$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa File: 64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa (raw, json) Hash identifier: 99VKxoTnS3oTQlheXo0EcVztjO639sQBXbOALpjXAyg= Subject key identifier: 4C:E6:18:F1:7C:58:63:5B:E8:92:9A:8D:75:6E:47:49:F6:CB:9E:F0 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584B52A7587A8237117A58F8A600 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 20057 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:58:7a:82:37:11:7a:58:f8:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=dd04eb14-6ecd-438f-8546-0e4d7e8ae53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:1c:fd:7c:04:02:4c:35:bd:c9:68:70:98: 9c:e4:b7:97:3d:3f:cd:b9:f8:9b:9a:89:f1:39:02: 53:b8:7a:2d:b9:40:69:b3:7d:05:d8:ee:7b:9e:7e: 7b:f9:f2:69:39:b4:9d:de:9a:08:2b:e1:9b:0e:c8: 01:4c:22:00:84:a6:c6:76:1c:06:6e:64:d9:3f:2f: 45:1a:87:1a:f6:d3:5f:f8:bb:90:18:34:be:e2:e1: 55:db:49:b5:51:72:0c:27:45:f2:f1:e4:60:ee:cb: 97:1f:52:31:7d:96:07:0a:ff:b3:67:e1:47:83:b1: f9:59:c2:14:0e:30:d1:00:f9:5d:20:56:24:19:38: 11:57:09:52:3a:e6:3b:d4:37:53:7c:1d:09:d2:3c: f4:c0:98:49:b9:2e:f2:2b:db:9c:79:96:9a:95:4f: cc:49:67:3f:20:37:61:9f:23:7c:f9:65:77:30:e1: d6:a8:ef:6b:12:78:96:84:4d:66:45:51:06:fd:ea: d4:28:b4:9b:46:e7:87:64:ba:98:9b:f6:6b:99:4b: 7a:e8:36:d9:03:3a:d2:3b:44:e5:e0:23:c6:d2:b4: 2b:c1:1c:8a:af:1d:41:71:6a:27:07:5b:a6:d4:1f: ce:00:53:08:43:55:29:09:2b:93:f3:5f:ae:f8:93: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E6:18:F1:7C:58:63:5B:E8:92:9A:8D:75:6E:47:49:F6:CB:9E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:3a:e6:8c:47:e8:65:76:6c:d2:28:e5:27:b4:45:f9:50: bd:23:6f:8d:3c:ce:4c:8c:90:55:25:5e:9f:51:7b:20:15:36: e8:67:6c:9a:19:9e:91:dc:0a:01:21:d7:8c:b7:51:3d:59:27: a9:aa:6a:2e:d0:2b:9c:92:e4:4b:f8:c9:f4:55:5a:55:df:62: 28:08:fb:7d:d7:2e:01:13:75:38:33:0d:f7:f5:6d:f8:68:19: 73:c1:f3:f7:05:3b:4b:2f:37:97:63:a5:af:99:ed:e6:3b:2d: 59:59:27:5a:57:39:bb:fd:f3:71:40:be:3a:39:b6:ac:0a:e3: c5:c3:ca:f3:eb:22:2a:3f:e5:e3:be:fb:19:20:56:a9:71:47: d7:3a:00:b9:6f:7a:4a:93:02:a4:35:1c:52:b6:d3:b3:2e:90: c0:ae:e8:c0:d5:68:a8:b8:a7:c2:bf:d3:70:a3:1b:09:d0:a3: 6b:df:5b:be:8a:79:33:eb:d9:eb:a1:28:08:cf:9c:19:3b:fe: 4c:71:7e:38:a6:7c:2c:4d:4b:3e:72:9c:2b:38:01:c4:e1:e8: e7:e1:ae:29:99:1e:3c:d4:a1:22:5d:3e:06:dc:c6:40:e9:2f: 1e:74:59:44:63:cb:a9:ed:b0:40:82:bb:7b:28:cd:73:aa:35: 37:88:c3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1h6gjcRelj4pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZGQwNGViMTQtNmVjZC00MzhmLTg1NDYtMGU0ZDdlOGFlNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGIc/XwEAkw1vclocJic5LeXPT/Nufibmonx OQJTuHotuUBps30F2O57nn57+fJpObSd3poIK+GbDsgBTCIAhKbGdhwGbmTZPy9F Goca9tNf+LuQGDS+4uFV20m1UXIMJ0Xy8eRg7suXH1IxfZYHCv+zZ+FHg7H5WcIU DjDRAPldIFYkGTgRVwlSOuY71DdTfB0J0jz0wJhJuS7yK9uceZaalU/MSWc/IDdh nyN8+WV3MOHWqO9rEniWhE1mRVEG/erUKLSbRueHZLqYm/ZrmUt66DbZAzrSO0Tl 4CPG0rQrwRyKrx1BcWonB1um1B/OAFMIQ1UpCSuT81+u+JOw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzmGPF8WGNb6JKajXVuR0n2y57wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNjRiYjhhMmMtNTI1NS0z N2JiLTgzZDMtYTE1YzhhNjhhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9JOuaMR+hldmzSKOUntEX5UL0jb408zkyMkFUlXp9ReyAVNuhnbJoZ npHcCgEh14y3UT1ZJ6mqai7QK5yS5Ev4yfRVWlXfYigI+33XLgETdTgzDff1bfho GXPB8/cFO0svN5djpa+Z7eY7LVlZJ1pXObv983FAvjo5tqwK48XDyvPrIio/5eO+ +xkgVqlxR9c6ALlvekqTAqQ1HFK207MukMCu6MDVaKi4p8K/03CjGwnQo2vfW76K eTPr2euhKAjPnBk7/kxxfjimfCxNSz5ynCs4AcTh6OfhrimZHjzUoSJdPgbcxkDp Lx50WURjy6ntsECCu3sozXOqNTeIw10= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:20 2025 by rpki-client