$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa File: 79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa (raw, json) Hash identifier: h76ocaqMY1hgNcs1XWzngjqBf+oWmEM5dJmcRuF/3gw= Subject key identifier: 1F:E6:FD:22:17:07:D5:CC:88:F8:84:8F:9E:FE:35:66:59:A5:C9:00 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D8E675FC22AA56259A08 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 23.16.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d8:e6:75:fc:22:aa:56:25:9a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=6472fb9e-ec5d-4ac2-b731-c5677840fbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:8d:e1:9c:44:e5:00:c3:c4:de:09:1a:59: be:f0:a0:b8:e7:9c:a8:71:d2:04:82:5e:d2:9a:01: 5c:18:64:26:21:d6:eb:3f:c7:93:e1:e3:3b:c2:1d: 4e:d2:b2:67:c2:a3:e7:c0:93:eb:54:35:31:34:e0: 42:cc:9f:f0:17:6e:7a:3b:69:dd:a4:44:88:25:ee: 0c:27:c8:a6:6e:07:77:89:a0:ee:ce:52:9d:35:b2: a3:2c:42:c1:b5:28:4f:f1:c4:95:67:a9:fe:97:a2: 61:9d:8e:6e:f8:3e:9c:2b:51:4b:93:f2:fb:e0:ce: e4:0a:bf:2f:42:e8:ff:ae:d7:78:6a:24:fb:c0:f9: 25:32:11:2d:34:a6:d7:35:4f:d9:8e:28:d0:67:61: f0:b1:48:15:31:05:11:f5:c2:0b:e0:d6:37:e6:12: 69:82:e5:98:f1:62:fd:69:e6:fb:15:5c:c9:a1:18: 5e:54:53:0c:5f:0c:e8:a6:85:d8:40:67:36:f9:20: 36:75:68:7c:d1:24:95:26:c3:fc:34:28:3d:43:7b: b7:77:3f:3a:10:e9:f3:35:75:c9:7c:b7:92:fe:ec: 99:1a:e0:99:ab:62:9c:f9:7f:d4:4e:a8:4c:11:90: f0:11:fa:21:89:b1:52:e2:1e:24:7d:d7:aa:e5:50: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E6:FD:22:17:07:D5:CC:88:F8:84:8F:9E:FE:35:66:59:A5:C9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 23.16.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3e:b7:51:9b:64:38:4a:6f:06:c2:42:f3:73:9e:92:80:ba: 19:ec:55:3d:8b:50:7b:2b:6b:e8:76:db:25:d8:1d:81:12:39: b2:c2:11:27:1b:dc:83:fe:7e:4f:ec:f2:c6:cb:2b:33:9b:f0: dd:64:f6:97:ac:62:d1:4e:ca:57:f0:ac:cc:6e:6f:03:a6:8f: 83:54:9e:7f:34:34:e9:48:b2:3e:b5:ba:15:8f:bc:cd:db:b5: 20:6c:7b:07:53:b2:d5:2a:c2:f0:25:0f:d4:fb:4a:d9:0b:9f: 8e:32:8b:a8:0e:c7:ed:0e:02:25:67:88:14:61:47:0c:a8:8e: 0a:52:66:57:05:22:ac:67:c1:89:d3:75:7e:64:51:f7:ae:26: de:d5:d8:81:07:a8:d5:be:34:17:f0:f6:45:d5:06:72:3e:f0: 96:4c:b7:01:bb:ea:b9:a7:2a:07:4c:ec:8d:73:51:60:55:a1: c5:2b:10:2e:0d:f5:20:84:53:22:86:29:10:07:11:b8:6b:26: 4b:10:12:bd:b2:22:bb:d5:c9:7c:d6:23:c3:9a:fb:d0:a4:14: e4:11:fe:3c:70:86:51:5b:df:ff:3f:62:2f:67:c6:5a:a5:55: 96:be:37:4b:5b:e5:e9:eb:d0:2e:54:d6:22:40:19:0d:fb:61: 90:fd:1c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdjmdfwiqlYlmggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NjQ3MmZiOWUtZWM1ZC00YWMyLWI3MzEtYzU2Nzc4NDBmYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCKN4ZxE5QDDxN4JGlm+8KC455yocdIEgl7S mgFcGGQmIdbrP8eT4eM7wh1O0rJnwqPnwJPrVDUxNOBCzJ/wF256O2ndpESIJe4M J8imbgd3iaDuzlKdNbKjLELBtShP8cSVZ6n+l6JhnY5u+D6cK1FLk/L74M7kCr8v Quj/rtd4aiT7wPklMhEtNKbXNU/ZjijQZ2HwsUgVMQUR9cIL4NY35hJpguWY8WL9 aeb7FVzJoRheVFMMXwzopoXYQGc2+SA2dWh80SSVJsP8NCg9Q3u3dz86EOnzNXXJ fLeS/uyZGuCZq2Kc+X/UTqhMEZDwEfohibFS4h4kfdeq5VDDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/m/SIXB9XMiPiEj57+NWZZpckAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzlkYTQ3ZjUtNjNkYi0z NWY3LWI0ZTgtYTAzZWE4ZWU0NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg+t1GbZDhKbwbCQvNznpKAuhnsVT2LUHsra+h22yXYHYESObLCEScb 3IP+fk/s8sbLKzOb8N1k9pesYtFOylfwrMxubwOmj4NUnn80NOlIsj61uhWPvM3b tSBsewdTstUqwvAlD9T7StkLn44yi6gOx+0OAiVniBRhRwyojgpSZlcFIqxnwYnT dX5kUfeuJt7V2IEHqNW+NBfw9kXVBnI+8JZMtwG76rmnKgdM7I1zUWBVocUrEC4N 9SCEUyKGKRAHEbhrJksQEr2yIrvVyXzWI8Oa+9CkFOQR/jxwhlFb3/8/Yi9nxlql VZa+N0tb5enr0C5U1iJAGQ37YZD9HDE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:18 2025 by rpki-client