$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa File: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json) Hash identifier: 5n9sfJYgDhXc4+gx9SKnKOZ7c6suLiwn/Oo6nAD7C0A= Subject key identifier: 00:27:02:61:AE:AC:9E:79:D1:4D:5B:55:3C:C5:CE:4C:79:7E:20:E2 Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Certificate serial: 010D0C9F4328584B0B76A87D6425838987DD7280 Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 22597 IP address blocks: 23.159.120.0/24 maxlen: 24 2607:5fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a8:7d:64:25:83:89:87:dd:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=85a6138a-99b4-49bf-80ed-db3dc4ef6a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:00:96:73:a6:ac:9f:3c:08:47:44:8a:64:eb: 53:a2:bb:85:72:51:60:a5:08:6b:38:2d:ed:a5:76: b5:6f:03:22:92:d2:08:68:2c:25:db:94:9e:33:c1: 09:74:6b:d1:7d:2f:95:f0:ce:b4:4e:a5:d0:8c:b4: 95:1d:6a:52:da:ff:22:e6:73:26:28:8e:8a:0a:45: 55:19:15:13:29:26:60:55:59:e3:78:22:6d:48:be: 1b:84:0f:ff:57:55:e8:a1:77:d3:47:c4:28:9d:ab: ec:bc:4b:9d:53:7d:70:f0:f4:7e:25:a6:8b:2c:5c: e2:3d:57:ae:6f:57:1c:b4:f0:a6:ed:f5:a8:19:a0: 1f:b8:22:f4:46:a6:6f:eb:04:a8:02:7a:3c:01:2e: d4:5d:21:55:73:26:42:01:13:5e:70:89:5e:2b:ed: 3f:e1:c6:9e:56:0c:be:8c:10:bb:86:b3:c6:c0:2d: 0f:0e:22:f8:ee:78:55:b5:e9:bd:35:9f:2b:47:0e: 91:8b:f2:d8:ab:76:93:c4:55:c0:11:65:f2:4f:d6: 1e:bc:b2:e4:85:3c:c4:15:b5:bb:fe:bb:12:0c:c2: fd:75:63:d8:89:78:02:f1:e0:5e:64:91:f9:3e:4e: e7:fd:f9:18:f0:41:c5:b7:eb:d8:48:d0:5f:0d:b5: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:02:61:AE:AC:9E:79:D1:4D:5B:55:3C:C5:CE:4C:79:7E:20:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl X509v3 Authority Key Identifier: keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:07:f9:98:69:07:ff:77:f7:0b:fc:80:e8:13:4e:b9:2b:5d: 4f:90:8b:fc:d2:81:1c:0e:d4:d7:e5:27:47:5d:c2:27:89:40: dc:57:94:f2:a4:f0:f3:4e:94:a5:c0:48:3c:34:0b:1d:e5:ac: 64:6b:b9:77:26:94:bd:88:c0:3d:b1:76:bb:58:ef:46:e4:c1: a4:a6:68:bc:69:d7:41:e4:b4:da:88:0f:29:12:9e:99:7d:e4: a6:48:c8:35:32:4c:fc:58:50:2e:71:ce:98:ff:29:97:f5:77: 92:18:ce:dc:fa:3d:20:99:bf:3a:b2:53:d6:ad:2b:01:85:04: 8a:d9:b8:21:17:61:48:96:f5:4e:ac:b1:fc:ec:93:c4:36:7f: 58:94:06:e0:63:e7:ee:c9:6c:61:e9:8c:1d:b1:b4:c5:47:02: e9:b2:4b:b1:5a:d6:7c:01:1d:1d:cb:8e:7a:e8:28:11:df:a0: b8:b0:a7:03:5d:fe:c7:df:57:9d:7b:b5:c4:fc:85:8b:f9:a9: 4b:6f:2c:91:0a:51:9c:08:58:7d:1b:c5:c7:5b:8e:d3:b6:2e: d0:ef:6a:dd:55:c8:57:30:f0:45:57:3e:f6:c7:23:39:67:d4: c6:2b:33:ac:47:62:34:b9:ec:29:dc:cc:92:dd:bd:6a:9b:b9: 1e:2c:df:1b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEsLdqh9ZCWDiYfdcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy OGY2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ODVhNjEzOGEtOTliNC00OWJmLTgwZWQtZGIzZGM0ZWY2YTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgACWc6asnzwIR0SKZOtToruFclFgpQhrOC3t pXa1bwMiktIIaCwl25SeM8EJdGvRfS+V8M60TqXQjLSVHWpS2v8i5nMmKI6KCkVV GRUTKSZgVVnjeCJtSL4bhA//V1XooXfTR8QonavsvEudU31w8PR+JaaLLFziPVeu b1cctPCm7fWoGaAfuCL0RqZv6wSoAno8AS7UXSFVcyZCARNecIleK+0/4caeVgy+ jBC7hrPGwC0PDiL47nhVtem9NZ8rRw6Ri/LYq3aTxFXAEWXyT9YevLLkhTzEFbW7 /rsSDML9dWPYiXgC8eBeZJH5Pk7n/fkY8EHFt+vYSNBfDbWGxwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAAnAmGurJ550U1bVTzFzkx5fiDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMDMyZmMxYjAtYjlhYy0z YzU0LWE2Y2ItYmRiNjQyYWMwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0 MmIxZDI4ZjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF594MA0E AgACMAcDBQAmB1/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADYH+ZhpB/939wv8gOgTTrkrXU+Qi/zSgRwO 1NflJ0ddwieJQNxXlPKk8PNOlKXASDw0Cx3lrGRruXcmlL2IwD2xdrtY70bkwaSm aLxp10HktNqIDykSnpl95KZIyDUyTPxYUC5xzpj/KZf1d5IYztz6PSCZvzqyU9at KwGFBIrZuCEXYUiW9U6ssfzsk8Q2f1iUBuBj5+7JbGHpjB2xtMVHAumyS7Fa1nwB HR3LjnroKBHfoLiwpwNd/sffV517tcT8hYv5qUtvLJEKUZwIWH0bxcdbjtO2LtDv at1VyFcw8EVXPvbHIzln1MYrM6xHYjS57CnczJLdvWqbuR4s3xs= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:00 2025 by rpki-client