$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa File: 4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa (raw, json) Hash identifier: nV5jG7fZzLVg8XgOa0zttkHO0sRQpGBibp1TYiMYgWM= Subject key identifier: 04:A7:55:45:6E:53:A6:58:42:5E:32:CB:3C:2A:54:E9:E8:C3:D2:F7 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584B2FC187E9B04ADD2C0F3E9020 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 23.180.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:87:e9:b0:4a:dd:2c:0f:3e:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=8f3797e2-1cd1-40a1-b56c-1da5807e86ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:5d:80:ac:d8:e7:68:cd:56:86:0f:23:c9: 26:f7:21:0f:7b:5f:11:4b:7c:b2:70:e1:fc:b3:4b: 23:fd:37:5b:5d:3e:32:bf:89:06:7e:65:29:bf:b8: 3b:03:44:c5:0f:be:61:9f:e1:18:a8:0a:0c:15:31: 7d:2a:2b:e5:1a:9f:74:b7:07:35:66:07:fb:c8:bd: c7:6e:77:86:80:a6:8b:aa:4c:22:20:0a:ee:29:0a: 5d:7a:25:34:9a:28:ae:d0:7c:14:0f:b8:f4:35:01: a5:f3:38:32:88:43:df:02:d1:ed:55:07:a5:69:74: 73:64:48:72:75:b8:97:cd:f7:c7:97:c7:56:46:90: 44:45:88:f8:d8:0e:86:b0:70:51:ee:52:64:c9:1e: 63:84:eb:5f:c6:82:12:3e:78:a6:df:b5:42:ac:81: 87:2b:da:99:e7:1e:94:cc:fc:d0:ba:9c:6d:0b:0b: 9c:4b:f9:ef:8d:ca:0c:94:1e:ac:70:39:61:49:a7: 0a:88:cf:b3:35:5f:d4:12:fc:5b:4b:d1:94:69:ff: 94:e1:38:25:83:d4:e3:de:2f:a6:e0:fb:4b:4d:39: e9:b8:c1:8d:b1:20:8b:57:38:5e:e2:92:d9:01:a2: 5d:7b:b6:3c:5f:05:b1:f6:52:c8:02:71:6c:6f:6d: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A7:55:45:6E:53:A6:58:42:5E:32:CB:3C:2A:54:E9:E8:C3:D2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 23.180.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:aa:82:0c:b8:b4:d9:bc:22:7c:5d:27:d6:c2:23:0e:0d:d8: ec:19:7c:9e:30:ae:47:0c:37:ce:69:a9:12:36:71:e5:a9:f2: a8:53:3f:c8:de:e7:88:01:23:ab:fc:73:47:21:49:d7:28:8a: 92:81:79:e7:15:61:54:88:81:45:f5:9a:e1:75:c8:c4:e3:01: 28:0c:dd:ac:27:d0:cd:89:41:e5:dc:4e:68:4d:a4:ef:9a:9d: 8c:de:80:ac:07:d7:5f:a7:bb:6d:d6:ff:7d:88:a5:c0:ae:e9: ec:67:39:61:19:7a:ab:3c:68:2d:46:53:53:53:90:b2:e6:81: cb:f9:d9:ec:f7:5b:44:65:b6:3e:a0:41:8e:f2:d5:64:1f:e9: b6:67:c1:bd:cc:d9:a4:51:a8:49:2a:90:71:06:ea:25:92:b8: 7b:6e:fd:c1:e0:05:ae:8e:cc:46:ad:54:dd:1d:11:bb:90:a8: 8e:d0:2f:33:51:dc:98:95:86:cb:bd:96:d5:4f:b1:10:37:b0: 1d:0c:f7:69:e6:05:97:b0:05:06:32:6e:01:f9:81:af:6d:0c: 6b:9a:1c:bf:75:88:6b:56:f4:dc:55:ec:bb:8f:dc:e4:5d:fd: e4:7d:37:96:79:a2:a7:99:ce:d4:23:dc:7c:3c:33:05:3a:6a: 85:57:b9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYfpsErdLA8+kCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OGYzNzk3ZTItMWNkMS00MGExLWI1NmMtMWRhNTgwN2U4NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArotdgKzY52jNVoYPI8km9yEPe18RS3yycOH8 s0sj/TdbXT4yv4kGfmUpv7g7A0TFD75hn+EYqAoMFTF9KivlGp90twc1Zgf7yL3H bneGgKaLqkwiIAruKQpdeiU0miiu0HwUD7j0NQGl8zgyiEPfAtHtVQelaXRzZEhy dbiXzffHl8dWRpBERYj42A6GsHBR7lJkyR5jhOtfxoISPnim37VCrIGHK9qZ5x6U zPzQupxtCwucS/nvjcoMlB6scDlhSacKiM+zNV/UEvxbS9GUaf+U4Tglg9Tj3i+m 4PtLTTnpuMGNsSCLVzhe4pLZAaJde7Y8XwWx9lLIAnFsb21hWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASnVUVuU6ZYQl4yyzwqVOnow9L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvNGM1YTA3NWEtYzhkMi0z ZjllLWFlY2UtNmU0MjRmZDVmMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCqggy4tNm8InxdJ9bCIw4N2OwZfJ4wrkcMN85pqRI2ceWp8qhTP8je 54gBI6v8c0chSdcoipKBeecVYVSIgUX1muF1yMTjASgM3awn0M2JQeXcTmhNpO+a nYzegKwH11+nu23W/32IpcCu6exnOWEZeqs8aC1GU1NTkLLmgcv52ez3W0Rltj6g QY7y1WQf6bZnwb3M2aRRqEkqkHEG6iWSuHtu/cHgBa6OzEatVN0dEbuQqI7QLzNR 3JiVhsu9ltVPsRA3sB0M92nmBZewBQYybgH5ga9tDGuaHL91iGtW9NxV7LuP3ORd /eR9N5Z5oqeZztQj3Hw8MwU6aoVXuTw= -----END CERTIFICATE-----Generated at Mon Oct 20 23:18:49 2025 by rpki-client