$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa File: 696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa (raw, json) Hash identifier: kEgV4BhOdiYdaWOefX3AZ0Ac6r4FQ7DFO4jdAUDJ1HU= Subject key identifier: 35:D0:9D:48:BE:53:46:84:04:38:9B:62:D4:EC:38:28:4C:18:F9:58 Certificate issuer: /CN=10fa2500-375d-430f-932e-9e2080243439 Certificate serial: 010D0C9F4328584B821CD75F3BB65CB4677029C0 Authority key identifier: EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 23261 IP address blocks: 23.131.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d7:5f:3b:b6:5c:b4:67:70:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fa2500-375d-430f-932e-9e2080243439 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6fdd29ef-6624-4b20-b732-87be4fcd4131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:c2:36:a7:df:2e:18:8d:7a:98:0e:18:a0: b0:d8:6c:9a:d4:b9:9a:52:18:f6:d7:24:6c:54:f1: c3:7a:8d:3e:c7:57:15:60:60:34:ff:37:a5:3a:ad: 16:45:45:cb:6a:1c:07:7a:1a:bf:10:11:15:96:d7: 16:1c:99:13:78:81:2e:6a:ae:38:a5:7e:11:b6:08: e0:a0:6d:c7:8e:73:36:68:5c:07:0c:62:44:ba:8f: 74:61:29:77:49:03:4b:f4:6d:79:e7:14:38:29:a5: f4:2f:2f:a9:ec:bf:51:5c:25:8a:63:f9:7a:f2:5a: bd:d3:82:6d:de:92:a5:5c:e5:0f:1b:fc:7f:19:87: 3a:7c:7c:c1:e7:43:88:56:9e:e3:ce:ea:bc:52:f9: be:d0:9f:4b:c6:fc:5a:aa:67:a7:ed:56:6b:17:dd: a9:c3:e1:dc:12:a2:30:3d:85:b5:bf:29:e0:2b:12: 19:32:46:6c:57:4f:f6:d3:bf:18:ce:15:1e:24:b6: 02:99:28:6d:f1:4e:ca:2a:95:c3:6e:04:f9:cc:83: f1:e2:04:66:34:8a:13:d5:68:48:f1:75:15:dd:e0: fb:f4:51:85:32:9f:43:85:ac:25:00:20:53:cb:a0: eb:28:8a:f5:13:a2:de:e7:95:24:ae:ed:7d:f5:75: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:9D:48:BE:53:46:84:04:38:9B:62:D4:EC:38:28:4C:18:F9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl X509v3 Authority Key Identifier: keyid:EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer sbgp-ipAddrBlock: critical IPv4: 23.131.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:29:09:42:6c:63:67:d4:ed:c5:ba:c7:58:72:25:f4:37:95: c3:44:55:8b:b7:87:47:34:0a:2b:4e:67:35:d1:87:94:92:45: af:65:05:22:ad:72:a2:4b:f6:90:e5:cc:ee:0c:a0:3e:a0:e5: e8:d5:eb:d9:fd:24:b9:fd:4d:b5:0d:ee:db:12:19:6b:f6:ab: 96:d5:b4:66:cf:b5:12:9a:df:a5:f8:f9:9c:fb:bb:83:83:63: 12:17:de:23:41:53:ed:b8:1c:36:49:03:e8:49:2a:33:bc:4a: bc:ab:fd:f7:ff:be:d8:0d:5a:35:16:ea:b6:6e:e6:3e:3a:ec: ad:6a:ec:32:2d:8e:3e:fa:a8:86:08:00:42:a2:9f:c9:28:67: 3d:a1:5b:8f:ae:a1:f3:e5:44:75:b9:79:a3:a8:76:b7:a6:70: c9:97:8b:e4:00:43:b7:72:69:b4:1d:6d:2e:d4:0b:44:0a:c3: 89:1d:0b:31:7a:b4:f3:d9:14:97:b4:f4:0d:b4:cc:4a:2f:82: 57:6a:3c:22:60:e0:dd:29:3f:a1:57:47:4c:71:29:e0:9a:e0: 69:bc:4d:22:fc:6b:d9:de:88:44:4b:e9:01:46:59:ee:a7:1d: fc:1c:6a:c3:77:ea:04:18:7f:3b:db:fb:54:74:50:77:ef:6c: 51:8e:92:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNdfO7ZctGdwKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmYTI1MDAtMzc1ZC00MzBmLTkzMmUtOWUyMDgwMjQz NDM5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmZkZDI5ZWYtNjYyNC00YjIwLWI3MzItODdiZTRmY2Q0MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMPCNqffLhiNepgOGKCw2Gya1LmaUhj21yRs VPHDeo0+x1cVYGA0/zelOq0WRUXLahwHehq/EBEVltcWHJkTeIEuaq44pX4Rtgjg oG3HjnM2aFwHDGJEuo90YSl3SQNL9G155xQ4KaX0Ly+p7L9RXCWKY/l68lq904Jt 3pKlXOUPG/x/GYc6fHzB50OIVp7jzuq8Uvm+0J9Lxvxaqmen7VZrF92pw+HcEqIw PYW1vyngKxIZMkZsV0/2078YzhUeJLYCmSht8U7KKpXDbgT5zIPx4gRmNIoT1WhI 8XUV3eD79FGFMp9DhawlACBTy6DrKIr1E6Le55Ukru199XWhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXQnUi+U0aEBDibYtTsOChMGPlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZh MjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIwODAyNDM0MzkvNjk2ZWJkNmEtMWM2NS0z NzU3LThiMmMtM2M0N2RjNGVjODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmYTI1MDAtMzc1ZC00MzBmLTkz MmUtOWUyMDgwMjQzNDM5LzEwZmEyNTAwLTM3NWQtNDMwZi05MzJlLTllMjA4MDI0 MzQzOS5jcmwwHwYDVR0jBBgwFoAU7C7hDidv3q0s+C3xpxhJjMvs25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZhMjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIw ODAyNDM0MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0pCUJsY2fU7cW6x1hyJfQ3lcNEVYu3h0c0CitOZzXRh5SSRa9lBSKt cqJL9pDlzO4MoD6g5ejV69n9JLn9TbUN7tsSGWv2q5bVtGbPtRKa36X4+Zz7u4OD YxIX3iNBU+24HDZJA+hJKjO8Sryr/ff/vtgNWjUW6rZu5j467K1q7DItjj76qIYI AEKin8koZz2hW4+uofPlRHW5eaOodremcMmXi+QAQ7dyabQdbS7UC0QKw4kdCzF6 tPPZFJe09A20zEovgldqPCJg4N0pP6FXR0xxKeCa4Gm8TSL8a9neiERL6QFGWe6n HfwcasN36gQYfzvb+1R0UHfvbFGOkjI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:38 2025 by rpki-client