$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa File: 840bdcf2-a766-3d79-86c0-da70ee77a15e.roa (raw, json) Hash identifier: glJ6fSTb/AEO12ErQse/JXEyWtKzQDqaArrmsGNnU1w= Subject key identifier: D0:1E:FA:01:2E:6C:34:51:18:6A:31:16:7C:12:52:47:9D:CB:59:14 Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584B41E7168085D780A84CB3C780 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 23.173.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:16:80:85:d7:80:a8:4c:b3:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=16e7c98f-5e36-4608-8697-ed63afd20fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:b8:2a:3a:fe:96:f0:03:92:d8:da:d4:86: 8f:b1:af:e1:d4:48:a0:fb:da:07:bc:cb:2d:cc:e4: a6:12:fa:a1:b0:c3:e7:0b:73:e4:ed:d2:89:16:c6: d0:5c:fc:35:53:2a:55:5e:be:18:85:c6:8f:e2:b1: ac:0c:0c:36:e0:48:39:2f:a8:00:0e:84:70:7f:e4: b7:a1:5b:43:07:30:fa:46:21:ff:e1:30:77:6f:6c: ee:16:7a:c2:70:b8:01:c8:fa:8c:ab:2c:fd:6b:ce: 2f:da:e4:d1:f4:58:50:96:10:fb:da:93:6e:e8:3f: 10:3e:ce:a0:b7:95:83:5f:23:5a:92:26:d5:ae:c4: 82:22:98:da:96:8a:61:0e:eb:4e:f7:8f:38:01:30: c6:eb:af:dd:6a:e7:18:88:55:51:55:9b:e9:10:50: 68:c1:fc:e1:c6:13:05:f3:a5:c9:b4:4b:7d:8c:79: e5:da:54:d3:2d:9b:80:17:08:08:5e:6a:38:5e:60: 5b:3c:e6:8a:5e:85:58:78:2c:7b:72:0b:33:a8:33: 49:a4:58:88:5d:55:18:cf:91:53:ea:92:5a:87:ce: fd:61:75:84:79:7e:6c:3d:34:5f:6a:5a:66:03:06: 67:22:0c:86:ac:4e:cd:bf:b1:a7:b3:2d:e7:d0:5e: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:FA:01:2E:6C:34:51:18:6A:31:16:7C:12:52:47:9D:CB:59:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3a:32:3a:f9:d4:23:de:12:79:a9:03:13:c0:4a:05:d4:e2: 40:b1:d1:fe:89:9d:1b:bf:59:a2:bc:19:00:0a:a6:87:27:4d: dc:5e:a7:28:d2:a9:56:9c:e6:61:84:bf:85:2a:d2:5f:f4:b7: 8e:bb:bc:4b:9b:8b:4f:38:b4:77:4f:53:bb:72:77:77:bc:86: ba:90:ce:7c:ef:fe:c8:05:77:25:2a:61:6c:5b:4b:f1:1b:aa: 9a:67:86:d0:19:99:e2:38:3b:ed:b0:11:91:a7:89:4f:3e:ff: 22:5b:5c:97:d7:45:9c:fe:14:7a:b0:b0:53:ff:ee:fa:f5:ce: c5:51:06:a2:54:de:65:81:e5:38:8b:84:21:a9:af:b9:02:08: 3e:77:c7:3b:ec:70:f1:cf:1d:59:30:ba:4b:bd:e7:07:41:41: 70:1b:53:3a:2a:7c:94:24:ac:3d:98:6b:45:e8:63:ea:9b:a1: 99:de:4d:b9:a2:e5:b3:38:2b:8b:34:e2:b7:72:b6:9f:21:31: 03:8d:de:2e:32:b6:7a:9b:f3:97:63:4b:fc:c0:ba:c6:a4:9c: b7:b0:bc:00:41:41:f7:db:c4:ef:59:c2:5d:e9:3c:57:ed:61: a1:c6:78:e2:96:08:0a:49:8a:fe:a3:b0:4f:1a:15:dd:bb:26: d2:2b:8a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xaAhdeAqEyzx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTZlN2M5OGYtNWUzNi00NjA4LTg2OTctZWQ2M2FmZDIwZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCC4Kjr+lvADktja1IaPsa/h1Eig+9oHvMst zOSmEvqhsMPnC3Pk7dKJFsbQXPw1UypVXr4YhcaP4rGsDAw24Eg5L6gADoRwf+S3 oVtDBzD6RiH/4TB3b2zuFnrCcLgByPqMqyz9a84v2uTR9FhQlhD72pNu6D8QPs6g t5WDXyNakibVrsSCIpjalophDutO9484ATDG66/daucYiFVRVZvpEFBowfzhxhMF 86XJtEt9jHnl2lTTLZuAFwgIXmo4XmBbPOaKXoVYeCx7cgszqDNJpFiIXVUYz5FT 6pJah879YXWEeX5sPTRfalpmAwZnIgyGrE7Nv7Gnsy3n0F6C/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAe+gEubDRRGGoxFnwSUkedy1kUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvODQwYmRjZjItYTc2Ni0z ZDc5LTg2YzAtZGE3MGVlNzdhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF60YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY6Mjr51CPeEnmpAxPASgXU4kCx0f6JnRu/WaK8GQAKpocnTdxepyjS qVac5mGEv4Uq0l/0t467vEubi084tHdPU7tyd3e8hrqQznzv/sgFdyUqYWxbS/Eb qppnhtAZmeI4O+2wEZGniU8+/yJbXJfXRZz+FHqwsFP/7vr1zsVRBqJU3mWB5TiL hCGpr7kCCD53xzvscPHPHVkwuku95wdBQXAbUzoqfJQkrD2Ya0XoY+qboZneTbmi 5bM4K4s04rdytp8hMQON3i4ytnqb85djS/zAusaknLewvABBQffbxO9Zwl3pPFft YaHGeOKWCApJiv6jsE8aFd27JtIrinM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:08:36 2025 by rpki-client