$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa File: 99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json) Hash identifier: tBJVoSEzXBeK1uXyanSPUl1lE+XA0IPou16pk1oL95c= Subject key identifier: A8:99:FB:E2:B0:A0:31:45:AE:71:42:E8:9A:E3:B5:60:A6:9D:7A:4D Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Certificate serial: 010D0C9F4328584B76F256B4349A6426DCCCFA60 Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 63101 IP address blocks: 23.188.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:56:b4:34:9a:64:26:dc:cc:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2f81a85e-16d3-4d4e-aaab-56d133827d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:21:5b:aa:79:95:85:bb:21:21:5a:5a:17: 63:28:72:1f:be:0a:be:e1:34:ec:c9:32:6e:27:5f: 85:d0:4d:bd:92:12:80:be:97:f1:88:8b:d8:e0:30: df:e6:83:82:d0:e6:8f:70:61:72:51:87:c9:8c:88: 88:8b:c9:85:e0:1b:c5:96:fe:db:fa:c3:90:91:b9: e9:30:c8:50:9b:33:bc:ed:e5:99:c1:98:3c:c4:ba: bd:dc:6d:b4:d7:f1:b9:9b:00:01:b2:b6:69:40:a0: 8f:6b:cf:b9:36:60:06:a9:d1:90:b4:9a:c4:80:f9: 55:c7:d0:61:f3:4d:c3:44:be:f9:ea:4f:b2:44:a3: 8e:86:2f:c8:94:f2:45:f9:cd:e6:7d:a5:f8:cf:06: de:8e:0f:39:c5:13:bd:30:e7:14:fa:e2:4f:56:31: ee:5c:07:c2:30:7c:6c:0a:ec:31:ec:26:fa:32:3e: 93:17:b5:35:ea:c0:c9:db:cf:ff:3a:16:21:ea:95: 0e:46:17:04:3a:a2:1a:6a:0c:c4:98:8d:58:e9:2a: d4:0c:62:6c:c7:6c:18:05:7b:33:fc:1a:67:8b:8a: 79:6a:d5:c6:d4:16:3d:2c:ff:f4:a8:1f:ad:51:80: d0:26:2d:91:c1:81:56:b6:1c:ae:c2:a0:c6:d5:c6: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:99:FB:E2:B0:A0:31:45:AE:71:42:E8:9A:E3:B5:60:A6:9D:7A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl X509v3 Authority Key Identifier: keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer sbgp-ipAddrBlock: critical IPv4: 23.188.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dd:81:df:1d:70:be:b4:43:4f:0f:49:04:18:80:bd:cd:0d: e5:6d:83:e2:d4:ad:5f:3d:82:4e:16:40:7b:80:71:0b:88:40: 69:89:c8:b4:c5:f1:2c:94:0c:d7:23:65:16:e1:f3:b9:ca:f3: 27:eb:fd:6d:9a:8a:2f:5a:ca:6d:43:f5:a1:21:b9:ba:ba:12: 4b:6d:26:5b:6a:02:14:69:b5:40:2e:e8:36:ea:48:51:fb:3f: 79:6b:55:a6:b2:2c:db:26:f0:4a:45:62:76:54:d7:0f:85:78: 07:4e:6e:aa:d3:9a:47:15:a1:4a:0a:31:8f:85:f3:ce:33:c1: 0d:8b:e9:d1:68:3a:1d:db:2e:8d:85:80:fa:d2:1c:e5:75:77: d1:b8:d7:fc:71:c5:f7:61:ca:4a:b1:04:44:8f:b3:e0:24:41: 3e:d1:7e:3c:cc:a8:8c:14:53:91:a3:ca:82:e2:ba:38:b2:13: dd:3a:f8:47:14:1d:c8:8c:54:a6:af:33:81:e3:7e:19:59:5d: a1:58:84:d5:3b:61:95:4c:b6:44:19:26:86:da:f2:00:46:b4: 2d:1c:3d:4a:af:4b:49:0f:f1:a3:cf:0e:89:f8:d3:08:f5:02: 35:32:ed:fe:e8:7d:b2:99:f9:73:24:ec:3f:36:df:e9:ea:72: 37:9d:5e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28la0NJpkJtzM+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx YzY2MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmY4MWE4NWUtMTZkMy00ZDRlLWFhYWItNTZkMTMzODI3ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GMhW6p5lYW7ISFaWhdjKHIfvgq+4TTsyTJu J1+F0E29khKAvpfxiIvY4DDf5oOC0OaPcGFyUYfJjIiIi8mF4BvFlv7b+sOQkbnp MMhQmzO87eWZwZg8xLq93G201/G5mwABsrZpQKCPa8+5NmAGqdGQtJrEgPlVx9Bh 803DRL756k+yRKOOhi/IlPJF+c3mfaX4zwbejg85xRO9MOcU+uJPVjHuXAfCMHxs Cuwx7Cb6Mj6TF7U16sDJ28//OhYh6pUORhcEOqIaagzEmI1Y6SrUDGJsx2wYBXsz /Bpni4p5atXG1BY9LP/0qB+tUYDQJi2RwYFWthyuwqDG1camXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiZ++KwoDFFrnFC6JrjtWCmnXpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvOTlkZDlkZjEtODVjOC0z MTU2LTllYWQtYzgzNmJlM2M2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1 MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0 MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj MDFmNDFjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLdgd8dcL60Q08PSQQYgL3NDeVtg+LUrV89gk4WQHuAcQuIQGmJyLTF 8SyUDNcjZRbh87nK8yfr/W2aii9aym1D9aEhubq6EkttJltqAhRptUAu6DbqSFH7 P3lrVaayLNsm8EpFYnZU1w+FeAdObqrTmkcVoUoKMY+F884zwQ2L6dFoOh3bLo2F gPrSHOV1d9G41/xxxfdhykqxBESPs+AkQT7RfjzMqIwUU5GjyoLiujiyE906+EcU HciMVKavM4HjfhlZXaFYhNU7YZVMtkQZJoba8gBGtC0cPUqvS0kP8aPPDon40wj1 AjUy7f7ofbKZ+XMk7D823+nqcjedXhM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:45 2025 by rpki-client