$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa File: f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json) Hash identifier: pTwwoTLVic7Wks5zEwOeD4sp+/GN6g/lOq8reRGme/s= Subject key identifier: AB:6E:56:29:4C:26:F1:13:DF:AA:C9:6A:38:1E:30:B6:40:63:40:12 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B5B0745A4B0A96931D0594B00 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 23528 IP address blocks: 168.203.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:45:a4:b0:a9:69:31:d0:59:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d825d5e6-abd3-4bc0-9d48-495447aeae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:fd:b4:8c:6b:52:6b:d6:f1:73:2a:80:86: 8a:14:9c:0e:57:a3:b4:43:a8:dd:5f:cd:f1:ef:3f: 28:1c:6e:d2:37:33:10:3d:71:9a:df:b3:b5:57:ab: 4f:d9:be:fc:19:91:bf:b5:56:9d:0f:9a:b7:ec:c9: b4:de:cc:41:88:4e:21:1d:7c:39:ff:a2:79:fa:76: 2f:e1:46:9d:f2:92:81:a3:57:b5:6d:49:7e:7f:ed: 16:83:8d:01:5d:cf:21:45:05:9f:f0:b2:fe:83:e2: 96:95:13:4c:33:45:60:c1:f6:01:1f:1f:3d:1b:4a: 07:b9:3a:2f:1e:75:28:d9:23:d0:41:16:2a:78:24: f4:62:cd:2b:d2:8f:33:94:e5:5b:94:24:72:fd:80: 54:d7:6c:81:82:e4:d1:9f:fa:69:41:1d:15:b7:20: 2c:6c:07:5b:f7:ff:f4:a0:2a:ee:c1:30:e8:9f:bb: 83:c5:4c:69:c5:28:ad:cd:65:ba:09:f4:4c:c1:16: db:e4:e1:04:8f:34:37:04:e4:23:d0:86:e5:74:f1: df:f3:75:69:4b:c3:fe:16:91:a9:ac:95:31:4f:8a: f8:af:1a:49:8f:de:32:7a:47:03:50:a0:e4:bb:08: a4:3e:ad:ad:c1:13:e6:7f:81:a7:00:10:10:f9:51: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6E:56:29:4C:26:F1:13:DF:AA:C9:6A:38:1E:30:B6:40:63:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3c:bb:30:f0:5a:2c:e5:84:57:1f:f0:fd:af:7f:d2:54:b0: 62:c7:4d:48:af:33:8b:ae:9d:0f:99:e0:6d:bb:36:ea:57:b2: 6f:00:76:15:3e:cb:62:63:28:b7:d5:8f:cf:88:22:73:21:c3: 94:cf:cd:c9:88:7c:23:94:73:13:e5:18:83:e7:9c:9d:fd:6e: 02:d1:dd:c7:bd:2d:a9:bf:a5:f0:c2:d0:31:65:3c:5a:04:b2: 6d:23:3b:b7:27:39:f2:4d:f2:4b:25:af:3f:de:ec:8e:10:f9: 38:a8:45:14:d3:d2:7b:44:2f:89:59:83:fb:04:a9:1a:49:9f: 30:2b:10:f4:03:17:b6:1a:d9:67:fe:30:d1:d1:88:bc:fc:f6: a3:90:f1:d6:85:92:c4:7e:7b:85:e7:4b:90:76:b5:a5:c7:79: d5:38:79:f8:a5:09:23:a0:b7:d4:2f:d8:60:45:2a:69:ba:70: 6c:48:48:6a:a0:92:4f:49:fa:da:04:fd:5f:5e:c5:a1:85:3b: 4d:ea:58:22:d2:1a:4a:7a:3d:56:e7:38:4f:43:90:89:de:c2: e5:61:69:2f:de:61:22:61:9b:c5:36:d0:1b:e1:2d:f4:d6:81: 2b:29:81:63:2a:8e:ec:7f:73:72:b7:82:1e:a8:5d:ce:92:ad: 8a:bc:7f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0WksKlpMdBZSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDgyNWQ1ZTYtYWJkMy00YmMwLTlkNDgtNDk1NDQ3YWVhZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxET9tIxrUmvW8XMqgIaKFJwOV6O0Q6jdX83x 7z8oHG7SNzMQPXGa37O1V6tP2b78GZG/tVadD5q37Mm03sxBiE4hHXw5/6J5+nYv 4Uad8pKBo1e1bUl+f+0Wg40BXc8hRQWf8LL+g+KWlRNMM0VgwfYBHx89G0oHuTov HnUo2SPQQRYqeCT0Ys0r0o8zlOVblCRy/YBU12yBguTRn/ppQR0VtyAsbAdb9//0 oCruwTDon7uDxUxpxSitzWW6CfRMwRbb5OEEjzQ3BOQj0IbldPHf83VpS8P+FpGp rJUxT4r4rxpJj94yekcDUKDkuwikPq2twRPmf4GnABAQ+VHUzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtuVilMJvET36rJajgeMLZAY0ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvZjIzZTJhM2EtYTA3NS0z MWM1LWEwN2UtMWQ0M2RhYzAxNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMs/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA8uzDwWizlhFcf8P2vf9JUsGLHTUivM4uunQ+Z4G27NupXsm8AdhU+ y2JjKLfVj8+IInMhw5TPzcmIfCOUcxPlGIPnnJ39bgLR3ce9Lam/pfDC0DFlPFoE sm0jO7cnOfJN8kslrz/e7I4Q+TioRRTT0ntEL4lZg/sEqRpJnzArEPQDF7Ya2Wf+ MNHRiLz89qOQ8daFksR+e4XnS5B2taXHedU4efilCSOgt9Qv2GBFKmm6cGxISGqg kk9J+toE/V9exaGFO03qWCLSGkp6PVbnOE9DkInewuVhaS/eYSJhm8U20BvhLfTW gSspgWMqjux/c3K3gh6oXc6SrYq8f2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:56 2025 by rpki-client