$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: +e+8DcIrbVV/TqVhZ/fMLcH07FZg+YansVyBkQ3oYy8= Subject key identifier: 9C:85:77:42:90:27:DA:1B:4F:75:6C:19:B6:11:A9:5F:65:E3:ED:DC Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B2CF6E88463C2FAC108FBAD20 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e8:84:63:c2:fa:c1:08:fb:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=352a9840-53c3-426d-8fa6-e8624b4f4a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:38:0b:c8:77:58:9f:8c:4f:f0:05:12:75: f1:a2:18:0c:6d:a0:54:b9:b8:f8:42:62:9b:13:e6: bf:dc:f9:83:90:e8:fc:b9:82:04:8f:f7:80:33:84: 90:85:8d:31:d2:bf:32:66:fe:ea:fc:bb:2b:c3:e1: 00:f8:f0:79:98:58:a8:8a:1e:bb:ea:9a:7e:e9:53: 54:0f:3e:a6:a2:d5:3e:c1:ea:e9:7b:05:31:c0:ce: b2:fe:3b:70:b8:b5:ff:67:f7:9c:50:e4:30:17:47: cb:d1:e8:25:6f:2b:3d:80:36:aa:21:df:a9:e7:de: a3:42:33:0d:b9:58:35:24:8d:d3:38:34:c9:87:05: c2:48:e5:fe:67:6c:e8:18:cc:c5:f3:00:66:83:5d: 3c:00:79:fd:65:3f:bf:2e:e7:23:84:4d:55:f0:ea: 09:64:70:70:60:e4:9a:83:7f:5c:1f:a4:7b:65:f3: b6:6e:78:9d:1a:1f:6f:cc:1b:29:53:9c:17:65:b7: 11:98:a0:90:d0:b7:95:bb:76:df:a1:5e:4b:1a:ac: 7b:2d:f5:ad:32:23:e8:a0:ba:aa:03:42:9f:79:33: ca:49:52:fe:49:bd:5e:06:4c:e0:d9:c5:6e:5d:cd: 32:c9:6f:61:bf:b5:73:e1:4a:1e:75:6f:db:e6:dc: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:77:42:90:27:DA:1B:4F:75:6C:19:B6:11:A9:5F:65:E3:ED:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:13:aa:6b:10:25:4c:d5:de:0f:17:da:d8:94:6a:e4:5f:4b: f0:90:83:54:be:ee:38:05:96:b2:82:6d:44:df:9e:b2:bd:ea: c9:ac:db:09:a7:fa:ee:f3:e0:55:ae:30:e9:cb:f2:42:a6:a9: 81:6c:8c:28:d5:65:da:74:93:ef:e1:bb:82:40:6b:1b:82:c5: cb:d7:ba:9c:82:9e:e0:f5:c1:17:d2:a9:8c:cb:cf:0c:31:ee: 36:b8:ce:03:1f:73:4d:f2:74:82:70:64:13:2b:91:7d:c9:a0: e1:88:d0:23:26:46:73:2b:38:ff:95:31:e5:6a:ce:a5:d0:0a: b5:0f:be:38:f0:33:53:28:81:81:34:54:79:cb:e2:be:6f:d5: 82:6a:2e:43:5a:a4:81:7b:ff:83:01:5e:e6:90:36:00:c5:1f: fb:16:d6:ab:e6:5c:f2:1b:f7:63:49:50:15:d8:cf:7c:62:d9: 5e:aa:1e:ff:d4:5a:70:5f:e3:cd:66:e9:11:fb:b2:20:82:37: 41:e3:81:7a:68:3d:4f:42:db:c1:6d:3f:0b:f4:a7:42:71:4d: 04:41:62:ed:77:9c:5e:f0:4e:5c:b9:60:fe:a5:74:f0:37:c4: 45:bb:3a:2c:a9:ed:0a:86:61:be:e5:ff:8d:54:e0:d8:87:5f: a0:ff:4b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uiEY8L6wQj7rSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MzUyYTk4NDAtNTNjMy00MjZkLThmYTYtZTg2MjRiNGY0YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtM4C8h3WJ+MT/AFEnXxohgMbaBUubj4QmKb E+a/3PmDkOj8uYIEj/eAM4SQhY0x0r8yZv7q/Lsrw+EA+PB5mFioih676pp+6VNU Dz6motU+werpewUxwM6y/jtwuLX/Z/ecUOQwF0fL0eglbys9gDaqId+p596jQjMN uVg1JI3TODTJhwXCSOX+Z2zoGMzF8wBmg108AHn9ZT+/LucjhE1V8OoJZHBwYOSa g39cH6R7ZfO2bnidGh9vzBspU5wXZbcRmKCQ0LeVu3bfoV5LGqx7LfWtMiPooLqq A0KfeTPKSVL+Sb1eBkzg2cVuXc0yyW9hv7Vz4UoedW/b5txXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyFd0KQJ9obT3VsGbYRqV9l4+3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoTqmsQJUzV3g8X2tiUauRfS/CQg1S+7jgFlrKCbUTfnrK96sms2wmn +u7z4FWuMOnL8kKmqYFsjCjVZdp0k+/hu4JAaxuCxcvXupyCnuD1wRfSqYzLzwwx 7ja4zgMfc03ydIJwZBMrkX3JoOGI0CMmRnMrOP+VMeVqzqXQCrUPvjjwM1MogYE0 VHnL4r5v1YJqLkNapIF7/4MBXuaQNgDFH/sW1qvmXPIb92NJUBXYz3xi2V6qHv/U WnBf481m6RH7siCCN0HjgXpoPU9C28FtPwv0p0JxTQRBYu13nF7wTly5YP6ldPA3 xEW7Oiyp7QqGYb7l/41U4NiHX6D/S7Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:36 2025 by rpki-client