$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: XThxFdSnEnaQ7M2vhQ+mZ2bueYowHUhOWK23BxNpmzg= Subject key identifier: 01:D7:C0:BA:66:42:FE:16:56:8F:49:EB:1C:DC:D4:5E:59:32:73:9C Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F4328584B8EACC4112187B9A12DC4C000 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:11:21:87:b9:a1:2d:c4:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b1c62d31-6c38-4ab0-ab39-184046ccb4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:59:ea:8b:8f:59:bb:9b:01:81:f0:36:c4: 4a:0f:4d:70:46:b5:99:29:6b:50:50:39:34:b0:58: c2:c1:0a:ab:f5:39:ab:90:8c:76:87:41:3e:62:83: ae:c8:d7:ae:ca:94:28:cf:db:29:e8:0e:dc:f0:e1: 80:37:e1:7b:59:ad:07:9e:11:a1:0d:c6:5a:3a:b7: c1:e9:57:69:8a:ba:b9:af:98:86:b5:3d:fa:92:87: ed:5a:70:3b:55:04:5e:2d:6f:71:64:36:1f:1d:2e: f8:ac:78:5f:70:df:ad:60:00:09:82:47:fe:33:3c: d7:f3:69:f0:11:27:44:ce:0a:fb:b9:ec:f0:00:e8: b9:d0:cc:42:7b:29:6b:69:c9:96:50:21:c5:2b:ca: 1b:f0:21:b0:52:f0:f2:4f:91:12:6b:1c:36:87:56: 31:28:ff:8d:11:38:88:f7:55:8d:f6:20:6b:0e:aa: fd:5a:88:13:7d:47:70:f1:5d:ca:05:33:51:e1:7c: 26:cd:cd:e3:20:aa:09:fe:9d:31:a0:56:0f:d9:c5: 85:8d:13:c9:60:72:9a:61:bd:6a:04:f9:d4:19:8a: a4:bb:bc:3c:8b:55:1e:6c:38:31:5b:d2:c5:86:d8: ca:07:d3:4a:5a:20:4c:9b:f4:10:49:0e:82:1a:2b: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D7:C0:BA:66:42:FE:16:56:8F:49:EB:1C:DC:D4:5E:59:32:73:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:da:00:2e:6e:1e:45:5d:c6:96:80:14:55:da:0e:1f:c1:a5: 28:00:58:ad:a4:c9:45:82:f8:5a:4f:51:2e:db:e9:46:ef:c6: c1:69:89:d1:af:5f:7f:65:47:8d:a2:c8:1e:71:ae:39:52:48: 0d:3f:91:29:61:f2:26:fd:01:bf:f5:3e:7b:09:b8:68:c7:ff: 2c:6f:b0:47:5c:11:26:54:5f:76:cb:d8:fc:30:de:9e:01:e0: 39:51:30:f2:a2:e6:55:61:b0:ec:07:f7:5a:38:1a:14:d2:ef: f4:d2:ac:bb:96:12:be:40:ed:6f:91:f8:f0:fb:0e:63:80:d2: 17:46:89:b5:65:b6:96:78:b2:0c:5e:18:ed:f6:01:44:fb:07: 02:7f:53:57:ae:7d:95:02:16:4a:ea:d4:9c:65:ba:8b:8b:97: c1:1b:85:1d:20:f4:5f:9f:95:78:1b:89:7a:7b:e0:6f:4f:dd: d9:21:ee:cf:4f:ec:00:e8:83:76:bd:0e:d2:68:50:00:86:bd: 5f:68:12:8d:69:fb:c5:51:97:c9:25:54:39:a6:fa:02:e7:5f: 5b:29:b7:3a:2c:70:a2:15:2e:78:9d:90:ab:df:f2:43:4b:08: 1c:9c:87:7a:32:90:d6:75:f8:f6:70:c3:89:12:92:dd:09:ef: ce:81:c5:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMQRIYe5oS3EwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjFjNjJkMzEtNmMzOC00YWIwLWFiMzktMTg0MDQ2Y2NiNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikpZ6ouPWbubAYHwNsRKD01wRrWZKWtQUDk0 sFjCwQqr9TmrkIx2h0E+YoOuyNeuypQoz9sp6A7c8OGAN+F7Wa0HnhGhDcZaOrfB 6Vdpirq5r5iGtT36koftWnA7VQReLW9xZDYfHS74rHhfcN+tYAAJgkf+MzzX82nw ESdEzgr7uezwAOi50MxCeylracmWUCHFK8ob8CGwUvDyT5ESaxw2h1YxKP+NETiI 91WN9iBrDqr9WogTfUdw8V3KBTNR4Xwmzc3jIKoJ/p0xoFYP2cWFjRPJYHKaYb1q BPnUGYqku7w8i1UebDgxW9LFhtjKB9NKWiBMm/QQSQ6CGit4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHXwLpmQv4WVo9J6xzc1F5ZMnOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfaAC5uHkVdxpaAFFXaDh/BpSgAWK2kyUWC+FpPUS7b6UbvxsFpidGv X39lR42iyB5xrjlSSA0/kSlh8ib9Ab/1PnsJuGjH/yxvsEdcESZUX3bL2Pww3p4B 4DlRMPKi5lVhsOwH91o4GhTS7/TSrLuWEr5A7W+R+PD7DmOA0hdGibVltpZ4sgxe GO32AUT7BwJ/U1eufZUCFkrq1JxluouLl8EbhR0g9F+flXgbiXp74G9P3dkh7s9P 7ADog3a9DtJoUACGvV9oEo1p+8VRl8klVDmm+gLnX1sptzoscKIVLnidkKvf8kNL CBych3oykNZ1+PZww4kSkt0J786BxUI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:54 2025 by rpki-client