$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa File: 4fd7e241-937d-3c5e-bece-2d710527ae6a.roa (raw, json) Hash identifier: VBHtHs0F45c8pjJ3UoiKwCIrulDYBXGdz7QNpAJAJnA= Subject key identifier: 2D:8A:04:2E:9C:7D:2D:88:A0:98:72:37:3F:C5:08:99:A5:26:62:94 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B87CA37C587756FFE8A471180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa Signing time: Wed 15 Oct 2025 13:49:16 +0000 ROA not before: Wed 15 Oct 2025 13:49:16 +0000 ROA not after: Tue 13 Jan 2026 14:49:16 +0000 asID: 23473 IP address blocks: 173.230.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:ca:37:c5:87:75:6f:fe:8a:47:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 15 13:49:16 2025 GMT Not After : Jan 13 14:49:16 2026 GMT Subject: CN=a8c42839-a7e0-47d2-aab3-d842ccb7d639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:52:bc:85:41:d6:f9:f5:d4:b6:3f:89:75: f7:6d:df:52:71:e9:46:f9:c5:4f:ed:3a:41:db:d3: fa:c0:3e:d1:76:52:46:27:e5:84:f9:73:d0:91:32: 0d:70:4b:be:12:ae:bf:7f:96:c4:91:af:01:53:03: d3:b5:5f:4d:b2:0f:26:c9:11:ab:f9:11:a6:65:77: f0:45:d5:cd:ef:75:c7:10:57:af:61:ba:66:b2:5f: 32:6b:e8:2e:36:6a:74:e1:b8:20:3e:05:6a:f0:5d: 04:a7:a2:95:7a:5e:a6:f4:ef:d1:39:c7:bf:97:6b: 90:22:59:ef:bb:57:ea:d6:91:5b:af:10:e1:be:42: b5:b6:db:10:aa:81:b6:84:e3:f4:54:30:1e:88:3f: cf:78:58:00:f6:a4:39:2c:9d:29:77:26:0f:02:6e: 78:30:31:70:0e:e6:a1:15:57:24:52:44:24:77:68: 47:2e:d8:6d:52:67:e8:f9:44:b4:9c:c6:2a:12:60: c1:2b:73:a7:af:75:72:09:31:46:9d:c2:0b:31:aa: 4b:4c:ca:c3:64:bc:09:55:39:43:9f:85:b7:ee:ca: 16:53:92:2f:99:ac:59:c6:59:a5:58:10:a2:56:c2: af:6b:ea:14:cf:05:f7:ba:22:49:fd:5c:c7:06:ed: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8A:04:2E:9C:7D:2D:88:A0:98:72:37:3F:C5:08:99:A5:26:62:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4fd7e241-937d-3c5e-bece-2d710527ae6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ae:b8:eb:34:c1:94:e1:db:05:a1:f1:bd:be:57:a8:6c:59: a2:d2:f0:b6:f2:6f:35:6c:2d:98:9f:ab:38:50:32:f2:9a:de: 5e:bb:21:e8:08:d2:76:6d:03:e7:5f:0e:70:e0:17:20:61:7f: cf:db:ef:56:96:66:ce:3a:ea:57:8b:fd:22:3a:1b:36:79:24: 1c:d6:21:b5:68:d8:13:04:5f:52:c6:fe:e2:a7:fa:ea:cc:86: 2e:cb:22:99:e6:7f:f2:fa:2b:ef:34:9e:05:d6:7a:1f:92:68: 14:b3:59:e0:f4:5f:0f:95:55:d0:05:fc:be:4b:1b:28:70:8b: e0:ae:61:c6:17:1f:cc:e9:f8:d5:6a:3f:bd:28:16:e2:00:69: 8f:a9:6b:fb:8a:01:3f:63:c6:8f:a4:53:15:95:11:88:f8:da: 07:41:07:76:e7:50:2d:54:20:b4:89:8f:57:f2:e2:1a:53:d0: 08:c1:74:fd:73:7c:67:74:75:8c:80:70:f2:b9:34:f2:af:50: ea:95:f7:7e:ba:40:54:a4:6d:77:4a:10:80:5e:ba:ff:c7:5c: 1c:0e:f2:ad:13:70:7d:f5:ac:7d:5f:ce:a2:9a:aa:fb:c1:01: 9d:82:dc:5a:24:31:a2:8d:90:16:5d:d0:c6:57:93:b9:d9:c1: 17:df:6f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHyjfFh3Vv/opHEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNTEzNDkxNloXDTI2MDExMzE0NDkxNlowLzEtMCsGA1UEAxMk YThjNDI4MzktYTdlMC00N2QyLWFhYjMtZDg0MmNjYjdkNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFpSvIVB1vn11LY/iXX3bd9ScelG+cVP7TpB 29P6wD7RdlJGJ+WE+XPQkTINcEu+Eq6/f5bEka8BUwPTtV9Nsg8myRGr+RGmZXfw RdXN73XHEFevYbpmsl8ya+guNmp04bggPgVq8F0Ep6KVel6m9O/ROce/l2uQIlnv u1fq1pFbrxDhvkK1ttsQqoG2hOP0VDAeiD/PeFgA9qQ5LJ0pdyYPAm54MDFwDuah FVckUkQkd2hHLthtUmfo+US0nMYqEmDBK3Onr3VyCTFGncILMapLTMrDZLwJVTlD n4W37soWU5IvmaxZxlmlWBCiVsKva+oUzwX3uiJJ/VzHBu234QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2KBC6cfS2IoJhyNz/FCJmlJmKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGZkN2UyNDEtOTM3ZC0z YzVlLWJlY2UtMmQ3MTA1MjdhZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGuuOs0wZTh2wWh8b2+V6hsWaLS8LbybzVsLZifqzhQMvKa3l67IegI 0nZtA+dfDnDgFyBhf8/b71aWZs466leL/SI6GzZ5JBzWIbVo2BMEX1LG/uKn+urM hi7LIpnmf/L6K+80ngXWeh+SaBSzWeD0Xw+VVdAF/L5LGyhwi+CuYcYXH8zp+NVq P70oFuIAaY+pa/uKAT9jxo+kUxWVEYj42gdBB3bnUC1UILSJj1fy4hpT0AjBdP1z fGd0dYyAcPK5NPKvUOqV9366QFSkbXdKEIBeuv/HXBwO8q0TcH31rH1fzqKaqvvB AZ2C3FokMaKNkBZd0MZXk7nZwRffbwc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:03 2025 by rpki-client