$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa File: 41a63799-17b8-37d9-84b8-f3de51331877.roa (raw, json) Hash identifier: FXPJT7Qvbjd8LhyXudAabViugluNkvCq8isFm+TmXN4= Subject key identifier: 44:26:05:84:E3:60:FD:35:B9:A1:11:C8:6C:DA:91:34:E5:02:D4:FC Certificate issuer: /CN=ab1a140b-878b-41cc-864f-08e0177f7325 Certificate serial: 010D0C9F4328584BA9325B6A34F1E97307E6B980 Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 20473 IP address blocks: 23.150.240.0/24 maxlen: 24 204.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5b:6a:34:f1:e9:73:07:e6:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0573c80b-6f25-44f7-8434-5891688c3876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:2a:36:55:44:62:2b:ba:1b:49:4c:52:04: 53:9e:04:e7:f7:58:45:98:4f:e2:13:5f:18:47:22: a6:6b:11:d7:06:0b:3a:05:af:15:27:55:1f:3d:0f: ef:5a:02:80:87:c8:c1:fe:35:3c:3c:ad:fe:dc:2b: 60:6c:2e:d9:b2:0b:dd:f4:a2:47:17:25:5b:b7:25: f4:9d:e6:fd:ff:4c:e4:79:e0:67:fd:cd:7d:a5:26: d4:c0:94:fd:bf:3d:b9:6d:19:f4:65:fb:34:fc:05: 77:ca:91:2c:82:4a:aa:b6:09:4b:20:2c:ec:d5:91: 4c:35:15:5e:e6:37:c8:08:9b:10:6a:d0:16:48:a9: 32:42:81:3f:84:99:d4:9b:88:00:a5:26:33:32:56: 00:67:15:9f:0e:23:88:49:91:a3:c7:09:e9:2b:97: 3b:74:0e:08:23:cd:d3:1b:3e:bd:5c:78:c5:91:d1: 9b:92:81:76:37:2f:27:da:ec:ae:d5:d7:2e:77:79: c2:b4:4f:97:3c:ba:f8:0b:67:63:68:de:8e:4c:e2: e7:45:35:72:da:fa:a6:ba:6f:79:a0:02:f6:11:fe: b1:b4:9d:a9:74:0b:a6:a2:86:35:de:76:b8:4e:34: 1c:4a:b7:a3:d9:80:86:5d:e6:bf:bd:ad:4b:c4:17: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:05:84:E3:60:FD:35:B9:A1:11:C8:6C:DA:91:34:E5:02:D4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl X509v3 Authority Key Identifier: keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4b:e2:d3:f8:d4:08:c7:9a:1b:9b:7b:46:7a:39:82:53:66: 62:6b:bd:bd:f0:80:06:c8:4d:12:24:7b:44:29:bb:72:1a:a9: 50:f8:9b:13:91:2f:ff:5e:e4:30:51:f4:f6:f5:9b:7d:c5:3e: f2:a1:ee:b5:2b:70:81:d5:65:74:c5:06:e3:84:12:cf:27:65: 69:47:6b:d2:de:e3:9c:a5:fa:ec:9c:3a:46:4a:fd:d5:fd:ea: de:1b:85:de:30:a6:5d:a8:2b:ba:58:1a:54:e7:be:76:a3:5d: 89:a1:e1:7a:78:85:ae:83:b2:1c:60:8d:3d:bf:46:d6:f1:7f: 29:b9:70:03:ff:5e:bb:4b:dc:d5:a3:a2:cf:75:00:e5:2f:3b: eb:b0:7e:c1:59:c2:43:53:92:11:61:11:b0:42:b0:bc:55:98: 00:1a:72:e2:ff:1c:c0:ce:d4:49:2c:b0:64:45:68:fb:09:ed: fa:e5:6a:58:bd:ca:05:7f:4d:a7:73:3a:72:b1:b6:48:cc:6d: fa:57:3c:50:75:2e:c8:6c:39:35:13:b8:7a:7e:d0:03:78:74: f0:0a:00:82:45:cc:ea:23:5b:49:a9:7a:06:4f:8d:94:a9:1a: 77:3b:b6:f3:7a:65:58:e0:9b:2d:c2:86:85:5c:69:47:98:9c: 3b:38:df:d6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEupMltqNPHpcwfmuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3 MzI1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MDU3M2M4MGItNmYyNS00NGY3LTg0MzQtNTg5MTY4OGMzODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6EqNlVEYiu6G0lMUgRTngTn91hFmE/iE18Y RyKmaxHXBgs6Ba8VJ1UfPQ/vWgKAh8jB/jU8PK3+3CtgbC7Zsgvd9KJHFyVbtyX0 neb9/0zkeeBn/c19pSbUwJT9vz25bRn0Zfs0/AV3ypEsgkqqtglLICzs1ZFMNRVe 5jfICJsQatAWSKkyQoE/hJnUm4gApSYzMlYAZxWfDiOISZGjxwnpK5c7dA4II83T Gz69XHjFkdGbkoF2Ny8n2uyu1dcud3nCtE+XPLr4C2djaN6OTOLnRTVy2vqmum95 oAL2Ef6xtJ2pdAumooY13na4TjQcSrej2YCGXea/va1LxBcVzQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEQmBYTjYP01uaERyGzakTTlAtT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFh MTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvNDFhNjM3OTktMTdiOC0z N2Q5LTg0YjgtZjNkZTUxMzMxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWIxYTE0MGItODc4Yi00MWNjLTg2 NGYtMDhlMDE3N2Y3MzI1L2FiMWExNDBiLTg3OGItNDFjYy04NjRmLTA4ZTAxNzdm NzMyNS5jcmwwHwYDVR0jBBgwFoAUcS17FddH32zbmLHcy+0aLSiUV30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUw MTc3ZjczMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5bwAwQA zO5GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAZL4tP41AjHmhube0Z6OYJTZmJrvb3wgAbITRIke0Qpu3Ia qVD4mxORL/9e5DBR9Pb1m33FPvKh7rUrcIHVZXTFBuOEEs8nZWlHa9Le45yl+uyc OkZK/dX96t4bhd4wpl2oK7pYGlTnvnajXYmh4Xp4ha6DshxgjT2/Rtbxfym5cAP/ XrtL3NWjos91AOUvO+uwfsFZwkNTkhFhEbBCsLxVmAAacuL/HMDO1EkssGRFaPsJ 7frlali9ygV/TadzOnKxtkjMbfpXPFB1LshsOTUTuHp+0AN4dPAKAIJFzOojW0mp egZPjZSpGnc7tvN6ZVjgmy3ChoVcaUeYnDs439Y= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:57 2025 by rpki-client