$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa File: a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa (raw, json) Hash identifier: hP2pYOEhCIREpi+GJoirTYgRe7NdfIPYESR9DbRY4ZE= Subject key identifier: 02:BA:BA:78:11:CC:F7:33:C2:DE:EE:57:94:91:C5:1C:35:3A:F0:BE Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B7B21FA6D24642F5B9433F0C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 63.215.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fa:6d:24:64:2f:5b:94:33:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=bc18de42-e35e-40fb-8deb-c6d6c8d49a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:88:96:28:9c:41:f3:1c:2f:0e:28:6c:af: 37:85:8b:5b:27:42:2a:43:9c:06:da:f5:20:f6:cb: ac:7f:ba:b9:47:42:89:11:12:bf:1e:f4:f7:62:1e: 99:a8:24:91:14:d0:da:fd:31:44:f4:1d:e1:50:16: ca:28:87:0b:7c:f4:99:4f:5d:6a:bb:16:3f:91:51: 0f:08:3a:44:32:ac:49:98:09:23:d6:7a:0b:4c:b8: 5d:93:eb:aa:4f:4b:0d:0d:c6:a9:71:f5:d8:8d:e0: b1:10:ef:a1:f6:c7:fc:42:2e:27:f6:ec:c7:23:c4: e8:b8:60:ad:f3:18:fe:2c:7f:bc:17:11:e8:d5:bf: a7:2d:84:b6:61:5b:79:43:f1:c4:3e:af:91:80:ed: 74:c8:f4:60:e0:22:15:d9:c9:82:00:e6:20:95:1d: ed:48:ca:68:78:e5:79:87:0f:5e:9c:35:b6:44:f5: 3b:cb:49:e9:9d:6c:21:bf:bb:5c:85:86:f6:b9:08: 0d:e3:ba:26:1c:47:d7:3d:01:e4:e4:73:13:7b:87: 99:2d:36:d3:b2:2d:eb:6f:31:34:78:e1:14:77:18: e9:ca:b0:17:57:35:f6:3c:3c:79:ed:2d:94:99:bb: ee:e5:bf:02:ee:f8:2d:f7:69:40:67:12:5b:44:d4: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:BA:78:11:CC:F7:33:C2:DE:EE:57:94:91:C5:1C:35:3A:F0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 63.215.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:35:b5:00:ab:e2:70:27:83:7a:71:02:18:b7:12:31:6c:94: 63:8b:9d:68:ff:c1:51:08:f1:37:d6:9d:98:60:01:c6:cd:21: ed:98:cc:f0:c2:28:95:54:00:04:47:df:f4:cc:ad:52:e3:49: 62:1b:a9:7a:41:9b:7c:85:41:37:16:01:84:fd:b4:48:0f:af: 7c:51:2c:e6:28:a5:da:af:45:f9:9c:33:22:d6:3b:97:5e:c2: 4e:02:9d:39:b5:cf:91:f9:49:41:7e:da:8b:84:dc:85:97:81: a9:d8:96:d3:99:30:6d:ac:9a:d4:56:e3:bb:0b:01:9f:0d:40: d9:40:41:58:ea:78:3c:a6:93:a4:e5:b4:de:8e:b7:0d:8e:8e: 22:75:98:9a:75:39:7a:19:89:26:78:28:05:3a:3b:fb:9d:71: 46:c9:7c:73:e7:48:52:ff:19:39:d5:75:a4:d1:2f:b0:04:38: ee:5e:3a:df:97:38:f4:49:cb:96:aa:b5:93:7f:6d:f5:cd:d4: 34:9a:43:bb:be:c1:96:1e:9f:12:40:1e:e1:be:7a:64:ce:2a: 7d:f1:f2:73:e1:9c:24:11:63:68:c1:5f:bb:fe:43:ff:96:06: 19:20:87:70:a1:65:1d:12:e7:48:97:a5:51:b6:ee:00:90:ce: 3d:6c:de:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfptJGQvW5Qz8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmMxOGRlNDItZTM1ZS00MGZiLThkZWItYzZkNmM4ZDQ5YTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t+IliicQfMcLw4obK83hYtbJ0IqQ5wG2vUg 9susf7q5R0KJERK/HvT3Yh6ZqCSRFNDa/TFE9B3hUBbKKIcLfPSZT11quxY/kVEP CDpEMqxJmAkj1noLTLhdk+uqT0sNDcapcfXYjeCxEO+h9sf8Qi4n9uzHI8TouGCt 8xj+LH+8FxHo1b+nLYS2YVt5Q/HEPq+RgO10yPRg4CIV2cmCAOYglR3tSMpoeOV5 hw9enDW2RPU7y0npnWwhv7tchYb2uQgN47omHEfXPQHk5HMTe4eZLTbTsi3rbzE0 eOEUdxjpyrAXVzX2PDx57S2Umbvu5b8C7vgt92lAZxJbRNQYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK6ungRzPczwt7uV5SRxRw1OvC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTdmZTllYmMtOTc0OS0z OGFmLTg5ZjEtZmI3YTJhZDY0N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9exMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU1tQCr4nAng3pxAhi3EjFslGOLnWj/wVEI8TfWnZhgAcbNIe2YzPDC KJVUAARH3/TMrVLjSWIbqXpBm3yFQTcWAYT9tEgPr3xRLOYopdqvRfmcMyLWO5de wk4CnTm1z5H5SUF+2ouE3IWXganYltOZMG2smtRW47sLAZ8NQNlAQVjqeDymk6Tl tN6Otw2OjiJ1mJp1OXoZiSZ4KAU6O/udcUbJfHPnSFL/GTnVdaTRL7AEOO5eOt+X OPRJy5aqtZN/bfXN1DSaQ7u+wZYenxJAHuG+emTOKn3x8nPhnCQRY2jBX7v+Q/+W Bhkgh3ChZR0S50iXpVG27gCQzj1s3g8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:24 2025 by rpki-client