$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa File: 7017deb8-bb92-3642-93d0-67e0704f3ba3.roa (raw, json) Hash identifier: 0f0j39/7/Kp1p77BEUquu37szjHuo7K1kW0Y8ghGUnA= Subject key identifier: AA:43:7B:59:1D:9F:C8:DF:3F:02:2D:17:E6:0C:BC:F2:9D:15:6D:C0 Certificate issuer: /CN=ef944392-b528-43c2-9abf-e4543229ae2d Certificate serial: 010D0C9F4328584B87B221BBD79577449B4EE880 Authority key identifier: D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.188.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:21:bb:d7:95:77:44:9b:4e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef944392-b528-43c2-9abf-e4543229ae2d Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=9ffee95c-1d0d-4e87-afe6-c301a56aa8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:53:61:ff:94:48:28:93:8b:75:1e:93:0a: 00:3d:af:53:59:8d:d6:5c:0d:b2:72:db:64:7c:11: 7e:4f:92:6d:58:7e:be:fa:26:7b:54:3f:29:6c:68: 18:db:65:68:08:9e:61:52:e0:4f:67:8b:7b:d1:d6: de:ce:e2:6d:32:a0:40:dc:9c:cc:9e:09:d9:98:c5: b8:88:b4:fc:08:5a:50:1d:c3:26:7e:b5:be:13:c7: 04:20:38:18:ef:b2:d9:76:03:65:7e:20:1a:1e:f4: a5:46:84:2f:99:f7:a2:dc:ae:93:bc:c3:93:28:32: 83:5c:f7:25:3f:ad:0c:f5:74:73:4b:16:7f:55:66: cd:c4:af:2d:fb:4b:d4:c7:18:e4:2e:2a:a8:5e:2e: 7c:aa:64:e8:2c:b1:ad:fb:c8:53:c9:f9:9a:2a:18: 38:7d:2e:91:8f:38:38:52:e6:50:9c:5d:1f:f3:eb: b0:92:6e:1a:5e:de:50:e9:92:0a:83:fe:2c:51:7b: d1:d4:0b:f3:40:04:fc:fa:3c:0a:8c:9c:d1:f0:af: 9c:9d:90:7c:38:c3:12:f9:11:9c:85:4c:24:24:90: cd:8f:01:68:76:55:1c:b1:fa:98:2c:2e:b0:67:3c: a4:e7:62:b3:59:e7:bb:43:4b:e8:f1:55:c4:9c:c5: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:7B:59:1D:9F:C8:DF:3F:02:2D:17:E6:0C:BC:F2:9D:15:6D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl X509v3 Authority Key Identifier: keyid:D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer sbgp-ipAddrBlock: critical IPv4: 23.188.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:65:e7:26:7a:4d:c9:3a:a9:73:0e:9a:c5:3b:4a:5c:c5:c3: 1e:cb:66:41:d6:5e:99:3f:d3:b3:fb:e5:cf:8d:dc:cd:07:4d: 27:e0:1a:18:0f:6a:32:98:be:09:67:38:6a:4a:62:3f:02:68: 3f:75:2f:32:69:71:7b:80:6c:ff:02:de:f2:f0:ea:12:43:54: 7c:c7:62:24:61:06:ad:41:0f:6b:84:77:be:a3:ee:2f:05:7f: 43:0a:a1:0b:3f:41:97:7a:e2:5d:33:76:ed:0e:13:ce:b0:82: 1e:14:e8:e3:8b:49:82:5a:e8:74:5c:62:a8:7f:0c:2f:5a:62: a3:1f:b4:77:2c:79:54:cb:44:c0:ec:58:03:4d:f1:6b:4e:29: db:fc:c2:89:99:5f:c0:3c:28:d2:52:c3:8a:75:e9:a6:e0:76: be:fb:6f:b0:32:49:f3:e1:01:43:09:1c:85:45:9f:78:55:12: 15:1a:12:a9:4e:a2:98:91:d7:c5:d6:6b:d7:0f:d8:79:c1:8f: 3c:c4:e9:52:6a:9a:50:f0:f6:4b:94:65:d6:93:7b:ac:e6:97: ea:70:58:70:a5:35:a0:ea:88:d6:1f:81:ae:51:97:95:51:7c: ff:e2:7f:cc:80:5d:45:de:d5:d3:93:f2:01:43:7f:a0:3f:50: 4f:47:cb:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiG715V3RJtO6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY5NDQzOTItYjUyOC00M2MyLTlhYmYtZTQ1NDMyMjlh ZTJkMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OWZmZWU5NWMtMWQwZC00ZTg3LWFmZTYtYzMwMWE1NmFhOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1xTYf+USCiTi3UekwoAPa9TWY3WXA2ycttk fBF+T5JtWH6++iZ7VD8pbGgY22VoCJ5hUuBPZ4t70dbezuJtMqBA3JzMngnZmMW4 iLT8CFpQHcMmfrW+E8cEIDgY77LZdgNlfiAaHvSlRoQvmfei3K6TvMOTKDKDXPcl P60M9XRzSxZ/VWbNxK8t+0vUxxjkLiqoXi58qmToLLGt+8hTyfmaKhg4fS6Rjzg4 UuZQnF0f8+uwkm4aXt5Q6ZIKg/4sUXvR1AvzQAT8+jwKjJzR8K+cnZB8OMMS+RGc hUwkJJDNjwFodlUcsfqYLC6wZzyk52KzWee7Q0vo8VXEnMWB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpDe1kdn8jfPwItF+YMvPKdFW3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0 NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0MzIyOWFlMmQvNzAxN2RlYjgtYmI5Mi0z NjQyLTkzZDAtNjdlMDcwNGYzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY5NDQzOTItYjUyOC00M2MyLTlh YmYtZTQ1NDMyMjlhZTJkL2VmOTQ0MzkyLWI1MjgtNDNjMi05YWJmLWU0NTQzMjI5 YWUyZC5jcmwwHwYDVR0jBBgwFoAU1ELYop+RoTkRo9YC5PTkP0bN6fQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjk0NDM5Mi1iNTI4LTQzYzItOWFiZi1lNDU0 MzIyOWFlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5l5yZ6Tck6qXMOmsU7SlzFwx7LZkHWXpk/07P75c+N3M0HTSfgGhgP ajKYvglnOGpKYj8CaD91LzJpcXuAbP8C3vLw6hJDVHzHYiRhBq1BD2uEd76j7i8F f0MKoQs/QZd64l0zdu0OE86wgh4U6OOLSYJa6HRcYqh/DC9aYqMftHcseVTLRMDs WANN8WtOKdv8womZX8A8KNJSw4p16abgdr77b7AySfPhAUMJHIVFn3hVEhUaEqlO opiR18XWa9cP2HnBjzzE6VJqmlDw9kuUZdaTe6zml+pwWHClNaDqiNYfga5Rl5VR fP/if8yAXUXe1dOT8gFDf6A/UE9Hywg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:40 2025 by rpki-client