$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/ba325619-90f1-3263-8d8c-7b5a1e69351c.roa File: ba325619-90f1-3263-8d8c-7b5a1e69351c.roa (raw, json) Hash identifier: VaErQ9XdQWOJjloBrWBiFQ+G6H04tpiW25D9BpUwGzc= Subject key identifier: F2:F5:0B:A8:D0:5C:DD:E7:B7:C6:0B:5B:FC:9C:DB:9A:20:31:92:80 Certificate issuer: /CN=f621e93b-af72-4dc7-bd05-abfaefba3c45 Certificate serial: 010D0C9F4328584B99D7900D0663EC2966813E60 Authority key identifier: E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/ba325619-90f1-3263-8d8c-7b5a1e69351c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40958 IP address blocks: 23.135.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:90:0d:06:63:ec:29:66:81:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f621e93b-af72-4dc7-bd05-abfaefba3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=273d4042-ecd9-4a9e-8ddc-de1179937f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:ce:0e:de:c8:4d:3b:14:5a:97:57:9b:ac: 8a:c2:a7:c7:c8:91:4d:aa:41:38:05:28:61:9a:cd: ca:8d:e3:0a:28:ca:0c:8e:6b:c2:59:df:3e:08:b0: 52:dc:a4:f4:df:b4:e6:1f:96:6d:30:90:ad:2f:f2: 29:fb:3e:dc:5a:1b:36:7d:c1:63:0b:8c:16:39:bc: 2a:96:f5:a2:a4:34:47:5c:b7:be:5e:26:08:5d:a9: fa:e5:b3:23:06:3d:af:2e:f6:e6:1c:93:e9:53:62: 32:b2:f7:97:c0:65:18:af:d8:eb:6f:7f:80:fa:af: ac:34:cd:aa:36:74:b9:cc:af:db:5b:08:47:b6:55: 87:3a:c8:42:46:c4:76:7c:10:cf:43:ed:c9:dc:0c: 84:ce:ea:3e:be:ab:bf:82:ec:49:75:55:f9:69:0b: 7c:a8:56:6c:8e:b1:1e:57:2c:6c:05:ac:35:7a:33: 88:c7:d7:ff:d4:53:c0:98:ba:a7:f4:fc:52:61:53: 61:dd:2d:14:64:a2:5f:ba:8e:95:76:4a:b9:8f:49: cb:d9:8a:26:23:d4:ce:0c:25:db:81:2f:b6:23:ea: 3b:99:d4:d2:d2:56:b7:e2:bc:7b:ec:4c:ac:d3:38: c2:4b:c7:11:f5:3e:cd:a4:9e:ce:38:20:e3:ed:71: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:0B:A8:D0:5C:DD:E7:B7:C6:0B:5B:FC:9C:DB:9A:20:31:92:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/ba325619-90f1-3263-8d8c-7b5a1e69351c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.crl X509v3 Authority Key Identifier: keyid:E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer sbgp-ipAddrBlock: critical IPv4: 23.135.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ff:5e:59:81:16:da:f8:df:31:90:5d:14:5c:c7:8f:4f:3a: 8a:02:8e:12:ef:79:e8:81:e6:b0:8b:7a:f0:67:b7:6d:e4:6d: af:8d:28:da:85:d7:ef:1d:ef:91:60:d1:81:99:95:be:e0:1c: 1b:24:09:c6:0b:60:35:9d:68:97:99:39:89:c1:16:0b:3f:d1: e3:e4:2e:4c:f8:c8:a6:a6:fd:ea:96:47:db:8d:07:41:43:e1: bd:9d:ef:a1:38:d8:1b:e8:eb:3a:34:d7:d5:da:55:fb:62:80: f2:ca:ea:b9:5d:97:63:00:61:05:ba:7c:c9:5d:1e:dd:56:44: 9b:7f:30:7e:03:04:6f:92:eb:61:d0:be:59:a8:2d:d5:28:36: fc:9d:7f:e2:7d:91:2a:e0:ae:97:a4:f3:6e:1a:2f:9d:b0:5f: 54:e0:48:6a:6f:62:73:6b:35:54:5b:d1:6b:20:16:cb:db:39: 38:cc:9b:d9:82:ca:a1:08:d5:01:9c:c5:7b:75:46:80:d4:63: 6f:f8:ec:0f:f0:53:da:ac:ef:df:ef:c5:4b:fc:56:a7:9c:67: 32:78:bf:46:9e:d9:cd:f6:28:6e:f5:4e:96:32:71:a4:76:62: e2:0b:65:fc:d0:4a:c1:5d:c4:40:ec:f3:33:d3:8e:b3:c9:6e: 67:0c:da:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15ANBmPsKWaBPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyMWU5M2ItYWY3Mi00ZGM3LWJkMDUtYWJmYWVmYmEz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjczZDQwNDItZWNkOS00YTllLThkZGMtZGUxMTc5OTM3ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4rODt7ITTsUWpdXm6yKwqfHyJFNqkE4BShh ms3KjeMKKMoMjmvCWd8+CLBS3KT037TmH5ZtMJCtL/Ip+z7cWhs2fcFjC4wWObwq lvWipDRHXLe+XiYIXan65bMjBj2vLvbmHJPpU2IysveXwGUYr9jrb3+A+q+sNM2q NnS5zK/bWwhHtlWHOshCRsR2fBDPQ+3J3AyEzuo+vqu/guxJdVX5aQt8qFZsjrEe VyxsBaw1ejOIx9f/1FPAmLqn9PxSYVNh3S0UZKJfuo6Vdkq5j0nL2YomI9TODCXb gS+2I+o7mdTS0la34rx77Eys0zjCS8cR9T7NpJ7OOCDj7XGyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL1C6jQXN3nt8YLW/yc25ogMZKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjIx ZTkzYi1hZjcyLTRkYzctYmQwNS1hYmZhZWZiYTNjNDUvYmEzMjU2MTktOTBmMS0z MjYzLThkOGMtN2I1YTFlNjkzNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjYyMWU5M2ItYWY3Mi00ZGM3LWJk MDUtYWJmYWVmYmEzYzQ1L2Y2MjFlOTNiLWFmNzItNGRjNy1iZDA1LWFiZmFlZmJh M2M0NS5jcmwwHwYDVR0jBBgwFoAU5vH8cuGxNURXwZ6jdzdVZD8wFdIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjIxZTkzYi1hZjcyLTRkYzctYmQwNS1hYmZh ZWZiYTNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4cMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn/XlmBFtr43zGQXRRcx49POooCjhLveeiB5rCLevBnt23kba+NKNqF 1+8d75Fg0YGZlb7gHBskCcYLYDWdaJeZOYnBFgs/0ePkLkz4yKam/eqWR9uNB0FD 4b2d76E42Bvo6zo019XaVftigPLK6rldl2MAYQW6fMldHt1WRJt/MH4DBG+S62HQ vlmoLdUoNvydf+J9kSrgrpek824aL52wX1TgSGpvYnNrNVRb0WsgFsvbOTjMm9mC yqEI1QGcxXt1RoDUY2/47A/wU9qs79/vxUv8VqecZzJ4v0ae2c32KG71TpYycaR2 YuILZfzQSsFdxEDs8zPTjrPJbmcM2g0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:07:03 2025 by rpki-client