$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff5da6f5-5f63-3bf5-9458-8bd7c7a8b57a.roa File: ff5da6f5-5f63-3bf5-9458-8bd7c7a8b57a.roa (raw, json) Hash identifier: ZJEcQKs9JDmkY4sNbYEbuOn5d4VQu3CF2uzU8e5E8tM= Subject key identifier: 1C:CA:EF:73:C7:9F:05:E4:24:C3:25:38:EA:2D:F5:1C:75:AA:9C:FF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B85232CAF2963EB595C84FB80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff5da6f5-5f63-3bf5-9458-8bd7c7a8b57a.roa Signing time: Tue 14 Oct 2025 15:01:05 +0000 ROA not before: Tue 14 Oct 2025 15:01:05 +0000 ROA not after: Mon 12 Jan 2026 16:01:05 +0000 asID: 23473 IP address blocks: 173.230.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:23:2c:af:29:63:eb:59:5c:84:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 15:01:05 2025 GMT Not After : Jan 12 16:01:05 2026 GMT Subject: CN=dcf892d7-4411-4978-9384-f72e32fc2ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:59:02:d0:ce:d6:ea:9b:bc:ed:b2:9f:51: 9a:c1:77:48:64:26:7d:81:b7:09:97:0f:31:31:a2: d1:32:3d:5f:04:9b:b7:4e:43:1f:01:0a:f8:f1:4f: ee:9d:5e:c1:d2:63:b5:96:55:10:3d:e7:fb:3e:a8: a8:0d:ed:01:90:01:3d:f4:3d:24:e7:dd:ea:f4:d4: 9b:bf:bb:6e:d6:46:1f:06:22:d8:ec:ad:cb:be:2c: ef:9e:3c:e1:20:ab:f2:1e:e1:c2:24:fc:16:2a:96: 79:a0:b0:de:fc:6b:4c:83:6e:ed:4a:82:72:41:71: 6e:cc:d5:fa:ef:ba:da:c6:b7:0e:63:f3:45:1a:3e: be:bd:cf:50:2c:49:14:37:57:c5:a8:0f:6f:d5:83: c1:71:0f:93:aa:c8:d6:c0:49:88:88:cb:32:a3:c6: c8:39:7c:4b:3e:00:73:46:7c:54:15:4c:9e:60:76: a6:0e:2a:07:fd:26:73:97:86:b4:49:d3:c9:be:ba: f1:0e:9a:1d:39:d4:55:37:8b:c1:cb:ae:32:fc:c0: 6a:73:bf:40:4b:5e:0f:15:46:e7:ea:cd:a4:56:be: 5e:18:73:a2:ec:e2:9f:f4:39:5a:0b:47:66:f8:a1: 5e:0e:ea:27:b5:e9:ac:ca:68:23:12:41:4d:a4:5e: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:EF:73:C7:9F:05:E4:24:C3:25:38:EA:2D:F5:1C:75:AA:9C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff5da6f5-5f63-3bf5-9458-8bd7c7a8b57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a1:cc:ff:34:cc:be:ab:1b:27:39:cc:fa:d4:5b:3e:54:f8: cb:03:a4:5c:51:40:17:d3:25:60:aa:82:9f:79:47:d0:46:8f: 22:d5:ad:01:31:c4:6c:c4:8b:21:ca:5a:a1:f0:b9:09:08:c6: c9:10:9b:56:e9:49:bf:c2:58:5d:fd:64:0e:92:97:64:d5:21: 28:ca:0e:0f:f0:9e:a7:62:c0:de:2f:3c:58:54:e0:58:78:63: 6a:96:dd:a6:da:e0:30:49:59:03:80:af:69:89:de:ba:ec:8c: e5:be:81:36:cc:b6:10:76:dd:dd:f7:10:ce:b9:e1:06:45:76: fb:b1:16:92:bb:3d:9a:e3:5e:3e:2d:55:63:4b:7a:a1:42:e2: 79:b6:37:b9:5e:72:a1:96:92:13:41:9a:64:7d:9d:95:41:ed: 7c:70:56:df:59:c6:29:86:f5:88:93:cc:be:ee:e8:38:db:38: 54:f1:a9:01:a2:1e:9d:35:68:2f:98:47:b3:6b:57:fd:da:38: 33:0e:a1:2c:34:3d:0e:36:f6:c3:25:16:c1:31:3d:a3:94:d6: a3:d7:e6:90:45:9f:b5:50:90:e4:4a:19:36:e1:ae:01:c1:4f: 65:55:39:93:97:af:c7:11:75:dd:ec:ad:06:46:42:92:50:60: 4c:7b:9b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFIyyvKWPrWVyE+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE1MDEwNVoXDTI2MDExMjE2MDEwNVowLzEtMCsGA1UEAxMk ZGNmODkyZDctNDQxMS00OTc4LTkzODQtZjcyZTMyZmMyYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKhZAtDO1uqbvO2yn1GawXdIZCZ9gbcJlw8x MaLRMj1fBJu3TkMfAQr48U/unV7B0mO1llUQPef7PqioDe0BkAE99D0k593q9NSb v7tu1kYfBiLY7K3LvizvnjzhIKvyHuHCJPwWKpZ5oLDe/GtMg27tSoJyQXFuzNX6 77raxrcOY/NFGj6+vc9QLEkUN1fFqA9v1YPBcQ+TqsjWwEmIiMsyo8bIOXxLPgBz RnxUFUyeYHamDioH/SZzl4a0SdPJvrrxDpodOdRVN4vBy64y/MBqc79AS14PFUbn 6s2kVr5eGHOi7OKf9DlaC0dm+KFeDuontemsymgjEkFNpF7vKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzK73PHnwXkJMMlOOot9Rx1qpz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmY1ZGE2ZjUtNWY2My0z YmY1LTk0NTgtOGJkN2M3YThiNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreY/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACShzP80zL6rGyc5zPrUWz5U+MsDpFxRQBfTJWCqgp95R9BGjyLVrQEx xGzEiyHKWqHwuQkIxskQm1bpSb/CWF39ZA6Sl2TVISjKDg/wnqdiwN4vPFhU4Fh4 Y2qW3aba4DBJWQOAr2mJ3rrsjOW+gTbMthB23d33EM654QZFdvuxFpK7PZrjXj4t VWNLeqFC4nm2N7lecqGWkhNBmmR9nZVB7XxwVt9ZximG9YiTzL7u6DjbOFTxqQGi Hp01aC+YR7NrV/3aODMOoSw0PQ429sMlFsExPaOU1qPX5pBFn7VQkORKGTbhrgHB T2VVOZOXr8cRdd3srQZGQpJQYEx7m/0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:46 2025 by rpki-client