$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa File: da410947-ac83-3a05-b78f-46d6111d543b.roa (raw, json) Hash identifier: P73J270hZeTTGI+W5aBOHyb3MwZrW+jLWsY3MGnS5H4= Subject key identifier: 2F:8F:BA:72:56:37:49:16:2F:C3:13:57:E7:72:5B:3A:5D:68:CE:BA Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584B52A758892550B82592720180 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 134176 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:58:89:25:50:b8:25:92:72:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f73ad618-7f6d-4e98-b66e-4fdf14846fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:5a:01:6b:1a:cf:8b:05:1c:3d:1e:e6:e2: 4c:e4:d1:7d:71:22:55:66:c2:b6:3d:eb:63:79:29: 71:73:c5:26:6a:e4:6b:2b:2f:52:4b:68:e4:68:99: 8d:61:0c:5f:ce:f0:43:57:8e:cc:aa:4f:89:17:8e: e6:9a:92:d1:1e:5a:2a:7e:cf:45:bb:47:a4:b3:2b: 1e:b9:c3:ce:76:b6:2e:53:b0:ce:08:60:74:7b:31: e4:cc:1c:ac:23:79:40:ce:41:e8:57:69:04:fd:b8: 64:9d:78:84:5c:35:95:86:e1:f4:a5:e8:1f:07:0e: 6d:66:32:80:0e:b6:a9:5a:fb:21:f8:3d:79:49:51: 4c:f2:bb:41:b6:bd:ed:2f:a5:e5:c5:ac:42:01:3c: 69:ea:f2:b1:1c:a1:0a:44:24:c6:ae:83:0a:f4:5b: 64:b6:95:e4:1e:9d:4c:f9:d8:42:8e:3b:54:d9:fa: de:ba:5c:02:24:ff:1a:7b:d9:21:7b:4a:ae:cd:bb: 27:7f:e7:5f:6f:a3:2d:d3:33:41:72:be:84:56:1e: 50:b1:ce:27:ff:e5:e9:eb:ea:77:7a:9c:2e:06:24: db:fd:f6:3b:65:4e:6e:5c:0c:b0:1f:db:d7:cf:14: 50:05:cc:77:81:c8:ed:0b:91:43:2a:7e:5f:aa:f4: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8F:BA:72:56:37:49:16:2F:C3:13:57:E7:72:5B:3A:5D:68:CE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/da410947-ac83-3a05-b78f-46d6111d543b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bf:58:9d:3b:e3:be:75:d3:a8:35:af:b1:68:35:7c:f2:73: 0d:02:96:bd:75:9e:ab:fa:b0:ed:4c:c2:60:0c:4f:ba:5d:4a: cd:59:50:7f:94:a3:f4:2b:4b:b4:0a:b7:00:b8:bd:b6:12:40: af:64:a1:a2:48:92:94:00:59:02:df:80:03:5c:20:dd:a1:e9: 6f:09:41:54:af:00:0a:e1:89:2f:cb:56:c2:15:c2:ab:45:65: d3:a4:a7:a1:af:9f:3b:e8:95:05:3b:c5:08:36:9e:2d:d6:b2: 79:38:65:7d:27:65:81:32:27:1e:da:52:74:0b:4f:75:3d:b7: 14:86:32:8f:28:69:9e:3a:50:1b:00:1e:c0:6b:21:70:db:07: 7f:f7:01:ee:f2:19:f8:ec:78:7a:fd:7c:01:88:dd:d5:13:ec: df:1b:a3:b9:91:ba:8a:e9:28:72:40:8a:27:b8:e8:b0:fb:2c: b2:2f:ba:ac:0f:8b:a3:b6:32:b8:08:e6:24:69:7d:bd:8f:2c: a8:3a:b8:57:72:3b:22:ac:12:17:e8:da:78:5b:18:cb:d7:e2: bf:9d:40:92:e8:9a:88:31:e7:c4:59:9e:31:3d:e2:c8:82:25: ad:b1:b9:dd:dd:56:59:29:5a:3a:a0:b6:6b:c8:63:a8:75:39: c2:bc:0f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1iJJVC4JZJyAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjczYWQ2MTgtN2Y2ZC00ZTk4LWI2NmUtNGZkZjE0ODQ2ZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArspaAWsaz4sFHD0e5uJM5NF9cSJVZsK2Petj eSlxc8UmauRrKy9SS2jkaJmNYQxfzvBDV47Mqk+JF47mmpLRHloqfs9Fu0eksyse ucPOdrYuU7DOCGB0ezHkzBysI3lAzkHoV2kE/bhknXiEXDWVhuH0pegfBw5tZjKA DrapWvsh+D15SVFM8rtBtr3tL6XlxaxCATxp6vKxHKEKRCTGroMK9FtktpXkHp1M +dhCjjtU2freulwCJP8ae9khe0quzbsnf+dfb6Mt0zNBcr6EVh5Qsc4n/+Xp6+p3 epwuBiTb/fY7ZU5uXAywH9vXzxRQBcx3gcjtC5FDKn5fqvQFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+PunJWN0kWL8MTV+dyWzpdaM66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvZGE0MTA5NDctYWM4My0z YTA1LWI3OGYtNDZkNjExMWQ1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6/WJ07475106g1r7FoNXzycw0Clr11nqv6sO1MwmAMT7pdSs1ZUH+U o/QrS7QKtwC4vbYSQK9koaJIkpQAWQLfgANcIN2h6W8JQVSvAArhiS/LVsIVwqtF ZdOkp6GvnzvolQU7xQg2ni3Wsnk4ZX0nZYEyJx7aUnQLT3U9txSGMo8oaZ46UBsA HsBrIXDbB3/3Ae7yGfjseHr9fAGI3dUT7N8bo7mRuorpKHJAiie46LD7LLIvuqwP i6O2MrgI5iRpfb2PLKg6uFdyOyKsEhfo2nhbGMvX4r+dQJLomogx58RZnjE94siC Ja2xud3dVlkpWjqgtmvIY6h1OcK8D5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:20 2025 by rpki-client