$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json) Hash identifier: xoHGfd+Kk5sIM3K6as7ODYshSpon4Qi2L2O6abnaeG8= Subject key identifier: CE:0D:5D:E0:FA:B6:62:1D:D1:31:AB:74:EF:40:31:88:4E:6D:03:17 Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Certificate serial: 010D0C9F4328584B25FC310B5381432D7B58E8F8 Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 398292 IP address blocks: 23.158.48.0/24 maxlen: 24 169.197.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:31:0b:53:81:43:2d:7b:58:e8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=f685601e-6a02-4e24-9dc9-b8ef7eea3da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:72:5d:bb:10:d1:d2:dd:94:08:84:8a:27: ff:6a:0b:ec:5a:c2:8f:9e:ba:8c:61:41:47:cc:4f: 9c:2e:f3:f0:43:c1:14:e7:0c:4a:27:00:f9:65:73: 84:d4:1c:6d:43:dc:a0:7d:ea:e9:2c:93:85:da:12: 62:09:dc:c7:7b:da:67:f7:28:5e:e4:e1:ae:82:ff: f0:c3:ba:35:82:e1:05:4e:f4:60:ec:c3:15:ad:49: 3e:67:b5:0a:fa:11:26:77:d1:d1:10:e1:f3:5f:e8: fd:65:fa:61:43:5e:72:aa:5f:5a:5a:68:a3:28:09: bf:d0:e9:3e:01:c8:26:9d:a7:4c:db:8e:7d:c9:d5: 9d:0a:6b:63:b6:66:ee:84:e1:13:77:06:bb:4d:80: 03:08:9a:b7:c0:76:1c:f7:9d:37:e1:eb:91:8d:8a: ca:03:dc:96:35:6a:83:d4:3b:d4:5d:84:2c:93:57: cb:ae:12:82:8c:89:b6:c3:93:1a:02:cb:80:43:4f: 7c:cb:d4:f0:b6:dc:d3:fe:5f:93:59:1b:95:3e:b6: 11:2d:a9:20:96:4c:a5:0e:96:4f:cc:26:09:7e:91: 9b:3f:37:0b:77:0a:cc:23:13:13:d3:cc:47:47:e0: ae:d0:bb:1d:b0:1a:9f:fc:eb:dc:6c:fd:79:4c:5a: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0D:5D:E0:FA:B6:62:1D:D1:31:AB:74:EF:40:31:88:4E:6D:03:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl X509v3 Authority Key Identifier: keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer sbgp-ipAddrBlock: critical IPv4: 23.158.48.0/24 169.197.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:80:20:fe:dc:91:26:88:78:5c:47:66:48:6b:f0:4f:eb:5a: 72:ed:85:f0:fc:2a:0c:fe:b7:8b:cc:5e:b9:98:de:d9:14:b4: 58:81:ce:fb:fd:c5:e5:d7:46:87:11:34:95:bc:79:53:e7:ba: ef:0d:80:4f:4d:ea:71:21:80:b3:a5:a3:57:95:b7:42:95:6a: 32:94:41:92:61:8f:88:09:a8:37:8e:28:2c:80:0a:10:7f:2d: 05:b5:21:b7:5d:0a:ab:e4:75:d2:47:d5:7f:25:0f:02:9f:e3: 1f:21:6e:4e:3e:f6:96:18:a4:65:f7:8f:3a:04:6c:cb:f5:ec: 4c:db:8c:6f:e2:8e:c0:e3:e9:e0:0f:88:95:c7:f4:5a:9b:21: 38:83:fc:2f:a4:da:69:b4:b6:97:82:a0:3b:48:7c:9d:ab:9a: 8e:ab:bc:95:94:25:69:6b:8e:a8:fa:ef:a7:72:4b:02:c1:d5: b0:4a:53:ec:79:7b:36:e1:a0:b1:d9:fd:da:84:d7:2d:87:0c: fb:f4:79:56:a5:d2:c1:fd:2a:1b:dc:81:f4:8a:ae:97:bc:31: 57:31:34:b9:a1:2b:74:c2:3d:de:ba:ad:6d:70:ea:36:12:43: 38:6d:d1:1d:3b:e3:a6:5f:8d:b6:a8:de:bd:ce:bd:4a:e0:a5: dd:c8:f7:19 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsl/DELU4FDLXtY6PgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU2M2ZhM2MtYjYyMy00NWVkLWJjNTAtNWM1ZjZjZTFl ZWU4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjY4NTYwMWUtNmEwMi00ZTI0LTlkYzktYjhlZjdlZWEzZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin9yXbsQ0dLdlAiEiif/agvsWsKPnrqMYUFH zE+cLvPwQ8EU5wxKJwD5ZXOE1BxtQ9ygferpLJOF2hJiCdzHe9pn9yhe5OGugv/w w7o1guEFTvRg7MMVrUk+Z7UK+hEmd9HREOHzX+j9ZfphQ15yql9aWmijKAm/0Ok+ AcgmnadM2459ydWdCmtjtmbuhOETdwa7TYADCJq3wHYc95034euRjYrKA9yWNWqD 1DvUXYQsk1fLrhKCjIm2w5MaAsuAQ098y9TwttzT/l+TWRuVPrYRLakglkylDpZP zCYJfpGbPzcLdwrMIxMT08xHR+Cu0LsdsBqf/OvcbP15TFpBDwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM4NXeD6tmId0TGrdO9AMYhObQMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYz ZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVmNmNlMWVlZTgvZmZhNmViYTEtMThjNS0z ZWRmLWFhMWEtYzU0Y2Q0MDA1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWU2M2ZhM2MtYjYyMy00NWVkLWJj NTAtNWM1ZjZjZTFlZWU4LzFlNjNmYTNjLWI2MjMtNDVlZC1iYzUwLTVjNWY2Y2Ux ZWVlOC5jcmwwHwYDVR0jBBgwFoAUownWF7q1MeX/MRUio0wUUiJgU40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYzZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVm NmNlMWVlZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF54wAwQC qcWcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAImAIP7ckSaIeFxHZkhr8E/rWnLthfD8Kgz+t4vMXrmY3tkU tFiBzvv9xeXXRocRNJW8eVPnuu8NgE9N6nEhgLOlo1eVt0KVajKUQZJhj4gJqDeO KCyAChB/LQW1IbddCqvkddJH1X8lDwKf4x8hbk4+9pYYpGX3jzoEbMv17EzbjG/i jsDj6eAPiJXH9FqbITiD/C+k2mm0tpeCoDtIfJ2rmo6rvJWUJWlrjqj676dySwLB 1bBKU+x5ezbhoLHZ/dqE1y2HDPv0eVal0sH9KhvcgfSKrpe8MVcxNLmhK3TCPd66 rW1w6jYSQzht0R0746Zfjbao3r3OvUrgpd3I9xk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:36:33 2025 by rpki-client