$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa File: 9d9947a0-3836-381e-b040-11cbeaaa83b3.roa (raw, json) Hash identifier: Qu3HmX1r7kYs2ntiggeAQLub1bGEauLpDrQ6UnM7WUI= Subject key identifier: 4C:22:5A:8F:A4:45:DA:17:29:D1:82:59:58:8E:00:05:35:A0:12:07 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584B891768FECACA5371A55A2180 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 139267 IP address blocks: 23.166.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:68:fe:ca:ca:53:71:a5:5a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=dd7061f8-b2b1-4716-b7f3-ae740ce24101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:03:73:2c:57:49:44:9c:2d:54:1c:0a:a1: 23:f1:99:89:27:3b:64:1c:cc:a5:11:4b:0d:7a:a9: ae:55:76:bc:4d:d1:85:fb:f9:4b:ea:bb:2f:d1:49: 73:92:69:6d:ad:4a:7b:de:ef:7b:04:b1:ad:8e:e0: ab:16:54:a5:4e:2c:46:c1:62:3f:c9:16:0d:ec:55: 79:a1:49:57:a7:10:6d:c3:4e:3a:d6:20:af:84:3c: c2:7a:73:c7:df:c6:64:89:23:dc:66:ad:e1:97:58: b6:ea:ea:2a:ee:04:8a:cc:c0:73:72:d5:38:3b:96: b8:28:3c:96:d0:45:e9:dc:a9:6e:fb:0b:41:ad:52: d4:30:79:a6:05:cf:6a:8f:43:bc:e5:7c:68:52:e4: 81:00:65:e8:b8:ba:b1:f5:08:c8:9f:04:ae:4b:a2: 6c:b9:c2:1c:eb:2a:15:9d:f0:a1:4d:b8:b6:28:b6: 11:24:17:16:93:be:56:c4:bb:6e:da:b6:bf:11:64: 7f:b7:88:c5:7b:21:43:62:94:16:20:5d:fd:17:67: 3b:a6:1c:e8:73:ed:4e:fc:98:c3:01:77:51:47:f1: 88:fe:92:3f:4a:0d:aa:a2:9e:33:aa:31:c7:d1:f8: e8:ee:a6:fd:55:9e:c1:af:40:af:e9:37:8c:6b:ee: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:22:5A:8F:A4:45:DA:17:29:D1:82:59:58:8E:00:05:35:A0:12:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/9d9947a0-3836-381e-b040-11cbeaaa83b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 23.166.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:2f:4c:0d:af:e6:6d:85:44:59:35:7a:f8:fd:c8:19:f7:86: ec:68:e2:6e:bb:bd:58:f4:a3:19:ca:70:17:82:7f:87:6c:2b: 6f:77:e9:08:f8:56:4b:27:02:13:b7:d2:ac:2b:03:4d:83:8c: bd:ed:bb:35:ec:0f:69:21:56:39:89:96:90:98:ed:c1:77:28: 66:24:2b:46:7c:a1:a2:e6:ba:0c:51:7c:f7:25:4c:d0:32:05: 8b:eb:be:56:c8:60:c5:81:97:fc:50:77:b1:f9:9a:51:78:96: 8f:c7:89:ff:0b:80:86:b5:23:83:88:4f:ba:63:a2:e1:8b:c0: a6:9b:c8:68:83:0f:ca:07:00:a2:3e:aa:58:b4:78:3a:4b:d3: 5b:bc:57:92:5a:96:60:a1:ab:aa:b1:82:09:be:09:e2:4b:c5: 50:32:43:eb:02:67:92:6f:2d:22:0c:74:30:54:3b:9f:6c:58: e4:92:2f:0e:74:e5:cf:72:38:4d:ee:ab:a7:08:92:fa:97:e9: d8:36:45:ad:b2:17:c8:1e:f8:bb:c1:d4:99:09:69:78:d3:b4: 0b:0d:67:78:a5:e0:e7:cc:9b:55:5a:a5:b0:6f:72:0f:37:9b: 66:f8:4e:d7:69:c4:46:30:c0:87:54:90:38:f1:bf:86:5d:6b: a6:f8:f1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2j+yspTcaVaIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ3MDYxZjgtYjJiMS00NzE2LWI3ZjMtYWU3NDBjZTI0MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh30DcyxXSUScLVQcCqEj8ZmJJztkHMylEUsN eqmuVXa8TdGF+/lL6rsv0UlzkmltrUp73u97BLGtjuCrFlSlTixGwWI/yRYN7FV5 oUlXpxBtw0461iCvhDzCenPH38ZkiSPcZq3hl1i26uoq7gSKzMBzctU4O5a4KDyW 0EXp3Klu+wtBrVLUMHmmBc9qj0O85XxoUuSBAGXouLqx9QjInwSuS6JsucIc6yoV nfChTbi2KLYRJBcWk75WxLtu2ra/EWR/t4jFeyFDYpQWIF39F2c7phzoc+1O/JjD AXdRR/GI/pI/Sg2qop4zqjHH0fjo7qb9VZ7Br0Cv6TeMa+6V9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwiWo+kRdoXKdGCWViOAAU1oBIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvOWQ5OTQ3YTAtMzgzNi0z ODFlLWIwNDAtMTFjYmVhYWE4M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwvTA2v5m2FRFk1evj9yBn3huxo4m67vVj0oxnKcBeCf4dsK2936Qj4 VksnAhO30qwrA02DjL3tuzXsD2khVjmJlpCY7cF3KGYkK0Z8oaLmugxRfPclTNAy BYvrvlbIYMWBl/xQd7H5mlF4lo/Hif8LgIa1I4OIT7pjouGLwKabyGiDD8oHAKI+ qli0eDpL01u8V5JalmChq6qxggm+CeJLxVAyQ+sCZ5JvLSIMdDBUO59sWOSSLw50 5c9yOE3uq6cIkvqX6dg2Ra2yF8ge+LvB1JkJaXjTtAsNZ3il4OfMm1VapbBvcg83 m2b4TtdpxEYwwIdUkDjxv4Zda6b48cg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:48 2025 by rpki-client