$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/a1bc1b9c-74eb-31e2-bd23-35456e328471.roa File: a1bc1b9c-74eb-31e2-bd23-35456e328471.roa (raw, json) Hash identifier: pyolb/qBKOSqLp8T2zr+U36IdIoyiPYuRNA5GK+yM2o= Subject key identifier: A5:A0:CB:9E:D9:C8:8A:7F:60:F6:E7:16:D9:54:25:BE:9A:29:89:3A Certificate issuer: /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6 Certificate serial: 010D0C9F4328584B233189FEE4C294F91E585C00 Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/a1bc1b9c-74eb-31e2-bd23-35456e328471.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 53684 IP address blocks: 23.166.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:89:fe:e4:c2:94:f9:1e:58:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=1a65b681-55a9-418c-8f72-da2939db9e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:86:89:2d:45:50:64:1e:ff:4c:e0:65:12: 50:16:c9:1d:a7:c9:d6:92:a3:ad:82:67:37:d5:eb: 75:49:07:b7:71:72:f9:05:b9:df:02:2c:4a:4c:5a: dc:68:8a:4d:42:c2:79:23:5f:a9:1d:dc:3c:0f:a1: 86:78:34:fc:15:77:ad:51:78:7e:0a:e7:2d:a2:45: 9b:5e:73:52:13:bb:e7:ca:f2:10:c8:f6:a4:2b:01: 96:16:16:cf:2e:78:19:bc:8e:81:83:4a:0d:5c:9d: d2:43:67:21:a2:4a:f1:c1:9d:a0:74:ea:0c:31:63: 53:b3:92:c9:cc:a2:71:43:4e:7a:f2:95:19:c8:79: 9d:91:9a:d9:8a:31:95:8e:41:e6:df:8f:08:31:e8: 26:27:70:01:44:9d:2b:fc:b6:94:6d:04:4e:7b:de: 4d:78:04:9a:b1:04:9b:76:e6:c2:1c:9f:45:db:2e: 08:bb:77:c0:a9:29:99:bd:6c:8b:f9:ef:87:e5:e1: 7d:6f:76:bb:38:c6:b9:09:04:6f:6e:b4:fb:80:8a: 51:8d:49:a5:65:e8:cf:1e:2e:9b:f1:d9:3e:b6:2c: b2:88:0c:71:ac:d5:b6:79:04:16:65:eb:d9:d3:c9: 3a:e7:6a:0b:d6:43:88:43:88:04:9d:4c:25:16:29: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:CB:9E:D9:C8:8A:7F:60:F6:E7:16:D9:54:25:BE:9A:29:89:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/a1bc1b9c-74eb-31e2-bd23-35456e328471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl X509v3 Authority Key Identifier: keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer sbgp-ipAddrBlock: critical IPv4: 23.166.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:85:79:22:5a:fc:b7:f0:8d:a9:4b:00:5b:69:dd:10:c1:f8: eb:1b:9e:42:51:bb:cf:6e:51:80:28:c9:4e:bd:92:0b:f5:23: ea:3d:8e:15:c4:e1:6b:5d:92:09:cb:e8:2e:01:3a:40:c3:eb: 9d:1f:36:e6:63:9a:44:6b:16:95:ae:9e:53:7e:c7:6d:3b:3e: 76:09:1b:9a:c4:93:5a:4e:9e:67:8c:a9:bb:d5:fb:3d:8e:35: 30:b4:51:48:3e:d8:19:7c:c9:33:df:50:03:13:36:3d:39:9e: 48:d2:91:5a:64:72:cd:6c:2e:2e:ba:ca:67:2a:33:a2:e3:92: 95:30:19:db:82:32:27:64:7d:fa:41:af:3e:b0:a8:0e:6c:04: ea:31:89:fb:c3:63:6b:14:18:38:11:d7:c5:6f:36:fd:ee:d1: 27:28:50:b8:89:9c:04:93:b1:a5:00:35:42:c4:06:96:6c:bc: 98:6f:85:8b:bf:82:62:5d:6a:a6:10:fe:4e:3c:02:53:18:74: 63:17:62:a2:0a:c5:f1:6b:e9:05:c9:32:90:7d:ac:e1:f9:4a: 37:d7:6c:d8:8a:0e:b6:ea:a4:5c:b7:05:b5:b2:ff:3c:04:86: ad:b7:10:20:f8:07:4c:e6:21:2b:8e:d8:78:d0:c5:22:6c:f9: 0b:cf:1f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYn+5MKU+R5YXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3YTg1NTctM2NiOS00Y2U3LTg5M2MtNThkMDQ2MTcz N2I2MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MWE2NWI2ODEtNTVhOS00MThjLThmNzItZGEyOTM5ZGI5ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0eGiS1FUGQe/0zgZRJQFskdp8nWkqOtgmc3 1et1SQe3cXL5BbnfAixKTFrcaIpNQsJ5I1+pHdw8D6GGeDT8FXetUXh+CuctokWb XnNSE7vnyvIQyPakKwGWFhbPLngZvI6Bg0oNXJ3SQ2chokrxwZ2gdOoMMWNTs5LJ zKJxQ0568pUZyHmdkZrZijGVjkHm348IMegmJ3ABRJ0r/LaUbQROe95NeASasQSb dubCHJ9F2y4Iu3fAqSmZvWyL+e+H5eF9b3a7OMa5CQRvbrT7gIpRjUmlZejPHi6b 8dk+tiyyiAxxrNW2eQQWZevZ08k652oL1kOIQ4gEnUwlFikwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWgy57ZyIp/YPbnFtlUJb6aKYk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdh ODU1Ny0zY2I5LTRjZTctODkzYy01OGQwNDYxNzM3YjYvYTFiYzFiOWMtNzRlYi0z MWUyLWJkMjMtMzU0NTZlMzI4NDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWI3YTg1NTctM2NiOS00Y2U3LTg5 M2MtNThkMDQ2MTczN2I2LzFiN2E4NTU3LTNjYjktNGNlNy04OTNjLTU4ZDA0NjE3 MzdiNi5jcmwwHwYDVR0jBBgwFoAUtnD1lCq+gt8WwiEb4JFQfWp4zx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdhODU1Ny0zY2I5LTRjZTctODkzYy01OGQw NDYxNzM3YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6Y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmFeSJa/LfwjalLAFtp3RDB+OsbnkJRu89uUYAoyU69kgv1I+o9jhXE 4WtdkgnL6C4BOkDD650fNuZjmkRrFpWunlN+x207PnYJG5rEk1pOnmeMqbvV+z2O NTC0UUg+2Bl8yTPfUAMTNj05nkjSkVpkcs1sLi66ymcqM6LjkpUwGduCMidkffpB rz6wqA5sBOoxifvDY2sUGDgR18VvNv3u0ScoULiJnASTsaUANULEBpZsvJhvhYu/ gmJdaqYQ/k48AlMYdGMXYqIKxfFr6QXJMpB9rOH5SjfXbNiKDrbqpFy3BbWy/zwE hq23ECD4B0zmISuO2HjQxSJs+QvPH6M= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:33 2025 by rpki-client