$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa File: 2a117ee7-322f-3fb9-aaae-1c614b96e006.roa (raw, json) Hash identifier: UPQqSatwQGFErU6TLitzA7w3ZVkw0CFhtLTgeixGXMo= Subject key identifier: 0D:DA:E2:D0:CA:89:7B:54:D8:D3:24:1F:95:38:1A:72:3F:8D:31:55 Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Certificate serial: 010D0C9F4328584BA39D1BC3865CDAA281A54DC0 Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 63334 IP address blocks: 23.143.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:c3:86:5c:da:a2:81:a5:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=91bd89d7-807a-4180-990a-3880eab62680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:91:a6:80:da:d6:01:a6:67:f9:25:50:d8:5b: be:3f:8d:04:70:ff:f0:bb:cf:a7:3d:34:ec:5f:5a: c6:d8:92:a4:85:10:6d:f6:9a:6f:cf:81:cf:7e:c5: 90:8c:78:39:5f:7c:d5:fe:75:3d:77:6c:4c:1f:21: 3e:79:b0:ee:3d:c8:80:94:15:b2:24:b7:8d:94:a9: 8d:88:61:77:fe:ba:33:ac:cd:9f:3f:19:eb:a2:2a: f7:e8:b0:d5:73:2f:16:f4:e6:53:8e:dc:73:93:13: 43:4f:57:a1:de:f5:91:93:9d:8d:54:d5:8e:12:58: df:22:65:ce:9a:84:c2:8a:06:9d:8e:8f:2b:ed:a9: cc:12:cf:7c:a0:94:ee:e0:7c:a4:96:18:08:7a:3d: 1a:09:46:ee:34:17:ed:91:31:7e:6b:32:f3:6e:a4: 33:8a:58:2b:a4:44:43:89:25:16:af:55:36:b9:37: 0b:0c:ee:e1:46:56:93:e1:77:a6:e9:5a:dc:16:2d: 74:b9:69:f5:b7:75:20:b3:50:66:b7:7e:48:cd:15: d2:ed:0c:43:e5:94:c4:a6:c9:ab:9b:eb:24:e1:b3: a2:e0:80:ee:d8:c3:b0:f6:fa:83:4b:0f:5a:36:52: 24:c3:ca:22:b0:d1:64:f3:56:83:8f:2f:be:c0:51: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DA:E2:D0:CA:89:7B:54:D8:D3:24:1F:95:38:1A:72:3F:8D:31:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl X509v3 Authority Key Identifier: keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:17:3d:f9:18:c8:34:78:f8:2a:aa:02:6a:aa:f9:96:dd:38: 8f:7d:b6:a4:73:5a:8b:a3:91:7b:de:e6:c5:de:38:0f:3a:28: d8:ca:c1:b3:23:51:d2:d1:07:82:da:20:38:6e:66:76:49:09: cd:37:9c:6d:52:f1:50:1e:b7:fb:f7:bb:5a:ee:44:f6:62:6b: 23:1f:09:98:c3:64:43:70:27:f2:35:f6:21:30:1c:4a:03:bf: ab:10:4f:52:16:c4:16:d2:00:02:67:6b:52:be:bb:4b:1e:60: d0:fd:c7:bc:ab:ea:0a:f9:cb:6e:f7:ab:00:9e:67:73:1b:4c: b2:c1:bb:74:18:23:66:c6:fa:5b:f1:63:f5:89:0f:d8:aa:3b: 22:db:08:ca:d4:40:cd:c1:4b:f8:4d:d4:63:da:1f:1f:c5:e4: f6:bc:ca:c1:3b:8f:ed:74:fd:c7:92:75:94:31:29:41:61:95: 91:de:78:05:89:da:26:1b:1d:d3:a2:58:24:90:50:90:6f:45: 8d:71:bf:84:44:58:88:d8:04:1b:39:d1:0b:84:91:87:11:08: 99:25:ba:e4:e6:02:b9:cc:ed:4e:39:51:bf:17:f7:77:1c:2e: 90:d1:d1:75:c8:67:a5:fe:c9:2f:46:67:cd:3b:68:df:ae:b4: 76:ea:d8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRvDhlzaooGlTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk ZGI0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTFiZDg5ZDctODA3YS00MTgwLTk5MGEtMzg4MGVhYjYyNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJGmgNrWAaZn+SVQ2Fu+P40EcP/wu8+nPTTs X1rG2JKkhRBt9ppvz4HPfsWQjHg5X3zV/nU9d2xMHyE+ebDuPciAlBWyJLeNlKmN iGF3/rozrM2fPxnroir36LDVcy8W9OZTjtxzkxNDT1eh3vWRk52NVNWOEljfImXO moTCigadjo8r7anMEs98oJTu4HyklhgIej0aCUbuNBftkTF+azLzbqQzilgrpERD iSUWr1U2uTcLDO7hRlaT4Xem6VrcFi10uWn1t3Ugs1Bmt35IzRXS7QxD5ZTEpsmr m+sk4bOi4IDu2MOw9vqDSw9aNlIkw8oisNFk81aDjy++wFHLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3a4tDKiXtU2NMkH5U4GnI/jTFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMmExMTdlZTctMzIyZi0z ZmI5LWFhYWUtMWM2MTRiOTZlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1 OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5 ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh NTgzOWRkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwXPfkYyDR4+CqqAmqq+ZbdOI99tqRzWoujkXve5sXeOA86KNjKwbMj UdLRB4LaIDhuZnZJCc03nG1S8VAet/v3u1ruRPZiayMfCZjDZENwJ/I19iEwHEoD v6sQT1IWxBbSAAJna1K+u0seYND9x7yr6gr5y273qwCeZ3MbTLLBu3QYI2bG+lvx Y/WJD9iqOyLbCMrUQM3BS/hN1GPaHx/F5Pa8ysE7j+10/ceSdZQxKUFhlZHeeAWJ 2iYbHdOiWCSQUJBvRY1xv4REWIjYBBs50QuEkYcRCJkluuTmArnM7U45Ub8X93cc LpDR0XXIZ6X+yS9GZ807aN+utHbq2B8= -----END CERTIFICATE-----Generated at Wed Nov 5 21:29:05 2025 by rpki-client