$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c8f5aa0d-d182-36d4-a515-7dc9180eb92b.roa File: c8f5aa0d-d182-36d4-a515-7dc9180eb92b.roa (raw, json) Hash identifier: LbyDwMQhQFvW/I7IlWcC03fW05FtiIqVh298dlNqBtw= Subject key identifier: F0:3A:69:F8:95:59:37:5E:BF:2E:71:52:6A:55:5E:4B:98:3C:06:6C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B852164492FCA31BA09ECDBE0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c8f5aa0d-d182-36d4-a515-7dc9180eb92b.roa Signing time: Tue 14 Oct 2025 14:57:29 +0000 ROA not before: Tue 14 Oct 2025 14:57:29 +0000 ROA not after: Mon 12 Jan 2026 15:57:29 +0000 asID: 23473 IP address blocks: 173.230.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:21:64:49:2f:ca:31:ba:09:ec:db:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 14:57:29 2025 GMT Not After : Jan 12 15:57:29 2026 GMT Subject: CN=0cd4bb82-a2f2-4a25-8035-6855db973d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:fb:d4:16:1e:b2:e6:85:a1:72:51:e0:ac: e6:fe:92:2e:c3:18:e0:a1:a1:ef:b6:ff:c9:84:07: 28:8f:85:07:c4:b6:49:aa:3e:35:ea:34:02:35:aa: 12:ac:38:de:bf:be:95:e0:fc:6b:16:b8:af:92:16: a7:74:d3:bc:b8:e2:d1:67:6f:41:b1:54:43:e5:8f: d2:99:74:5c:37:35:fd:da:82:f6:73:2e:d4:ce:20: 6a:38:fb:ab:f7:52:3f:83:de:89:d5:22:81:43:6e: a7:e6:7f:25:1a:56:ec:81:64:e6:b8:23:61:c7:bd: e3:f7:35:4d:a5:b2:33:b0:23:d0:11:19:29:80:8a: a9:7f:12:19:1e:ab:6e:0b:44:89:5f:01:51:c4:c5: 15:19:1b:f7:dd:cd:ad:ea:5c:29:9f:28:54:ae:46: 83:25:ac:71:73:84:9e:ab:23:35:8b:77:f4:f9:7e: 45:71:1d:21:de:f5:b2:29:c2:0a:36:e7:9e:72:5d: db:a7:ba:dd:21:94:53:96:02:47:81:83:db:62:26: 87:16:ad:9e:b1:bd:a4:66:b7:28:fb:ad:9d:20:4e: 2c:fa:1e:d7:ca:0b:07:75:73:f0:e5:fe:5c:b4:f5: bd:59:6c:3b:61:c7:5c:02:2f:93:71:9d:00:13:f9: e9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:69:F8:95:59:37:5E:BF:2E:71:52:6A:55:5E:4B:98:3C:06:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c8f5aa0d-d182-36d4-a515-7dc9180eb92b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8e:2f:61:5b:e7:9c:bd:a0:22:45:f1:69:e8:59:58:52:83: e4:9d:fa:8b:1b:a8:8c:92:51:7a:55:e4:b3:8a:ae:96:f2:8a: 28:85:30:b1:63:be:57:1d:79:3c:fb:2d:27:3c:92:36:16:37: 37:65:43:61:9a:87:0b:8c:30:aa:ff:60:ba:54:68:56:54:b5: 0e:56:24:a9:44:fc:88:34:c8:fd:d3:2c:81:69:8a:be:57:a7: 8c:45:1f:62:42:16:e9:89:7e:0c:57:f1:e1:ef:e5:bf:4a:a9: a6:3c:cc:b1:8f:6f:05:cf:88:36:56:b6:32:04:a1:19:95:4a: aa:77:f5:df:35:ca:35:46:64:c4:f0:89:31:af:81:c4:60:50: f6:d4:b9:90:50:24:87:e8:d1:c4:aa:34:24:45:19:c2:9a:10: 13:39:f5:63:ea:a6:5c:03:59:67:e8:cf:33:b1:47:8b:af:9f: e8:bd:c6:92:b6:05:62:2c:6c:3d:33:de:bd:7e:62:fb:8d:ab: 2e:37:48:9a:5b:98:5f:ac:05:62:bc:46:44:8f:e7:4f:43:4a: 2c:fc:13:2d:9c:08:77:e8:5d:19:4d:b3:2e:f5:8f:0f:64:64: 60:1d:ea:bb:3f:cd:0f:1c:cc:b5:90:34:59:9e:47:d4:39:73: 4b:6e:08:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFIWRJL8oxugns2+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE0NTcyOVoXDTI2MDExMjE1NTcyOVowLzEtMCsGA1UEAxMk MGNkNGJiODItYTJmMi00YTI1LTgwMzUtNjg1NWRiOTczZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJz71BYesuaFoXJR4Kzm/pIuwxjgoaHvtv/J hAcoj4UHxLZJqj416jQCNaoSrDjev76V4PxrFrivkhandNO8uOLRZ29BsVRD5Y/S mXRcNzX92oL2cy7UziBqOPur91I/g96J1SKBQ26n5n8lGlbsgWTmuCNhx73j9zVN pbIzsCPQERkpgIqpfxIZHqtuC0SJXwFRxMUVGRv33c2t6lwpnyhUrkaDJaxxc4Se qyM1i3f0+X5FcR0h3vWyKcIKNueecl3bp7rdIZRTlgJHgYPbYiaHFq2esb2kZrco +62dIE4s+h7XygsHdXPw5f5ctPW9WWw7YcdcAi+TcZ0AE/npYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA6afiVWTdevy5xUmpVXkuYPAZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzhmNWFhMGQtZDE4Mi0z NmQ0LWE1MTUtN2RjOTE4MGViOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6OL2Fb55y9oCJF8WnoWVhSg+Sd+osbqIySUXpV5LOKrpbyiiiFMLFj vlcdeTz7LSc8kjYWNzdlQ2GahwuMMKr/YLpUaFZUtQ5WJKlE/Ig0yP3TLIFpir5X p4xFH2JCFumJfgxX8eHv5b9KqaY8zLGPbwXPiDZWtjIEoRmVSqp39d81yjVGZMTw iTGvgcRgUPbUuZBQJIfo0cSqNCRFGcKaEBM59WPqplwDWWfozzOxR4uvn+i9xpK2 BWIsbD0z3r1+YvuNqy43SJpbmF+sBWK8RkSP509DSiz8Ey2cCHfoXRlNsy71jw9k ZGAd6rs/zQ8czLWQNFmeR9Q5c0tuCOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:34 2025 by rpki-client