbs= Subject key identifier: 27:19:1E:0C:BE:99:E1:3B:7E:04:09:EE:81:3C:61:25:C3:06:EF:9B Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584B7B21F654BAC5E1D53FC70540 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 18604 IP address blocks: 23.133.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:54:ba:c5:e1:d5:3f:c7:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=74e51dda-3e78-4c5b-bdac-0bbbf019570a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:e1:a7:22:de:af:0a:ab:3e:74:de:70:f9: 64:a7:29:82:04:66:98:3a:6a:a5:07:d7:98:41:27: 69:ad:cf:7f:5d:8f:6c:74:69:5b:3d:18:97:f3:ac: 10:1f:53:65:78:ca:7b:32:52:a4:7f:57:a1:7c:1a: a3:0f:6c:23:c4:fe:7b:5b:5f:ea:75:88:5b:29:2a: 7e:b0:db:7e:70:f4:c0:eb:98:df:05:b0:c9:91:ff: ec:13:45:c9:43:92:e4:61:af:8b:f4:05:2d:12:10: 52:ff:2c:0d:27:62:58:bb:da:4b:ce:c4:93:0f:0b: e6:2d:4a:32:e1:e5:2b:8b:96:a8:1c:23:1c:47:f2: 5d:06:57:e4:6c:ed:9b:99:72:60:5a:6e:63:5b:54: 5f:00:67:34:17:0c:2d:1a:d4:ae:c0:f0:59:34:c1: 59:d9:1d:08:7e:03:00:8d:99:d3:cb:a2:5e:89:dc: ed:b6:46:99:4f:06:67:26:d5:d7:0e:43:78:89:53: be:5b:98:8a:27:e2:c5:ca:75:4f:e2:9c:1b:b7:86: 35:c6:cb:24:05:c7:71:04:30:d3:fd:47:3b:6d:d7: 06:81:db:55:fc:72:ab:10:d5:00:23:ea:4b:25:05: 23:1a:c8:95:39:a1:c0:0a:91:43:16:8f:09:70:8a: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:1E:0C:BE:99:E1:3B:7E:04:09:EE:81:3C:61:25:C3:06:EF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/b4a1398d-1b75-3e42-b92c-420bd70b3810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv4: 23.133.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d0:3e:87:17:34:8a:b9:2f:ba:dd:59:6e:cf:dc:1d:d3:fb: 62:60:38:69:ba:2a:b5:0a:00:80:c0:c0:65:f3:84:e6:56:27: e0:49:a6:26:49:a9:61:4f:a4:08:cc:2c:ea:0c:14:71:ad:db: ca:7f:b7:ef:b5:08:0a:53:83:69:c8:dd:c8:34:63:f5:15:8c: cf:4c:93:4a:9b:b5:fa:d9:fc:ad:a1:3b:f5:ca:12:66:c6:ec: d1:81:89:c6:20:be:48:e7:e1:d7:9b:8a:45:de:8c:32:53:c5: 91:44:1c:56:0a:2a:ef:8f:30:ce:4e:58:ab:46:d6:b2:22:fd: 07:97:5a:38:13:f9:6a:3b:4c:bf:20:33:3a:ba:36:7c:2c:27: d5:da:50:4f:e6:6c:e7:e1:69:f0:49:24:6b:eb:6f:69:9c:f4: 82:cf:e8:1b:3d:e0:af:fa:22:79:8f:2f:79:f7:cf:42:6f:cd: 23:60:fa:54:8c:3a:a6:c6:54:ae:93:4c:9f:3a:1c:bc:97:ef: 77:42:7d:3a:7b:55:d2:4e:82:c1:3b:8f:28:a2:4b:82:d9:80: dc:e0:ed:80:fd:e8:9e:3e:1c:03:b4:18:db:6f:82:69:28:68: 6e:e3:1e:ef:50:06:49:53:90:47:a5:0c:f7:32:d1:c8:4d:1a: d8:88:71:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfZUusXh1T/HBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NzRlNTFkZGEtM2U3OC00YzViLWJkYWMtMGJiYmYwMTk1NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv3hpyLerwqrPnTecPlkpymCBGaYOmqlB9eY QSdprc9/XY9sdGlbPRiX86wQH1NleMp7MlKkf1ehfBqjD2wjxP57W1/qdYhbKSp+ sNt+cPTA65jfBbDJkf/sE0XJQ5LkYa+L9AUtEhBS/ywNJ2JYu9pLzsSTDwvmLUoy 4eUri5aoHCMcR/JdBlfkbO2bmXJgWm5jW1RfAGc0FwwtGtSuwPBZNMFZ2R0IfgMA jZnTy6JeidzttkaZTwZnJtXXDkN4iVO+W5iKJ+LFynVP4pwbt4Y1xsskBcdxBDDT /Uc7bdcGgdtV/HKrENUAI+pLJQUjGsiVOaHACpFDFo8JcIpSAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcZHgy+meE7fgQJ7oE8YSXDBu+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvYjRhMTM5OGQtMWI3NS0z ZTQyLWI5MmMtNDIwYmQ3MGIzODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjQPocXNIq5L7rdWW7P3B3T+2JgOGm6KrUKAIDAwGXzhOZWJ+BJpiZJ qWFPpAjMLOoMFHGt28p/t++1CApTg2nI3cg0Y/UVjM9Mk0qbtfrZ/K2hO/XKEmbG 7NGBicYgvkjn4debikXejDJTxZFEHFYKKu+PMM5OWKtG1rIi/QeXWjgT+Wo7TL8g Mzq6NnwsJ9XaUE/mbOfhafBJJGvrb2mc9ILP6Bs94K/6InmPL3n3z0JvzSNg+lSM OqbGVK6TTJ86HLyX73dCfTp7VdJOgsE7jyiiS4LZgNzg7YD96J4+HAO0GNtvgmko aG7jHu9QBklTkEelDPcy0chNGtiIcXY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:52 2025 by rpki-client