$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa File: 4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa (raw, json) Hash identifier: INA/nn9VPAbZY7i9BHNc9r85OUNGystiEhzwUv0QH7c= Subject key identifier: 02:23:49:83:DF:01:09:0E:BA:01:A8:C5:1A:8B:7E:C2:14:09:44:75 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B785744891C7630B6E91EA7A0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 26842 IP address blocks: 206.132.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:44:89:1c:76:30:b6:e9:1e:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=89598f6e-469c-49f9-b9e1-5149e79040c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7a:45:70:8f:c2:89:19:c7:2e:ce:32:b1:46: 01:97:3a:26:1f:8c:f6:56:c6:1f:b4:32:e0:1a:aa: 65:1c:65:9b:dd:a3:74:14:08:6d:6a:9a:5d:77:50: ed:01:6e:41:67:6d:67:dd:0a:3c:77:0c:5a:3d:1e: 17:6c:9d:9a:9e:d4:3b:e2:fc:f3:d0:cd:16:e8:89: 23:8a:eb:d0:06:62:7a:33:af:c8:14:84:9d:85:29: b2:57:fe:10:90:17:ee:80:29:e4:10:8c:81:b3:ae: 7a:47:3c:68:5a:1c:b8:94:a8:14:25:72:f7:c3:73: ae:56:b9:4a:b8:2c:58:4d:90:3b:14:1a:ed:ec:f3: dc:c2:af:0a:ee:93:15:77:60:66:6c:8a:6d:08:29: 24:0c:4a:58:82:d9:51:1a:e3:56:97:c7:64:cf:23: 83:e7:c0:21:cd:58:d4:65:25:44:a7:75:fa:fb:cd: a3:8c:58:13:66:8e:e4:d9:72:29:44:8b:04:94:2b: d6:dd:04:2a:b8:3b:e7:2c:0f:a1:ed:a6:d0:95:9f: b7:81:4f:34:08:93:58:fe:cc:49:61:eb:59:7b:f1: 7f:5e:32:7d:e7:9b:1e:d2:4a:48:7d:0a:1a:09:a4: 5f:22:77:9c:0b:ef:0b:2a:b7:7c:a2:e1:1f:d2:5d: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:49:83:DF:01:09:0E:BA:01:A8:C5:1A:8B:7E:C2:14:09:44:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 206.132.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:38:1d:2e:2e:0e:f9:79:b5:89:31:34:96:92:73:60:ec:53: f5:21:46:80:59:8a:e2:89:5b:02:ce:bc:7b:62:dc:eb:73:bb: 0b:34:dc:c2:53:a6:af:44:0a:36:42:67:b9:33:90:00:8a:83: 9b:8a:32:7f:ef:63:6d:58:a8:77:dd:af:af:b1:65:db:2f:62: 9a:8b:70:c1:4f:2e:18:57:53:49:44:ed:f7:e0:b2:57:ce:a7: 11:5f:35:12:64:47:c4:3f:36:a7:33:4f:f8:46:4a:e3:04:d8: 4d:1a:10:93:31:67:24:fd:11:b9:2e:54:4c:0d:12:ee:d9:77: f8:26:35:38:57:f9:e1:48:9b:fe:b2:10:5c:8e:ed:dd:46:e1: c4:ea:c5:68:fb:73:d5:8f:b2:65:c4:32:3e:74:dc:4f:bf:b8: dc:6f:50:6f:53:c2:20:b1:12:99:47:18:ed:c9:67:7f:29:ae: 26:3a:55:b5:14:c6:b7:13:ad:c4:25:c8:82:e4:e0:56:a5:85: 87:90:6c:74:1b:bb:af:7f:41:9e:18:a2:bf:e3:39:44:5c:cd: f9:85:50:f7:c4:c7:62:e2:6e:8a:16:a5:ae:22:cc:2e:34:11: fe:f4:af:77:8e:3e:e2:c4:21:8b:28:59:1f:a5:d4:3c:09:23: 83:b7:65:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0SJHHYwtukep6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ODk1OThmNmUtNDY5Yy00OWY5LWI5ZTEtNTE0OWU3OTA0MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5npFcI/CiRnHLs4ysUYBlzomH4z2VsYftDLg GqplHGWb3aN0FAhtappdd1DtAW5BZ21n3Qo8dwxaPR4XbJ2antQ74vzz0M0W6Ikj iuvQBmJ6M6/IFISdhSmyV/4QkBfugCnkEIyBs656RzxoWhy4lKgUJXL3w3OuVrlK uCxYTZA7FBrt7PPcwq8K7pMVd2BmbIptCCkkDEpYgtlRGuNWl8dkzyOD58AhzVjU ZSVEp3X6+82jjFgTZo7k2XIpRIsElCvW3QQquDvnLA+h7abQlZ+3gU80CJNY/sxJ YetZe/F/XjJ955se0kpIfQoaCaRfInecC+8LKrd8ouEf0l3ZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIjSYPfAQkOugGoxRqLfsIUCUR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGMwMGQ5MWYtN2ViYS0z ODA5LWJmM2YtZjhhYTc0YWU5ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzoTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY4HS4uDvl5tYkxNJaSc2DsU/UhRoBZiuKJWwLOvHti3Otzuws03MJT pq9ECjZCZ7kzkACKg5uKMn/vY21YqHfdr6+xZdsvYpqLcMFPLhhXU0lE7ffgslfO pxFfNRJkR8Q/NqczT/hGSuME2E0aEJMxZyT9EbkuVEwNEu7Zd/gmNThX+eFIm/6y EFyO7d1G4cTqxWj7c9WPsmXEMj503E+/uNxvUG9TwiCxEplHGO3JZ38priY6VbUU xrcTrcQlyILk4FalhYeQbHQbu69/QZ4Yor/jOURczfmFUPfEx2LibooWpa4izC40 Ef70r3eOPuLEIYsoWR+l1DwJI4O3ZQs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:07 2025 by rpki-client