$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa File: daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa (raw, json) Hash identifier: ZDDA0iSc6PR2HwV+rR0586ZOj4UvG5HR1tJYY4naOTU= Subject key identifier: FA:8D:17:43:13:F5:39:85:B1:D2:29:88:13:7E:D9:A6:73:CB:36:FD Certificate issuer: /CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Certificate serial: 010D0C9F4328584B87B221D3B033033611A1E248 Authority key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.187.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:21:d3:b0:33:03:36:11:a1:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=9699e383-637a-43b5-9434-c3bdeb408064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:61:65:4c:a6:5d:76:bf:35:b3:ea:61:1c: 31:d8:6c:13:84:fe:eb:0f:30:63:86:4f:f3:7c:29: 71:49:52:dd:6b:29:d9:35:07:e9:fa:fd:f7:f4:e9: 3a:2f:30:80:8b:cf:86:4c:99:d8:af:43:75:51:c7: 6b:6d:20:ea:a2:cc:96:f2:8b:12:e5:73:08:d8:2f: cc:4a:e2:ef:04:5a:26:e6:97:bb:df:63:3a:9a:c3: 4c:01:24:35:24:06:4b:59:17:4d:d0:b5:ed:60:85: 74:3e:d5:a5:e8:b5:ff:5a:17:65:7d:25:54:54:e0: 78:1d:8c:b7:fd:17:cf:16:d1:49:e0:ef:3b:96:8c: f3:4f:bb:91:14:4e:bb:8e:60:f7:8a:3f:e6:c5:ce: ed:e7:5b:28:e4:d5:05:ea:11:c9:7b:5d:12:69:33: 1a:49:7a:17:07:a9:51:4c:f6:53:4c:51:8c:7b:27: 76:6d:91:47:21:e3:52:c2:e0:07:60:bc:66:4e:7d: 3f:c0:be:c7:e0:d4:29:39:02:35:f7:8f:58:b0:46: 64:af:f6:6d:aa:c9:f5:30:b9:29:38:d2:81:9a:0b: 38:27:71:e0:50:84:ac:92:df:f5:5c:c6:8d:87:c7: 9d:8c:f2:5b:83:9c:01:47:9a:17:7e:05:86:d1:11: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8D:17:43:13:F5:39:85:B1:D2:29:88:13:7E:D9:A6:73:CB:36:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/daf6e14a-43ae-3748-bdf4-ad8bfb5284db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl X509v3 Authority Key Identifier: keyid:41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer sbgp-ipAddrBlock: critical IPv4: 23.187.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fe:cd:84:bf:1c:59:d7:dc:7a:a1:d3:54:0d:77:88:2f:a2: ae:7a:a5:fe:0c:34:7d:d6:34:ed:a8:43:10:fd:62:d4:07:0e: 03:4a:a8:2e:bd:60:2a:a3:65:b6:d1:35:bc:32:5e:21:ef:02: e1:b9:a2:7f:8e:3f:e9:17:4d:6f:ec:89:9e:3c:3a:53:da:a9: 8c:21:47:15:74:01:7b:22:25:af:df:7f:e3:a7:83:aa:ed:6b: 34:0e:30:99:6f:61:13:4d:28:aa:29:87:ea:08:8d:70:79:5e: 07:3d:25:2a:c3:3b:bf:77:7a:da:ed:13:76:70:49:4a:10:6d: 1a:ce:77:35:b1:90:8a:08:bd:07:54:e1:27:5d:d8:38:24:6e: be:dd:db:da:29:0d:37:da:52:5a:fb:f3:96:ab:2d:17:51:2e: 68:6e:68:e6:08:4a:46:d2:24:c1:bc:cc:ab:04:58:0f:4b:3d: b8:72:fe:4e:bc:7c:26:df:c5:56:22:ae:4b:9f:e9:d7:68:af: ec:98:fb:bf:9d:d7:e8:b1:d6:e8:30:e7:26:55:5c:5e:ad:75: 06:9f:be:6a:4e:18:6f:f8:25:53:45:1d:1f:06:22:da:80:6c: 09:ed:b2:22:8d:f6:23:75:28:2e:3f:03:93:41:62:7f:0a:dc: 62:9f:81:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiHTsDMDNhGh4kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUx YzQ2MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OTY5OWUzODMtNjM3YS00M2I1LTk0MzQtYzNiZGViNDA4MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIxhZUymXXa/NbPqYRwx2GwThP7rDzBjhk/z fClxSVLdaynZNQfp+v339Ok6LzCAi8+GTJnYr0N1UcdrbSDqosyW8osS5XMI2C/M SuLvBFom5pe732M6msNMASQ1JAZLWRdN0LXtYIV0PtWl6LX/WhdlfSVUVOB4HYy3 /RfPFtFJ4O87lozzT7uRFE67jmD3ij/mxc7t51so5NUF6hHJe10SaTMaSXoXB6lR TPZTTFGMeyd2bZFHIeNSwuAHYLxmTn0/wL7H4NQpOQI1949YsEZkr/Ztqsn1MLkp ONKBmgs4J3HgUISskt/1XMaNh8edjPJbg5wBR5oXfgWG0RHP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqNF0MT9TmFsdIpiBN+2aZzyzb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMThh MjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvZGFmNmUxNGEtNDNhZS0z NzQ4LWJkZjQtYWQ4YmZiNTI4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4YTIyMDYtYmIyZC00OGNkLTli ZDgtNzgwNjc4MmUxYzQ2L2QxOGEyMjA2LWJiMmQtNDhjZC05YmQ4LTc4MDY3ODJl MWM0Ni5jcmwwHwYDVR0jBBgwFoAUQe//Kya/mIqusF1EWvyeh6utT1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2 NzgyZTFjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/+zYS/HFnX3Hqh01QNd4gvoq56pf4MNH3WNO2oQxD9YtQHDgNKqC69 YCqjZbbRNbwyXiHvAuG5on+OP+kXTW/siZ48OlPaqYwhRxV0AXsiJa/ff+Ong6rt azQOMJlvYRNNKKoph+oIjXB5Xgc9JSrDO793etrtE3ZwSUoQbRrOdzWxkIoIvQdU 4Sdd2Dgkbr7d29opDTfaUlr785arLRdRLmhuaOYISkbSJMG8zKsEWA9LPbhy/k68 fCbfxVYirkuf6ddor+yY+7+d1+ix1ugw5yZVXF6tdQafvmpOGG/4JVNFHR8GItqA bAntsiKN9iN1KC4/A5NBYn8K3GKfgdM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:47 2025 by rpki-client