$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa File: 3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa (raw, json) Hash identifier: 997qVAI5Q031+ZTXvLt3AhGpNQRtKc5T8ILPDJYPSbI= Subject key identifier: E5:7C:DB:42:1F:DA:76:09:1F:B7:7F:1F:10:08:67:99:51:63:17:FE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D8FC31706F2181D6E080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 23.16.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d8:fc:31:70:6f:21:81:d6:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=e127db42-0c63-4fcf-8b6c-5820757ad7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:ce:7b:e6:98:09:4c:a2:ba:70:c4:ef:05: d1:79:dd:a0:be:d4:43:33:af:02:e1:5f:39:e1:1d: 04:4d:d0:b5:f0:df:83:de:7b:48:fc:e8:b7:ab:d4: 09:ba:21:2c:82:ff:25:22:1e:94:60:4b:1d:3a:f9: ec:fe:2a:a7:30:4e:8f:d4:6e:27:cd:d4:dc:45:82: 8c:ed:b1:06:ff:d7:34:f6:4b:ce:9e:6b:95:89:fe: be:10:7f:df:08:4a:be:cd:f4:f7:d2:8f:c6:3b:79: 95:8c:5e:67:9e:db:89:42:01:c9:1c:23:af:d3:0e: 91:fb:b0:d6:eb:4f:fc:af:02:e8:e6:0e:c6:4e:d6: 13:45:f3:ed:a0:c8:ae:21:4c:55:0a:71:52:dd:bc: ae:ad:7e:df:9c:55:dd:8c:dd:81:75:03:2f:1b:b2: ef:ef:c2:2b:90:53:3e:4f:07:bd:29:02:1c:57:97: fe:70:75:b5:39:19:5a:d0:d3:a0:21:4f:27:c7:d8: 1f:4f:a4:19:9c:34:4b:51:b1:52:b4:7c:b5:86:11: 85:3f:f9:b8:13:8e:86:12:1f:c7:82:35:04:dc:ad: 77:0b:8d:05:06:8e:22:9a:4a:8f:af:c1:8a:1e:ed: 3f:a5:7a:5e:66:02:46:09:6d:17:43:37:1d:bc:b6: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7C:DB:42:1F:DA:76:09:1F:B7:7F:1F:10:08:67:99:51:63:17:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f71a9cf-88bb-3fdc-a4f8-d3a07d704c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 23.16.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:1a:23:88:3d:61:9a:5f:24:0a:c7:54:d1:a8:5a:75:39:65: c8:0e:bc:85:d7:46:73:46:81:34:e3:53:ef:07:2b:27:e7:d5: da:2b:5a:78:cb:c5:47:45:eb:e2:3b:96:14:91:a3:7a:2c:15: 9d:3a:21:23:b4:96:4a:67:f1:45:c6:e2:94:d9:7d:b4:70:96: 92:4c:93:d9:2b:11:a8:c1:3f:65:af:91:8e:4c:e8:13:e0:46: f9:88:9e:1e:e3:08:b4:fb:52:8b:01:51:19:bd:53:f9:3d:a0: 2f:5a:a9:b2:b5:bc:e9:f9:1d:ce:ed:05:61:71:5f:31:cf:26: 7d:39:0b:d7:4f:41:f6:24:d5:f9:00:89:97:54:b6:18:aa:41: 1f:04:61:fe:0b:05:11:62:0b:1b:3f:7d:b7:3a:fc:ee:ef:03: bb:9f:0f:e5:d3:ce:07:38:d4:bc:e4:7f:33:0a:d3:28:de:8c: bc:e2:eb:16:fa:ef:60:7e:8b:19:05:13:6a:82:39:e9:a2:ec: 27:19:39:e0:85:88:64:cf:23:7f:6e:a8:3c:7b:a5:bb:da:d1: 49:5a:27:e1:dd:fb:f5:68:7d:38:ce:09:c2:40:10:77:bc:ce: 3f:16:0e:46:b5:04:98:44:79:42:08:e7:4d:a3:56:73:5f:d1: f2:e3:b4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdj8MXBvIYHW4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTEyN2RiNDItMGM2My00ZmNmLThiNmMtNTgyMDc1N2FkN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOvOe+aYCUyiunDE7wXRed2gvtRDM68C4V85 4R0ETdC18N+D3ntI/Oi3q9QJuiEsgv8lIh6UYEsdOvns/iqnME6P1G4nzdTcRYKM 7bEG/9c09kvOnmuVif6+EH/fCEq+zfT30o/GO3mVjF5nntuJQgHJHCOv0w6R+7DW 60/8rwLo5g7GTtYTRfPtoMiuIUxVCnFS3byurX7fnFXdjN2BdQMvG7Lv78IrkFM+ Twe9KQIcV5f+cHW1ORla0NOgIU8nx9gfT6QZnDRLUbFStHy1hhGFP/m4E46GEh/H gjUE3K13C40FBo4imkqPr8GKHu0/pXpeZgJGCW0XQzcdvLYncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV820If2nYJH7d/HxAIZ5lRYxf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y3MWE5Y2YtODhiYi0z ZmRjLWE0ZjgtZDNhMDdkNzA0YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwaI4g9YZpfJArHVNGoWnU5ZcgOvIXXRnNGgTTjU+8HKyfn1dorWnjL xUdF6+I7lhSRo3osFZ06ISO0lkpn8UXG4pTZfbRwlpJMk9krEajBP2WvkY5M6BPg RvmInh7jCLT7UosBURm9U/k9oC9aqbK1vOn5Hc7tBWFxXzHPJn05C9dPQfYk1fkA iZdUthiqQR8EYf4LBRFiCxs/fbc6/O7vA7ufD+XTzgc41LzkfzMK0yjejLzi6xb6 72B+ixkFE2qCOemi7CcZOeCFiGTPI39uqDx7pbva0UlaJ+Hd+/VofTjOCcJAEHe8 zj8WDka1BJhEeUII502jVnNf0fLjtIw= -----END CERTIFICATE-----Generated at Mon Oct 20 01:12:35 2025 by rpki-client