$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e2914a70-f4e1-3e43-813e-8f4a96c09bbd.roa File: e2914a70-f4e1-3e43-813e-8f4a96c09bbd.roa (raw, json) Hash identifier: /5fAFK00NQf2BsYlPnAGuiOgpqFNqZln3bfyefnpol0= Subject key identifier: 91:68:3A:84:1D:2C:80:B3:2B:0A:38:EE:31:5C:1D:A2:C6:DD:05:44 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B87C98DF9B06DBD12539CFE80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e2914a70-f4e1-3e43-813e-8f4a96c09bbd.roa Signing time: Wed 15 Oct 2025 13:47:56 +0000 ROA not before: Wed 15 Oct 2025 13:47:56 +0000 ROA not after: Tue 13 Jan 2026 14:47:56 +0000 asID: 23473 IP address blocks: 173.230.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:c9:8d:f9:b0:6d:bd:12:53:9c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 15 13:47:56 2025 GMT Not After : Jan 13 14:47:56 2026 GMT Subject: CN=bf560d7c-7378-49ba-8b01-5fb4a2aad5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:24:70:a2:76:16:91:d3:0e:7c:09:c2:c8: 20:a0:69:8e:b1:fa:26:7e:6c:61:f4:a2:dd:14:43: 4d:fd:38:35:0f:d7:ed:c4:8a:c5:83:31:40:e9:63: 88:9c:cf:e6:b7:bb:df:49:eb:11:fe:13:b6:bd:87: 69:f1:28:28:5f:2d:2a:dd:87:3b:20:df:1c:5e:c5: c3:d5:c7:48:88:3c:c4:2f:f9:28:49:d4:57:01:a0: 26:c0:e8:3f:86:eb:49:82:bc:52:e7:b6:2d:c0:30: 58:14:ae:02:5a:a6:66:92:ba:72:01:00:08:97:9e: d9:f6:b5:ee:c5:c7:d7:ed:0d:ad:dd:cd:77:2d:09: 6b:4e:3e:1c:1b:af:4b:cd:f7:1a:f9:2c:18:2d:e6: c6:d8:3e:bd:69:8a:07:7f:7d:38:7a:b1:a4:3b:88: 70:32:74:fa:3a:e0:08:c1:a5:47:83:d8:57:e4:a1: 54:e7:98:3d:91:85:ff:d4:75:a9:26:6e:23:d1:6c: be:04:56:1c:ef:40:df:df:f4:65:91:88:d6:8d:d0: be:55:3b:b8:6b:e1:33:9c:bb:ee:d0:3f:72:2f:2d: 3e:a4:03:3b:60:9d:e8:84:36:c2:2a:f9:fa:53:4e: 93:9e:06:41:37:a1:5a:15:79:5b:2c:ed:81:65:65: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:68:3A:84:1D:2C:80:B3:2B:0A:38:EE:31:5C:1D:A2:C6:DD:05:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e2914a70-f4e1-3e43-813e-8f4a96c09bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e7:07:54:67:79:10:1b:30:85:65:16:13:4f:19:70:7c:54: 45:ba:60:85:b6:11:76:3c:fb:a8:1d:5b:6d:79:95:7f:a2:18: 6c:ea:fb:0a:78:f4:55:cc:86:37:9a:26:60:00:34:13:dd:c1: 01:45:d3:69:93:cc:00:07:e9:98:1a:01:e1:ab:b0:6a:0c:6e: bf:3b:62:24:e9:f4:87:cf:78:da:d7:3e:ce:ab:62:81:71:5b: a0:43:57:61:85:d9:6a:0b:a6:b6:b4:8f:79:66:c6:26:77:69: 5b:99:af:66:3e:fb:f8:bf:c8:05:81:75:a5:cf:46:73:06:70: 66:0e:90:24:79:76:38:35:4b:22:f9:2a:74:05:61:03:50:d5: ac:8d:08:d3:5a:28:e3:9a:fc:ad:5c:56:32:ac:71:b9:e6:d5: f2:92:3e:fd:df:1f:f9:59:c4:42:de:f6:ce:32:bb:9c:c8:94: c9:8b:7d:a5:51:fa:bc:be:f0:58:83:ad:81:5b:b3:dd:7c:1c: d4:06:ff:6b:0f:7a:d1:0a:11:27:fa:2b:35:34:e0:89:52:a0: d7:ec:b9:43:db:16:57:a1:7f:a9:97:be:37:38:d1:80:f3:be: 4c:b3:b2:b4:dd:44:6f:c7:91:e2:d7:6d:7a:25:2f:b7:3b:fd: f5:fe:49:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHyY35sG29ElOc/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNTEzNDc1NloXDTI2MDExMzE0NDc1NlowLzEtMCsGA1UEAxMk YmY1NjBkN2MtNzM3OC00OWJhLThiMDEtNWZiNGEyYWFkNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqMkcKJ2FpHTDnwJwsggoGmOsfomfmxh9KLd FENN/Tg1D9ftxIrFgzFA6WOInM/mt7vfSesR/hO2vYdp8SgoXy0q3Yc7IN8cXsXD 1cdIiDzEL/koSdRXAaAmwOg/hutJgrxS57YtwDBYFK4CWqZmkrpyAQAIl57Z9rXu xcfX7Q2t3c13LQlrTj4cG69Lzfca+SwYLebG2D69aYoHf304erGkO4hwMnT6OuAI waVHg9hX5KFU55g9kYX/1HWpJm4j0Wy+BFYc70Df3/RlkYjWjdC+VTu4a+EznLvu 0D9yLy0+pAM7YJ3ohDbCKvn6U06TngZBN6FaFXlbLO2BZWUFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFoOoQdLICzKwo47jFcHaLG3QVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTI5MTRhNzAtZjRlMS0z ZTQzLTgxM2UtOGY0YTk2YzA5YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvnB1RneRAbMIVlFhNPGXB8VEW6YIW2EXY8+6gdW215lX+iGGzq+wp4 9FXMhjeaJmAANBPdwQFF02mTzAAH6ZgaAeGrsGoMbr87YiTp9IfPeNrXPs6rYoFx W6BDV2GF2WoLpra0j3lmxiZ3aVuZr2Y++/i/yAWBdaXPRnMGcGYOkCR5djg1SyL5 KnQFYQNQ1ayNCNNaKOOa/K1cVjKscbnm1fKSPv3fH/lZxELe9s4yu5zIlMmLfaVR +ry+8FiDrYFbs918HNQG/2sPetEKESf6KzU04IlSoNfsuUPbFlehf6mXvjc40YDz vkyzsrTdRG/HkeLXbXolL7c7/fX+SXs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:29 2025 by rpki-client