$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa File: 6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa (raw, json) Hash identifier: JDBibYZANMJpSz7wEcqki3J8b0Fo4VYPQ7rtuMcAcoo= Subject key identifier: C5:0F:55:FB:71:F2:26:89:3B:B1:08:C4:73:5A:F9:4D:17:94:6F:05 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584B63674155A9EB1CE289CD8400 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 62553 IP address blocks: 23.129.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:41:55:a9:eb:1c:e2:89:cd:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=ec32f29a-ba33-48f2-be1c-b8f03e3005ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:79:7d:ab:a6:1b:8a:da:82:e4:c7:05:83: 29:f5:d8:b6:aa:38:71:7a:31:49:5e:96:41:71:4f: fd:27:58:2e:68:e5:b3:db:96:06:b9:14:7a:3a:d5: 11:51:ee:97:0e:60:1a:dc:77:c1:08:77:26:40:f2: 39:af:76:35:8e:c6:a9:b6:8d:0e:8e:8d:1d:48:8a: 85:33:72:7b:45:33:be:d1:77:91:66:11:73:03:ad: c9:f6:35:8c:10:3b:b7:23:c0:3d:63:71:5a:55:2d: 51:e9:62:f1:22:9c:d9:25:ea:5d:15:e6:13:0b:cf: 32:81:fc:08:40:3c:99:09:65:75:ad:de:b6:fa:49: 3e:fd:e1:55:27:e2:7c:6b:73:d1:97:b6:ed:44:82: 77:a3:8f:d6:2e:da:be:e7:57:2c:8e:69:23:00:d2: b3:63:b7:20:af:d3:7d:ab:97:64:6c:05:22:cc:cc: 34:c8:a9:e2:63:1f:7e:b5:82:34:ae:5a:d5:d5:f7: 94:ed:3f:c6:d2:05:e7:b2:51:4a:eb:e5:48:29:42: 6b:40:e9:ad:14:26:f8:54:9b:37:a4:0b:33:18:0b: 7b:a9:fe:26:21:9a:a4:ce:ab:cb:39:1f:ee:2d:be: e3:ee:3a:3e:7f:3f:57:64:66:44:7d:72:5c:30:cc: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:55:FB:71:F2:26:89:3B:B1:08:C4:73:5A:F9:4D:17:94:6F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv4: 23.129.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1f:ff:0a:11:4e:51:fe:97:63:bc:ce:4d:a6:48:2e:10:03: 74:80:3e:b6:67:ea:01:c7:b7:4b:8c:d0:90:01:b5:ae:7b:79: 43:fe:84:0e:c5:be:70:34:d5:30:36:c8:d3:f1:89:dd:40:0b: 3a:8c:d3:7b:c8:e7:86:f8:7a:72:75:9a:c7:79:18:40:a0:d6: 55:17:41:b3:ee:09:33:4d:de:9b:a1:1f:41:ff:7d:e0:ed:62: bf:8b:18:d1:fe:c8:a1:ca:8d:be:a8:59:60:3e:dc:81:68:ca: ed:8b:c4:67:b5:11:f8:5c:0d:06:72:2f:02:b4:59:a0:95:f3: 06:a2:cc:28:66:4a:1b:d5:52:e6:bc:18:62:e7:88:de:b1:fd: 59:dd:40:4a:0c:96:7f:96:48:03:2c:07:0e:d5:94:a1:f7:dd: cc:1e:76:9c:58:a5:dd:d6:11:49:2e:24:c2:a1:64:95:af:ab: f0:92:c2:5e:99:63:af:86:11:97:f1:cb:e2:b9:9b:b9:83:2d: 5e:47:e3:ad:0b:08:ef:47:58:f7:83:21:42:de:70:e0:c5:98: 03:9b:1e:c3:cc:32:71:8b:bf:65:be:60:ea:ea:50:9a:69:a4: 98:94:b7:53:32:73:4e:57:d5:69:a7:f4:ff:8f:f8:b2:b3:83: 74:31:96:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0FVqesc4onNhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZWMzMmYyOWEtYmEzMy00OGYyLWJlMWMtYjhmMDNlMzAwNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2p5faumG4raguTHBYMp9di2qjhxejFJXpZB cU/9J1guaOWz25YGuRR6OtURUe6XDmAa3HfBCHcmQPI5r3Y1jsapto0Ojo0dSIqF M3J7RTO+0XeRZhFzA63J9jWMEDu3I8A9Y3FaVS1R6WLxIpzZJepdFeYTC88ygfwI QDyZCWV1rd62+kk+/eFVJ+J8a3PRl7btRIJ3o4/WLtq+51csjmkjANKzY7cgr9N9 q5dkbAUizMw0yKniYx9+tYI0rlrV1feU7T/G0gXnslFK6+VIKUJrQOmtFCb4VJs3 pAszGAt7qf4mIZqkzqvLOR/uLb7j7jo+fz9XZGZEfXJcMMzYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUPVftx8iaJO7EIxHNa+U0XlG8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvNmEzYjZlNTMtZWUzOS0z ZmU4LTgyMjUtZDBkMWU2MTA2N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8f/woRTlH+l2O8zk2mSC4QA3SAPrZn6gHHt0uM0JABta57eUP+hA7F vnA01TA2yNPxid1ACzqM03vI54b4enJ1msd5GECg1lUXQbPuCTNN3puhH0H/feDt Yr+LGNH+yKHKjb6oWWA+3IFoyu2LxGe1EfhcDQZyLwK0WaCV8waizChmShvVUua8 GGLniN6x/VndQEoMln+WSAMsBw7VlKH33cwedpxYpd3WEUkuJMKhZJWvq/CSwl6Z Y6+GEZfxy+K5m7mDLV5H460LCO9HWPeDIULecODFmAObHsPMMnGLv2W+YOrqUJpp pJiUt1Myc05X1Wmn9P+P+LKzg3Qxluw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:59 2025 by rpki-client