$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa File: cea2ec17-5d07-3b0a-8477-302a4c9631df.roa (raw, json) Hash identifier: 3Al2b1WvIYid7jZTXqjFDIX5zhVTkum5lipNB5f7hRI= Subject key identifier: 59:8E:E8:CD:D6:5F:8D:67:C6:B0:29:1D:99:DE:17:87:6B:30:88:D3 Certificate issuer: /CN=16b561b0-e462-4e18-a6cf-e910426a13d0 Certificate serial: 010D0C9F4328584B8BE23CCB6F9A00E6647B4C80 Authority key identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 394590 IP address blocks: 23.144.104.0/24 maxlen: 24 2607:ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:3c:cb:6f:9a:00:e6:64:7b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b561b0-e462-4e18-a6cf-e910426a13d0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=11ec09cd-6a6a-48fb-be84-5f71dd92114c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:ec:f1:99:df:2b:89:45:fb:60:d4:47:3e: b9:ab:54:7a:ac:51:1a:7e:2e:c0:fc:f9:5b:d7:e2: db:2d:c2:11:88:a4:0c:ad:6e:e2:da:38:49:4a:e5: e3:2e:59:f0:88:23:22:16:72:a7:1a:48:29:91:89: 49:49:25:59:36:90:3a:b0:e4:9f:da:a9:54:b3:c5: a0:82:22:78:bc:b5:b5:20:7c:9b:19:24:b6:55:c7: d4:b0:a3:47:4f:e1:4d:86:1a:4e:3b:16:2a:cf:53: cd:04:52:d8:27:24:01:a3:14:fa:24:68:be:10:d9: 21:92:8d:4d:80:7b:7b:fb:e8:85:64:7e:b2:37:5c: 22:1f:a9:b7:cf:25:14:b7:fa:c5:5b:91:c4:a6:be: f9:fe:13:b3:42:35:cf:71:35:67:3d:15:3c:e3:93: 12:30:0d:60:ae:05:79:4b:d0:23:e5:4b:49:01:4d: 10:06:10:a1:f9:56:19:03:cd:6a:6f:6b:8d:82:c7: 5e:fd:15:18:9a:8d:84:f9:5e:66:7e:73:52:85:ee: e6:0d:dc:5b:ff:a5:58:90:0f:ab:14:fa:19:9c:b8: 63:92:19:d8:6b:cf:bc:c4:f0:50:0d:3e:e3:fb:3d: 47:7d:9d:53:8a:77:db:72:1f:84:13:48:cd:e4:fc: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:E8:CD:D6:5F:8D:67:C6:B0:29:1D:99:DE:17:87:6B:30:88:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/cea2ec17-5d07-3b0a-8477-302a4c9631df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.crl X509v3 Authority Key Identifier: keyid:E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer sbgp-ipAddrBlock: critical IPv4: 23.144.104.0/24 IPv6: 2607:ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0d:30:6a:c4:75:a5:cb:00:42:8f:9f:4f:8f:5e:eb:e7:c7: 93:46:6f:ab:ed:86:71:f4:46:e3:9b:6b:2c:f8:f0:c4:cb:07: 6a:d7:67:20:da:de:ea:78:45:b1:b0:20:75:c9:18:b8:6b:51: 14:2b:32:bc:cb:58:c1:75:f6:0b:07:b4:4d:83:bc:96:48:a9: 12:08:2e:0c:3e:da:9f:ea:4c:0a:46:0d:6c:a1:44:62:ee:21: 20:ff:19:60:df:7f:37:e7:7a:c5:9c:6e:f1:71:fa:a7:a7:a4: a2:e5:89:aa:d5:c0:09:57:8c:c4:4e:e4:6a:e2:84:1c:e4:7a: 3d:a9:3d:52:c3:52:6d:be:2d:bc:79:7c:6a:f3:e8:cd:73:0b: 65:7e:c8:b8:c4:ed:15:c8:9b:67:69:9e:3f:af:27:68:ac:49: 8f:a6:7a:6e:38:19:f0:f7:1d:93:8e:83:9d:ab:57:31:d9:ea: e5:2b:da:ce:0f:7b:ff:85:21:bb:2d:1e:fa:2e:bd:74:6d:3e: 33:f8:34:0c:17:c3:be:42:7d:d9:f1:92:6e:32:89:15:a2:d1: be:99:77:20:f6:54:40:de:84:0d:0b:d7:7c:58:4c:3b:2c:de: 04:bc:53:bd:55:6d:f0:56:34:e5:e4:d2:dc:91:5a:2d:f6:69: 47:fe:3e:d1 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuL4jzLb5oA5mR7TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZiNTYxYjAtZTQ2Mi00ZTE4LWE2Y2YtZTkxMDQyNmEx M2QwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MTFlYzA5Y2QtNmE2YS00OGZiLWJlODQtNWY3MWRkOTIxMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4vs8ZnfK4lF+2DURz65q1R6rFEafi7A/Plb 1+LbLcIRiKQMrW7i2jhJSuXjLlnwiCMiFnKnGkgpkYlJSSVZNpA6sOSf2qlUs8Wg giJ4vLW1IHybGSS2VcfUsKNHT+FNhhpOOxYqz1PNBFLYJyQBoxT6JGi+ENkhko1N gHt7++iFZH6yN1wiH6m3zyUUt/rFW5HEpr75/hOzQjXPcTVnPRU845MSMA1grgV5 S9Aj5UtJAU0QBhCh+VYZA81qb2uNgsde/RUYmo2E+V5mfnNShe7mDdxb/6VYkA+r FPoZnLhjkhnYa8+8xPBQDT7j+z1HfZ1Tinfbch+EE0jN5PxCDwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFFmO6M3WX41nxrApHZneF4drMIjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNmI1 NjFiMC1lNDYyLTRlMTgtYTZjZi1lOTEwNDI2YTEzZDAvY2VhMmVjMTctNWQwNy0z YjBhLTg0NzctMzAyYTRjOTYzMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTZiNTYxYjAtZTQ2Mi00ZTE4LWE2 Y2YtZTkxMDQyNmExM2QwLzE2YjU2MWIwLWU0NjItNGUxOC1hNmNmLWU5MTA0MjZh MTNkMC5jcmwwHwYDVR0jBBgwFoAU427Ypd3WwF2CfnPljDVyXAK3bVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNmI1NjFiMC1lNDYyLTRlMTgtYTZjZi1lOTEw NDI2YTEzZDAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5BoMA0E AgACMAcDBQAmBw7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJQNMGrEdaXLAEKPn0+PXuvnx5NGb6vthnH0 RuObayz48MTLB2rXZyDa3up4RbGwIHXJGLhrURQrMrzLWMF19gsHtE2DvJZIqRII Lgw+2p/qTApGDWyhRGLuISD/GWDffzfnesWcbvFx+qenpKLliarVwAlXjMRO5Gri hBzkej2pPVLDUm2+Lbx5fGrz6M1zC2V+yLjE7RXIm2dpnj+vJ2isSY+mem44GfD3 HZOOg52rVzHZ6uUr2s4Pe/+FIbstHvouvXRtPjP4NAwXw75Cfdnxkm4yiRWi0b6Z dyD2VEDehA0L13xYTDss3gS8U71VbfBWNOXk0tyRWi32aUf+PtE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:09 2025 by rpki-client