$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa File: 601e89b6-9c54-3d33-b864-f9e483ec6f90.roa (raw, json) Hash identifier: Zypp01vbyFYnWDBohn31trcR4DXQMn+wprNVJ0nU4qs= Subject key identifier: B8:8A:CC:E4:7F:B5:6F:5C:96:89:7C:1F:7F:82:E0:99:D5:C4:78:16 Certificate issuer: /CN=5701ab54-077b-43a9-8b22-67e8fe12ded7 Certificate serial: 010D0C9F4328584B962C446B9A13B6A3F6239E80 Authority key identifier: 19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa Signing time: Mon 20 Oct 2025 17:28:09 +0000 ROA not before: Mon 20 Oct 2025 17:28:09 +0000 ROA not after: Sun 18 Jan 2026 18:28:09 +0000 asID: 397797 IP address blocks: 23.247.148.0/22 maxlen: 24 209.209.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:2c:44:6b:9a:13:b6:a3:f6:23:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5701ab54-077b-43a9-8b22-67e8fe12ded7 Validity Not Before: Oct 20 17:28:09 2025 GMT Not After : Jan 18 18:28:09 2026 GMT Subject: CN=a6472ab0-a0d7-4908-ab3e-0c04e36e1cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:70:a4:5f:32:36:33:0d:26:15:15:ef:cd: 92:e4:3e:f6:55:78:88:d9:74:9e:73:7c:b2:cb:a0: ad:33:7b:e6:4d:78:89:b8:4b:12:5e:f7:1c:23:ef: a1:8d:dd:61:61:10:40:fe:fa:d7:9a:51:b8:6a:54: 89:15:cd:ef:74:da:7b:99:d9:24:af:03:e6:82:7f: da:f9:82:81:dd:40:9f:5a:08:9e:4e:0c:df:9f:6e: 45:9a:e0:a6:dc:27:58:b0:d6:2b:b4:84:98:43:b7: 69:c3:1e:58:d1:79:25:78:cc:4e:8d:8b:76:71:b4: ac:7e:42:b3:55:a7:e5:0e:67:97:8a:de:3e:7b:47: 92:1a:f7:51:96:37:61:1e:52:0c:b4:fb:14:a6:17: e4:d3:fa:27:40:2d:86:63:10:5a:1c:9f:54:ba:4c: f3:78:32:27:4c:08:83:40:b3:84:99:db:cd:3b:21: 26:79:34:17:e2:3c:bd:ce:dd:b0:8c:2f:f7:00:91: 08:e1:43:a6:e0:c4:ea:78:ce:f4:d3:ca:d5:29:17: 5b:98:56:cf:a0:57:30:86:96:fa:73:65:57:a3:fa: f0:43:a0:3f:6d:83:40:95:86:b4:4d:49:b3:29:64: 59:71:d9:d2:d0:2b:77:7c:f0:ff:33:12:8e:4c:a7: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:CC:E4:7F:B5:6F:5C:96:89:7C:1F:7F:82:E0:99:D5:C4:78:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl X509v3 Authority Key Identifier: keyid:19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.148.0/22 209.209.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f5:cf:43:2e:e4:ee:e2:1f:bf:16:0a:24:01:0b:f5:88:05: 9a:19:a1:e3:1d:cd:53:d0:38:5b:24:b8:c4:02:44:de:6a:40: 06:64:9a:29:78:86:41:b9:4c:9a:35:80:f8:da:f9:8b:cb:6e: ce:1a:39:b5:dc:e1:0f:c4:1d:11:39:e7:fb:f8:b1:9d:4c:db: 29:13:52:8b:cb:6e:92:0d:6b:83:b1:fb:d2:a6:2f:c4:b1:ac: bb:1e:96:81:e6:8d:31:83:ae:a4:1c:df:36:f3:17:0e:48:fc: db:7c:27:3f:e0:0d:34:7d:f4:47:7d:a4:27:0a:ff:13:25:fc: 05:d4:98:7a:2c:5b:24:7b:2d:55:71:86:fb:08:be:b6:d8:c2: a0:76:09:88:c9:2d:95:9f:9d:e8:ea:70:66:57:4c:fa:f3:5a: 10:39:24:7e:09:f7:21:5e:33:36:67:d3:d7:b4:3e:12:6f:f3: 29:40:dc:ac:55:60:dd:b5:6a:bc:a3:62:0e:4d:66:e2:24:d2: 80:b8:47:f6:42:ae:28:24:65:77:7b:b5:00:63:57:89:50:ad: 63:28:c5:28:50:a4:b9:b9:cb:da:f9:3d:1a:23:1b:04:b3:9d: fa:b4:ad:3d:01:b5:05:c5:9c:80:b2:93:a0:59:2f:6c:be:55: 82:6d:c5:a8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuWLERrmhO2o/YjnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcwMWFiNTQtMDc3Yi00M2E5LThiMjItNjdlOGZlMTJk ZWQ3MB4XDTI1MTAyMDE3MjgwOVoXDTI2MDExODE4MjgwOVowLzEtMCsGA1UEAxMk YTY0NzJhYjAtYTBkNy00OTA4LWFiM2UtMGMwNGUzNmUxY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn1wpF8yNjMNJhUV782S5D72VXiI2XSec3yy y6CtM3vmTXiJuEsSXvccI++hjd1hYRBA/vrXmlG4alSJFc3vdNp7mdkkrwPmgn/a +YKB3UCfWgieTgzfn25FmuCm3CdYsNYrtISYQ7dpwx5Y0XkleMxOjYt2cbSsfkKz VaflDmeXit4+e0eSGvdRljdhHlIMtPsUphfk0/onQC2GYxBaHJ9UukzzeDInTAiD QLOEmdvNOyEmeTQX4jy9zt2wjC/3AJEI4UOm4MTqeM7008rVKRdbmFbPoFcwhpb6 c2VXo/rwQ6A/bYNAlYa0TUmzKWRZcdnS0Ct3fPD/MxKOTKc29QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLiKzOR/tW9clol8H3+C4JnVxHgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzAx YWI1NC0wNzdiLTQzYTktOGIyMi02N2U4ZmUxMmRlZDcvNjAxZTg5YjYtOWM1NC0z ZDMzLWI4NjQtZjllNDgzZWM2ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTcwMWFiNTQtMDc3Yi00M2E5LThi MjItNjdlOGZlMTJkZWQ3LzU3MDFhYjU0LTA3N2ItNDNhOS04YjIyLTY3ZThmZTEy ZGVkNy5jcmwwHwYDVR0jBBgwFoAUGRkTHTa0XqUFb5zTKigIKQHGDxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzAxYWI1NC0wNzdiLTQzYTktOGIyMi02N2U4 ZmUxMmRlZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF/eUAwQC 0dFQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABf1z0Mu5O7iH78WCiQBC/WIBZoZoeMdzVPQOFskuMQCRN5q QAZkmil4hkG5TJo1gPja+YvLbs4aObXc4Q/EHRE55/v4sZ1M2ykTUovLbpINa4Ox +9KmL8SxrLseloHmjTGDrqQc3zbzFw5I/Nt8Jz/gDTR99Ed9pCcK/xMl/AXUmHos WyR7LVVxhvsIvrbYwqB2CYjJLZWfnejqcGZXTPrzWhA5JH4J9yFeMzZn09e0PhJv 8ylA3KxVYN21aryjYg5NZuIk0oC4R/ZCrigkZXd7tQBjV4lQrWMoxShQpLm5y9r5 PRojGwSznfq0rT0BtQXFnICyk6BZL2y+VYJtxag= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:37 2025 by rpki-client