$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa File: b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa (raw, json) Hash identifier: g5hLB2X8jeYM8Sxfk08pMmS/6Wo40tUNwD85wz0DKB8= Subject key identifier: 79:D7:9D:56:C1:87:07:86:61:4F:92:1B:0E:6C:B3:26:86:8A:3E:8C Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584B821CC3578001D18BAD9DDA40 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 23.166.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c3:57:80:01:d1:8b:ad:9d:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=90a9d499-8955-4609-b6ab-825da3b8abd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:6c:5d:c5:98:15:4b:50:a9:c9:d7:9e:a2: cd:b1:49:4d:ee:08:42:f9:77:30:fc:a3:f3:d1:0b: da:56:f5:3b:1d:7c:c6:e9:99:23:82:df:ca:4d:fe: de:cb:a4:19:63:40:54:11:a8:97:6f:d0:f0:a9:ce: ac:00:d1:13:1d:24:b7:02:82:e7:c3:ce:5f:9e:e8: 11:33:e3:58:fd:fd:b6:de:fc:52:65:5f:b8:c4:3c: cf:2b:3f:2f:a4:ee:0b:66:80:20:ac:54:dd:e7:12: 10:17:c0:81:f0:53:25:a0:f9:d2:10:77:66:29:dd: 4a:f0:43:2d:8a:12:f7:a0:24:e7:1b:7a:74:0e:04: 91:86:be:df:15:bc:f7:7a:a4:df:02:a1:83:f8:da: f3:ce:fe:f9:fc:d0:6b:ac:a0:7b:fe:ff:10:33:e2: 5c:aa:ae:6c:b6:47:0d:aa:e8:c9:bb:cb:21:68:e9: 62:7d:f6:9c:48:ee:19:2d:6c:80:eb:f6:1a:a1:2b: 40:30:cb:07:59:e7:10:88:47:ef:61:cc:73:c8:15: 14:10:cd:ff:4d:c6:86:d7:e6:67:9e:33:b3:3f:31: e3:67:fb:27:2b:b8:72:be:d6:72:5d:c7:66:19:1d: f6:1f:9a:8b:13:02:54:31:23:3f:c9:c2:b5:9e:5c: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D7:9D:56:C1:87:07:86:61:4F:92:1B:0E:6C:B3:26:86:8A:3E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/b1791e4a-7ae2-3559-83b7-39aa1b9cdeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 23.166.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:83:ba:11:90:79:7c:e8:59:ce:af:1e:a2:53:ad:de:cb:da: cb:c1:4b:5e:ff:a4:cb:7f:dd:93:76:a7:24:59:70:e0:bf:f6: 00:09:1a:8c:1f:61:b0:23:34:8e:be:46:7a:04:78:e3:05:6a: 0c:b8:c2:22:89:d0:29:a4:95:99:6d:72:14:f9:a5:4b:94:4b: d1:98:55:a9:2d:40:fb:e3:da:09:bb:69:58:06:84:f7:5f:82: 63:84:80:85:ab:0d:28:c1:e5:22:3c:3b:0a:31:5a:c9:92:8f: f3:db:48:b1:7c:de:63:68:36:d1:97:e6:80:45:ab:17:c4:82: 95:e8:90:1a:0b:9d:ba:bd:bb:5f:9d:0c:f8:c4:ca:e6:00:df: d2:1a:d0:7a:79:cc:e8:86:83:dc:8b:4f:cb:9d:a6:b2:29:30: f0:fd:4d:6d:1b:81:69:af:1d:6f:f8:3b:4d:3f:e6:5b:d6:8b: 41:38:e7:90:66:ff:e5:5e:11:0a:8d:2b:f9:d9:e1:fa:b6:24: 15:e6:f4:1a:d1:34:d3:74:0c:87:25:18:47:50:1f:91:e1:ef: cc:73:23:80:d0:35:0f:a0:96:5a:e0:ef:b6:15:f3:32:e1:92: 77:c1:26:21:f0:36:c8:d8:a1:98:60:f9:d7:d0:c3:58:fc:9f: ac:92:06:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMNXgAHRi62d2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTBhOWQ0OTktODk1NS00NjA5LWI2YWItODI1ZGEzYjhhYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKJsXcWYFUtQqcnXnqLNsUlN7ghC+Xcw/KPz 0QvaVvU7HXzG6Zkjgt/KTf7ey6QZY0BUEaiXb9Dwqc6sANETHSS3AoLnw85fnugR M+NY/f223vxSZV+4xDzPKz8vpO4LZoAgrFTd5xIQF8CB8FMloPnSEHdmKd1K8EMt ihL3oCTnG3p0DgSRhr7fFbz3eqTfAqGD+Nrzzv75/NBrrKB7/v8QM+Jcqq5stkcN qujJu8shaOliffacSO4ZLWyA6/YaoStAMMsHWecQiEfvYcxzyBUUEM3/TcaG1+Zn njOzPzHjZ/snK7hyvtZyXcdmGR32H5qLEwJUMSM/ycK1nlz0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnXnVbBhweGYU+SGw5ssyaGij6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvYjE3OTFlNGEtN2FlMi0z NTU5LTgzYjctMzlhYTFiOWNkZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6bgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiDuhGQeXzoWc6vHqJTrd7L2svBS17/pMt/3ZN2pyRZcOC/9gAJGowf YbAjNI6+RnoEeOMFagy4wiKJ0CmklZltchT5pUuUS9GYVaktQPvj2gm7aVgGhPdf gmOEgIWrDSjB5SI8OwoxWsmSj/PbSLF83mNoNtGX5oBFqxfEgpXokBoLnbq9u1+d DPjEyuYA39Ia0Hp5zOiGg9yLT8udprIpMPD9TW0bgWmvHW/4O00/5lvWi0E455Bm /+VeEQqNK/nZ4fq2JBXm9BrRNNN0DIclGEdQH5Hh78xzI4DQNQ+gllrg77YV8zLh knfBJiHwNsjYoZhg+dfQw1j8n6ySBnA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:07 2025 by rpki-client