$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa File: 40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa (raw, json) Hash identifier: hPJ/ipUOAgPWaFZIcCWWdUA64kKZAO1K7OSVWaB9huI= Subject key identifier: 3F:82:05:28:2B:DD:F8:85:45:31:9A:B0:D9:F7:E8:1E:CA:AC:10:6E Certificate issuer: /CN=9e180184-106e-41ea-a049-5451e20c2840 Certificate serial: 010D0C9F4328584BB88D59D8AFF253FE87F76680 Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 401511 IP address blocks: 23.129.228.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:59:d8:af:f2:53:fe:87:f7:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9679bb9b-b721-433f-8d20-a955bdda2c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:9d:b2:9c:5c:17:1e:02:7b:54:41:77:ef: 01:03:a3:64:44:fb:b2:27:5c:98:16:08:19:35:7c: 80:dc:f1:df:c0:5d:a6:63:5b:4e:65:23:77:48:2a: c7:29:75:c9:af:52:00:00:ff:ef:82:51:a1:5d:e6: b6:8d:5b:b3:b6:4b:27:34:3f:dd:a3:69:f2:25:63: 99:86:11:fe:b3:48:76:0b:e5:c4:5f:b6:8c:8b:11: 4a:02:d9:32:a3:96:34:ce:06:a2:12:15:19:ea:c6: a8:3e:7c:48:54:65:27:ab:80:6d:fa:2b:c9:fd:59: 32:5f:79:4c:a1:55:e2:f5:78:c0:3d:0d:6b:d2:31: f4:1b:e5:73:01:9c:d8:f3:fb:9b:16:52:7a:86:39: e6:92:d9:a9:1c:a2:9a:bd:89:b6:5f:f6:8f:b8:d9: b2:1a:91:11:e5:38:31:84:9e:1e:b6:63:16:3e:d1: 41:f5:c1:2a:92:5a:1f:1b:78:52:6e:5b:57:84:9c: 76:e6:36:90:24:34:a7:22:c2:77:01:99:e3:9e:34: 59:69:8a:59:d5:b1:f0:0a:30:ed:26:4e:6f:bd:d9: d8:07:20:53:2d:b2:90:83:e6:37:66:37:12:c7:cc: ae:22:46:8b:c4:45:76:57:47:53:38:a5:91:9d:fa: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:05:28:2B:DD:F8:85:45:31:9A:B0:D9:F7:E8:1E:CA:AC:10:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/40bcea70-8fcd-385a-a3c2-2c5fa5e55fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl X509v3 Authority Key Identifier: keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer sbgp-ipAddrBlock: critical IPv4: 23.129.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7b:c1:9f:71:c0:c9:4b:5a:6e:63:da:5e:c9:97:ed:49:cb: df:37:2c:3c:da:3c:15:6d:6d:f6:70:76:60:7d:52:77:51:e3: b4:10:ea:3e:88:93:de:c9:3a:03:c4:74:c2:cb:3c:f3:5c:eb: df:3c:a6:41:42:97:26:27:7f:c3:86:15:ed:c5:18:cd:b7:6b: 06:c2:3c:05:9f:74:9f:10:7d:14:c6:1e:bf:ac:61:57:55:f3: 2b:f6:de:0c:73:c1:5d:9f:18:9f:73:23:83:22:29:f7:75:9c: 4c:4e:56:ff:50:47:43:b7:71:34:9c:97:54:05:04:1a:1c:80: f1:3a:0b:c1:ac:a9:dc:5f:69:e9:6c:b3:21:5a:61:f9:57:0f: 51:19:28:cd:31:49:40:80:f5:36:28:60:ac:8b:f4:6e:28:7c: fe:e1:29:5c:fa:2f:a0:6b:f4:7a:4b:f6:1b:f9:d9:a4:5f:85: 74:7b:cf:90:b2:bc:35:07:19:45:49:8a:39:41:30:fa:af:91: 07:e9:a3:52:3a:cb:7e:7b:74:29:64:0a:fa:3c:0c:4f:e8:1a: 30:9d:03:20:bd:ce:9c:8c:83:87:a2:08:d5:69:5a:a8:11:6d: 5f:ad:8e:52:17:79:f1:23:f7:d4:c1:fa:34:9b:f2:5d:ab:e9: 18:9c:bb:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVnYr/JT/of3ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxODAxODQtMTA2ZS00MWVhLWEwNDktNTQ1MWUyMGMy ODQwMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTY3OWJiOWItYjcyMS00MzNmLThkMjAtYTk1NWJkZGEyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzICdspxcFx4Ce1RBd+8BA6NkRPuyJ1yYFggZ NXyA3PHfwF2mY1tOZSN3SCrHKXXJr1IAAP/vglGhXea2jVuztksnND/do2nyJWOZ hhH+s0h2C+XEX7aMixFKAtkyo5Y0zgaiEhUZ6saoPnxIVGUnq4Bt+ivJ/VkyX3lM oVXi9XjAPQ1r0jH0G+VzAZzY8/ubFlJ6hjnmktmpHKKavYm2X/aPuNmyGpER5Tgx hJ4etmMWPtFB9cEqklofG3hSbltXhJx25jaQJDSnIsJ3AZnjnjRZaYpZ1bHwCjDt Jk5vvdnYByBTLbKQg+Y3ZjcSx8yuIkaLxEV2V0dTOKWRnfor4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+CBSgr3fiFRTGasNn36B7KrBBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4 MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUxZTIwYzI4NDAvNDBiY2VhNzAtOGZjZC0z ODVhLWEzYzItMmM1ZmE1ZTU1ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWUxODAxODQtMTA2ZS00MWVhLWEw NDktNTQ1MWUyMGMyODQwLzllMTgwMTg0LTEwNmUtNDFlYS1hMDQ5LTU0NTFlMjBj Mjg0MC5jcmwwHwYDVR0jBBgwFoAUrAovZ/llPONnk2cyleKZDUGKhh0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUx ZTIwYzI4NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN7wZ9xwMlLWm5j2l7Jl+1Jy983LDzaPBVtbfZwdmB9UndR47QQ6j6I k97JOgPEdMLLPPNc6988pkFClyYnf8OGFe3FGM23awbCPAWfdJ8QfRTGHr+sYVdV 8yv23gxzwV2fGJ9zI4MiKfd1nExOVv9QR0O3cTScl1QFBBocgPE6C8Gsqdxfaels syFaYflXD1EZKM0xSUCA9TYoYKyL9G4ofP7hKVz6L6Br9HpL9hv52aRfhXR7z5Cy vDUHGUVJijlBMPqvkQfpo1I6y357dClkCvo8DE/oGjCdAyC9zpyMg4eiCNVpWqgR bV+tjlIXefEj99TB+jSb8l2r6Ricu+4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:05:01 2025 by rpki-client