$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa File: afecdebc-ec0d-30da-8631-4209f266e536.roa (raw, json) Hash identifier: dFd9fzANJ8LSfGOj1Eeh0EvLqU9v5GJ3uKejlChKWRs= Subject key identifier: 00:2F:24:E5:CE:B4:D7:7E:79:08:13:5C:0C:A2:EE:32:27:F4:0E:70 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B2FC188DD1C0749880234C400 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 393336 IP address blocks: 23.163.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:88:dd:1c:07:49:88:02:34:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=8fe5b416-ccf2-46fb-b95e-53438e1e509a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:97:48:c4:e7:b4:b2:ff:4b:a1:7c:2b:ec: e8:a8:e7:8e:3e:83:e5:1d:3b:e4:3b:47:3e:3b:02: 0c:ad:fe:d7:47:24:82:df:5f:1a:ae:d5:10:a2:1d: 65:2f:16:c2:9c:89:16:9c:49:7a:75:8b:be:00:57: 4d:a1:84:0c:3a:8f:39:93:8d:6e:c2:9a:b6:3d:7d: 2f:76:0d:b5:26:ce:85:f8:1b:1b:9e:d7:53:26:cd: cb:22:42:e9:c7:8c:7a:19:4e:d6:3e:ff:a4:40:2a: 90:1e:f1:23:52:9d:78:c9:e1:bc:9b:9f:1f:9a:6b: fd:38:e1:72:2c:f0:4f:16:a7:76:df:e1:2c:3c:2b: 94:b3:62:d8:c9:49:ea:ba:8b:49:98:78:a3:ad:dc: ef:5a:15:6c:b3:1a:c2:37:68:35:44:c2:71:fa:a1: 31:02:25:a1:a8:46:ac:c7:0a:f2:6e:af:69:66:57: 32:dc:27:66:cd:48:f7:fa:d0:2c:09:57:ff:27:7c: 7d:58:2e:7a:fd:c7:ba:46:a3:fb:7a:6a:3a:63:00: d3:22:22:4c:20:80:84:2d:7b:59:94:57:23:a0:76: 25:07:2a:3b:e2:fb:84:ba:a3:94:91:bf:da:4b:bd: b0:66:17:6e:f2:50:d7:d8:1a:0b:7e:47:81:f0:eb: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2F:24:E5:CE:B4:D7:7E:79:08:13:5C:0C:A2:EE:32:27:F4:0E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/afecdebc-ec0d-30da-8631-4209f266e536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 23.163.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:15:d7:54:a6:f6:35:70:92:f6:83:27:9c:c7:7a:87:eb:51: 12:f3:eb:60:fc:37:35:df:38:5b:32:b4:1d:05:30:75:7a:de: fd:b3:0c:77:49:5e:f9:b5:da:af:db:7c:c1:a6:ed:6e:7e:77: 6f:72:be:ec:97:99:ac:34:23:c6:3a:f0:61:d0:68:fd:eb:09: 9b:b3:d8:5f:17:c5:fc:90:22:7e:ca:09:da:d9:3a:0d:82:23: 8f:29:a5:f0:59:92:cd:28:d5:a9:32:b7:91:99:97:1e:0f:cb: 03:fc:28:b8:73:8c:57:7d:f0:74:e8:84:fc:c1:90:c6:e2:9c: 1f:af:fe:94:8b:88:25:39:d0:23:bf:2e:c8:bd:ab:b8:be:32: 9e:ed:b9:e2:03:5b:2a:3f:36:b7:fe:c9:d7:b9:43:77:63:05: 1a:7c:82:50:73:24:6e:cd:72:2c:30:5a:7c:df:9e:f7:d2:8c: 53:48:5f:b2:b3:15:94:66:13:eb:eb:19:1c:c4:3c:18:f7:e5: ac:b1:e9:86:45:01:32:d2:ac:19:74:34:eb:5e:01:26:09:b3: a6:7d:2c:e4:26:c3:cc:ed:dc:25:96:fc:89:c6:35:05:7f:74: 4d:b0:c5:fc:1a:96:8b:9f:d0:ad:ea:44:54:9f:50:6b:8f:07: 2b:e7:7f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYjdHAdJiAI0xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OGZlNWI0MTYtY2NmMi00NmZiLWI5NWUtNTM0MzhlMWU1MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUCXSMTntLL/S6F8K+zoqOeOPoPlHTvkO0c+ OwIMrf7XRySC318artUQoh1lLxbCnIkWnEl6dYu+AFdNoYQMOo85k41uwpq2PX0v dg21Js6F+BsbntdTJs3LIkLpx4x6GU7WPv+kQCqQHvEjUp14yeG8m58fmmv9OOFy LPBPFqd23+EsPCuUs2LYyUnquotJmHijrdzvWhVssxrCN2g1RMJx+qExAiWhqEas xwrybq9pZlcy3CdmzUj3+tAsCVf/J3x9WC56/ce6RqP7emo6YwDTIiJMIICELXtZ lFcjoHYlByo74vuEuqOUkb/aS72wZhdu8lDX2BoLfkeB8OtATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAvJOXOtNd+eQgTXAyi7jIn9A5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYWZlY2RlYmMtZWMwZC0z MGRhLTg2MzEtNDIwOWYyNjZlNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF6PYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoV11Sm9jVwkvaDJ5zHeofrURLz62D8NzXfOFsytB0FMHV63v2zDHdJ Xvm12q/bfMGm7W5+d29yvuyXmaw0I8Y68GHQaP3rCZuz2F8XxfyQIn7KCdrZOg2C I48ppfBZks0o1akyt5GZlx4PywP8KLhzjFd98HTohPzBkMbinB+v/pSLiCU50CO/ Lsi9q7i+Mp7tueIDWyo/Nrf+yde5Q3djBRp8glBzJG7NciwwWnzfnvfSjFNIX7Kz FZRmE+vrGRzEPBj35ayx6YZFATLSrBl0NOteASYJs6Z9LOQmw8zt3CWW/InGNQV/ dE2wxfwalouf0K3qRFSfUGuPByvnf/o= -----END CERTIFICATE-----Generated at Wed Nov 5 01:21:47 2025 by rpki-client