$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa File: 252c79ea-8e09-336a-a0e3-096a0586430b.roa (raw, json) Hash identifier: rKM0/19e6wcIYwmLCcIxczCervTfBVLS0SF0tU+32MQ= Subject key identifier: 06:08:92:D1:18:BD:43:18:04:05:7C:95:38:A2:92:B6:81:A7:BE:C7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BB88D13CF3B5F1AF094E28200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 23.239.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:13:cf:3b:5f:1a:f0:94:e2:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=077e028c-ef58-4970-969c-4f8055efe81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:61:4f:23:16:3a:c5:4e:7c:56:80:ff:c8: d1:26:d1:df:92:5c:76:75:24:71:1b:12:b3:16:8e: 10:f5:70:0e:cd:ac:3b:9b:08:a2:4d:dd:bf:d8:7b: 69:8a:36:50:e1:fe:aa:4d:10:af:fe:e7:79:01:28: b7:f3:b4:f8:19:78:d2:48:aa:42:fb:bc:df:ad:55: 60:70:58:1d:85:f9:9a:77:00:de:c8:22:38:1a:97: 43:21:66:56:10:88:29:df:50:d1:2f:ec:6b:55:6f: ee:7a:a6:02:58:52:87:53:c8:d6:f4:69:49:40:5a: 56:74:48:40:05:db:2c:b4:43:fd:42:dd:27:0c:2f: 19:1e:8a:1f:a8:9a:95:c3:04:91:bc:fc:31:9c:be: 95:dd:5a:b2:64:32:5d:72:69:c4:44:be:ff:81:0e: ed:cc:e6:48:ac:e9:9b:65:16:14:68:3c:f0:bb:80: e8:9b:3a:16:61:1f:76:43:ad:4a:dc:1a:2c:71:44: aa:00:80:a1:d9:09:4c:40:b3:64:bc:79:6a:df:f0: ee:ed:ef:6b:61:74:c5:75:76:43:6a:f9:cf:cb:ae: 79:24:6d:32:89:e2:3d:1b:10:f1:3d:06:42:c9:7c: 12:e9:31:27:ee:c9:b6:51:24:13:5b:b6:b2:0e:80: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:92:D1:18:BD:43:18:04:05:7C:95:38:A2:92:B6:81:A7:BE:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a6:86:1e:28:2d:0d:97:c2:37:84:f4:65:f5:02:92:93:58: dd:c5:b7:f3:91:96:f6:06:9f:1d:60:28:fc:07:20:24:4b:f1: 47:d9:d7:90:51:99:90:bb:be:21:56:3e:e0:13:0d:3e:03:39: 50:48:a5:09:24:da:58:1c:f2:42:81:eb:92:e0:37:43:f8:2f: 49:fb:b6:2d:41:58:d9:58:f9:1e:da:4c:2b:87:f5:96:5e:33: a7:60:c9:e5:28:21:56:88:75:bd:cd:57:39:79:2f:a7:a0:7e: d0:28:62:0d:21:8e:39:f8:ae:0b:c5:ee:e2:fa:f0:64:c7:ff: 16:5e:36:f9:19:65:02:71:6b:7c:fd:2c:d4:bf:e6:7a:7c:b5: 5e:20:9d:e8:f8:5a:81:d6:df:1b:fa:d6:0f:04:d8:13:27:5a: 35:35:c4:65:6c:b7:a4:32:44:bf:7a:b7:2c:0d:32:83:fa:e3: 57:47:9c:94:60:03:4c:43:66:96:c5:92:02:f4:b6:ea:7e:b3: 8e:f8:ea:87:b6:7c:a6:86:d2:38:70:65:a1:d1:1e:d8:5d:07: 24:d6:8e:16:67:4a:d8:f0:0d:c3:73:dc:6a:ea:74:50:9a:b8: 25:30:44:f6:9b:a6:4e:ab:96:bf:28:ed:bc:a7:ad:cb:47:be: 37:4c:26:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRPPO18a8JTiggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDc3ZTAyOGMtZWY1OC00OTcwLTk2OWMtNGY4MDU1ZWZlODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7NhTyMWOsVOfFaA/8jRJtHfklx2dSRxGxKz Fo4Q9XAOzaw7mwiiTd2/2HtpijZQ4f6qTRCv/ud5ASi387T4GXjSSKpC+7zfrVVg cFgdhfmadwDeyCI4GpdDIWZWEIgp31DRL+xrVW/ueqYCWFKHU8jW9GlJQFpWdEhA BdsstEP9Qt0nDC8ZHoofqJqVwwSRvPwxnL6V3VqyZDJdcmnERL7/gQ7tzOZIrOmb ZRYUaDzwu4DomzoWYR92Q61K3BoscUSqAICh2QlMQLNkvHlq3/Du7e9rYXTFdXZD avnPy655JG0yieI9GxDxPQZCyXwS6TEn7sm2USQTW7ayDoDGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYIktEYvUMYBAV8lTiikraBp77HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjUyYzc5ZWEtOGUwOS0z MzZhLWEwZTMtMDk2YTA1ODY0MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAemhh4oLQ2XwjeE9GX1ApKTWN3Ft/ORlvYGnx1gKPwHICRL8UfZ15BR mZC7viFWPuATDT4DOVBIpQkk2lgc8kKB65LgN0P4L0n7ti1BWNlY+R7aTCuH9ZZe M6dgyeUoIVaIdb3NVzl5L6egftAoYg0hjjn4rgvF7uL68GTH/xZeNvkZZQJxa3z9 LNS/5np8tV4gnej4WoHW3xv61g8E2BMnWjU1xGVst6QyRL96tywNMoP641dHnJRg A0xDZpbFkgL0tup+s4746oe2fKaG0jhwZaHRHthdByTWjhZnStjwDcNz3GrqdFCa uCUwRPabpk6rlr8o7bynrctHvjdMJnM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:29 2025 by rpki-client