$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa File: 98ea8d1f-6d28-3754-8463-218ef6072d68.roa (raw, json) Hash identifier: 2qMs3gZ0ciRcrEa3IwytfD+z/qhvOM/eZmfYr9rKFMA= Subject key identifier: 05:AC:5C:83:48:2E:8C:F3:7F:D2:C0:2A:92:7F:76:AB:13:6E:C9:FD Certificate issuer: /CN=6205d76d-4f52-4364-a347-5456e5513fc3 Certificate serial: 010D0C9F4328584B92DCFA7ED58AB35435E2E300 Authority key identifier: 51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 23.189.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:fa:7e:d5:8a:b3:54:35:e2:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6205d76d-4f52-4364-a347-5456e5513fc3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9cdc4b0d-a364-452e-964e-e2be63ebfa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:1b:30:27:af:b5:5b:35:3f:85:82:cf:31: 74:e2:77:9f:30:9f:22:bf:57:68:69:6c:95:dc:ea: 45:1d:7a:97:09:1e:3e:1c:3d:97:59:ca:13:39:01: 0c:69:cd:a6:b0:93:00:5c:0c:05:11:6a:3e:d6:fa: 5c:b1:f6:15:b6:03:91:62:e2:67:a1:8e:95:b3:06: e2:01:37:03:b6:29:5b:d3:6b:2f:59:25:6c:cf:d0: be:84:c5:00:2e:1e:ce:f8:da:e4:da:f8:ed:03:e2: 71:3c:63:dc:b6:ef:23:c6:73:71:57:b0:e6:9b:30: 85:1b:82:8c:d2:90:30:b1:e6:b0:f2:a8:ba:b4:df: 4d:fe:1f:0d:61:c7:30:40:1b:74:0e:61:e6:6d:9f: 76:a5:83:60:d1:8e:d7:3c:87:3c:6a:82:d3:50:06: 51:41:4e:64:b9:e6:e9:4b:15:28:57:80:f9:a0:5c: 34:2d:06:0b:59:53:7a:4a:4d:9a:4a:1f:5d:01:a1: 08:62:e8:71:3f:b3:86:e1:b1:ec:ba:3c:17:63:1c: 7c:a6:eb:da:0b:66:d4:0a:52:de:a9:ce:95:86:51: 5e:4e:a5:b2:3f:20:b9:ed:b6:c3:f4:bf:65:b8:d2: 47:ac:94:5f:28:55:dc:84:7a:89:28:3d:86:07:e2: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:5C:83:48:2E:8C:F3:7F:D2:C0:2A:92:7F:76:AB:13:6E:C9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/98ea8d1f-6d28-3754-8463-218ef6072d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3/6205d76d-4f52-4364-a347-5456e5513fc3.crl X509v3 Authority Key Identifier: keyid:51:3D:D9:BA:11:61:7A:45:E0:4A:91:A8:F2:49:AA:F5:A0:20:F0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6205d76d-4f52-4364-a347-5456e5513fc3.cer sbgp-ipAddrBlock: critical IPv4: 23.189.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:78:45:ef:42:b5:e9:b8:7a:11:43:c8:fa:38:ec:db:08:55: 7d:99:e1:f0:87:1a:c1:16:e6:32:e9:29:17:a0:a9:ce:49:ba: da:bb:61:2a:4a:27:2f:14:00:49:5c:ed:aa:32:6f:cc:5c:c0: 23:20:89:f4:73:60:11:ef:2f:5a:ee:ed:b2:d2:22:c3:68:0c: 65:b2:58:d9:56:ca:17:78:e4:e0:91:5a:22:09:f4:97:c4:bd: 7b:4e:b9:11:59:70:71:11:d5:f2:9b:7d:93:a4:48:d2:1e:0b: 47:a1:47:e8:e2:66:11:59:b3:eb:bc:63:5f:72:18:23:f2:1f: 06:f6:4a:30:bb:58:83:d7:1c:da:91:ce:2d:eb:81:f3:3c:27: 47:6b:77:bd:9d:38:eb:50:8d:fb:41:fc:99:4e:f5:7d:14:be: ea:2f:91:30:17:76:18:d2:e8:56:a1:76:84:53:ca:28:c3:31: 8c:78:55:a0:4b:63:16:c6:5d:65:7b:e0:75:74:64:94:b7:58: f2:c7:c2:0f:63:0e:72:a1:15:4d:f4:4b:6c:32:89:f9:be:d5: e5:f5:9e:e6:83:23:74:04:00:0c:ca:f5:c2:11:e5:d1:96:d8: 77:4b:14:f7:d9:dc:f0:a7:db:01:8c:4a:27:63:71:05:e9:4a: 90:a2:09:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Pp+1YqzVDXi4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIwNWQ3NmQtNGY1Mi00MzY0LWEzNDctNTQ1NmU1NTEz ZmMzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWNkYzRiMGQtYTM2NC00NTJlLTk2NGUtZTJiZTYzZWJmYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFwbMCevtVs1P4WCzzF04nefMJ8iv1doaWyV 3OpFHXqXCR4+HD2XWcoTOQEMac2msJMAXAwFEWo+1vpcsfYVtgORYuJnoY6Vswbi ATcDtilb02svWSVsz9C+hMUALh7O+Nrk2vjtA+JxPGPctu8jxnNxV7DmmzCFG4KM 0pAwseaw8qi6tN9N/h8NYccwQBt0DmHmbZ92pYNg0Y7XPIc8aoLTUAZRQU5kuebp SxUoV4D5oFw0LQYLWVN6Sk2aSh9dAaEIYuhxP7OG4bHsujwXYxx8puvaC2bUClLe qc6VhlFeTqWyPyC57bbD9L9luNJHrJRfKFXchHqJKD2GB+I4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWsXINILozzf9LAKpJ/dqsTbsn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1 ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2ZTU1MTNmYzMvOThlYThkMWYtNmQyOC0z NzU0LTg0NjMtMjE4ZWY2MDcyZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjIwNWQ3NmQtNGY1Mi00MzY0LWEz NDctNTQ1NmU1NTEzZmMzLzYyMDVkNzZkLTRmNTItNDM2NC1hMzQ3LTU0NTZlNTUx M2ZjMy5jcmwwHwYDVR0jBBgwFoAUUT3ZuhFhekXgSpGo8kmq9aAg8BkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjA1ZDc2ZC00ZjUyLTQzNjQtYTM0Ny01NDU2 ZTU1MTNmYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd4Re9Ctem4ehFDyPo47NsIVX2Z4fCHGsEW5jLpKRegqc5Jutq7YSpK Jy8UAElc7aoyb8xcwCMgifRzYBHvL1ru7bLSIsNoDGWyWNlWyhd45OCRWiIJ9JfE vXtOuRFZcHER1fKbfZOkSNIeC0ehR+jiZhFZs+u8Y19yGCPyHwb2SjC7WIPXHNqR zi3rgfM8J0drd72dOOtQjftB/JlO9X0UvuovkTAXdhjS6FahdoRTyijDMYx4VaBL YxbGXWV74HV0ZJS3WPLHwg9jDnKhFU30S2wyifm+1eX1nuaDI3QEAAzK9cIR5dGW 2HdLFPfZ3PCn2wGMSidjcQXpSpCiCeA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:18 2025 by rpki-client