$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa File: f22204b5-6c03-3984-a41f-23bfca882f70.roa (raw, json) Hash identifier: znLHCiXDmnrRzVsJTaGSnEnGCcYDk5E1pNveXiZo1ng= Subject key identifier: 65:83:A5:86:9C:58:27:D9:75:72:42:B2:A8:2C:6B:E1:F8:6F:53:34 Certificate issuer: /CN=bfcded43-2d76-428f-b7f1-3042af66f969 Certificate serial: 010D0C9F4328584B8C5BD30C04CAE9DE225DEE00 Authority key identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa Signing time: Fri 17 Oct 2025 05:05:53 +0000 ROA not before: Fri 17 Oct 2025 05:05:53 +0000 ROA not after: Thu 15 Jan 2026 06:05:53 +0000 asID: 46664 IP address blocks: 23.175.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:5b:d3:0c:04:ca:e9:de:22:5d:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfcded43-2d76-428f-b7f1-3042af66f969 Validity Not Before: Oct 17 05:05:53 2025 GMT Not After : Jan 15 06:05:53 2026 GMT Subject: CN=b99683be-1e89-494d-9ad0-35d3928e4f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:0a:d6:71:5f:bd:0a:38:c5:6c:0e:4f:44: d5:22:9b:c7:98:a3:a8:88:59:3a:11:c6:0c:04:01: 53:d7:c2:0d:b5:ac:d2:1e:b4:1d:57:18:82:5c:69: 37:07:cb:8f:33:d0:61:7d:80:a0:a0:36:92:2d:9e: d8:3e:c1:28:fc:1e:31:75:64:f3:51:5a:6c:fa:d4: 5c:70:b7:2f:e2:10:7d:ff:0f:30:a5:b9:27:26:53: 2c:c3:ef:f8:62:91:97:d1:e3:ff:3a:dc:1d:1e:96: 29:a0:5d:ff:e6:48:17:40:79:ec:b4:5b:f5:99:f0: 99:d0:d4:6f:4c:31:11:e3:89:81:8f:75:dc:e5:eb: af:63:10:ae:80:4a:f9:48:bc:22:5d:97:6f:aa:50: 73:9c:f6:bd:fc:17:e1:8f:5a:38:89:98:fd:7a:c6: e6:7e:e8:02:07:53:5b:29:ff:d3:6b:18:b2:f3:f4: e6:6e:9b:00:4c:c6:23:12:55:73:a3:0d:41:22:35: ef:9f:e7:e5:94:c2:54:49:4c:ba:69:fa:1f:75:11: f4:55:a8:eb:0a:71:76:f5:95:f0:82:1e:88:c1:6c: 62:d0:e8:ec:f1:a1:c1:18:ed:f9:19:62:4e:98:ad: fb:d3:d9:a2:6f:8b:71:18:9e:75:f9:a3:4d:0b:f1: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:A5:86:9C:58:27:D9:75:72:42:B2:A8:2C:6B:E1:F8:6F:53:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/f22204b5-6c03-3984-a41f-23bfca882f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl X509v3 Authority Key Identifier: keyid:E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer sbgp-ipAddrBlock: critical IPv4: 23.175.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2a:01:84:e5:60:04:92:1d:07:7c:b7:ef:a6:25:aa:45:f0: 0c:62:6b:34:2d:86:d0:bb:71:c3:d9:63:33:29:0b:02:4e:39: 12:be:5f:5c:3a:42:7b:b1:2a:4f:a2:1b:58:74:0f:7f:f6:00: 19:56:92:78:7f:ba:ce:8f:66:24:a8:01:db:c9:47:ac:24:75: 09:27:a5:90:bf:44:12:97:cc:aa:be:21:1a:9f:4e:f3:5c:73: a7:25:92:d8:d0:87:87:e0:dd:6b:f7:74:1e:10:cd:02:03:d4: 8c:45:d2:fe:2c:3a:03:ca:7f:fd:ed:31:9a:05:99:69:5e:1a: 02:7c:10:19:1e:5f:16:ec:d3:e2:64:08:ad:90:11:5e:a1:2d: ca:c5:56:4e:18:9f:ca:c1:f2:b3:a4:22:84:45:b8:f8:4f:43: 20:34:16:a2:09:36:a6:33:fe:b3:ae:14:ca:1a:28:68:d5:e1: 5d:57:60:86:33:9e:60:a8:19:be:5a:3e:ee:85:ad:93:19:23: 49:2e:50:ed:b3:f7:89:c5:85:15:2d:a2:34:d4:29:79:db:6e: 8d:f8:ad:26:c2:77:69:6f:34:60:eb:ba:89:ef:5f:45:39:51: 1c:d1:0b:00:be:94:bb:13:68:32:02:b1:91:bf:1c:dc:b3:b2: bc:46:0b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuMW9MMBMrp3iJd7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjZGVkNDMtMmQ3Ni00MjhmLWI3ZjEtMzA0MmFmNjZm OTY5MB4XDTI1MTAxNzA1MDU1M1oXDTI2MDExNTA2MDU1M1owLzEtMCsGA1UEAxMk Yjk5NjgzYmUtMWU4OS00OTRkLTlhZDAtMzVkMzkyOGU0ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rQK1nFfvQo4xWwOT0TVIpvHmKOoiFk6EcYM BAFT18INtazSHrQdVxiCXGk3B8uPM9BhfYCgoDaSLZ7YPsEo/B4xdWTzUVps+tRc cLcv4hB9/w8wpbknJlMsw+/4YpGX0eP/OtwdHpYpoF3/5kgXQHnstFv1mfCZ0NRv TDER44mBj3Xc5euvYxCugEr5SLwiXZdvqlBznPa9/Bfhj1o4iZj9esbmfugCB1Nb Kf/Taxiy8/TmbpsATMYjElVzow1BIjXvn+fllMJUSUy6afofdRH0VajrCnF29ZXw gh6IwWxi0Ojs8aHBGO35GWJOmK3709mib4txGJ51+aNNC/GH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWDpYacWCfZdXJCsqgsa+H4b1M0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNk ZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQyYWY2NmY5NjkvZjIyMjA0YjUtNmMwMy0z OTg0LWE0MWYtMjNiZmNhODgyZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmZjZGVkNDMtMmQ3Ni00MjhmLWI3 ZjEtMzA0MmFmNjZmOTY5L2JmY2RlZDQzLTJkNzYtNDI4Zi1iN2YxLTMwNDJhZjY2 Zjk2OS5jcmwwHwYDVR0jBBgwFoAU5YB0k0rWAK7cRHqmfRBhmjGF42swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNkZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQy YWY2NmY5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAqAYTlYASSHQd8t++mJapF8AxiazQthtC7ccPZYzMpCwJOORK+X1w6 QnuxKk+iG1h0D3/2ABlWknh/us6PZiSoAdvJR6wkdQknpZC/RBKXzKq+IRqfTvNc c6clktjQh4fg3Wv3dB4QzQID1IxF0v4sOgPKf/3tMZoFmWleGgJ8EBkeXxbs0+Jk CK2QEV6hLcrFVk4Yn8rB8rOkIoRFuPhPQyA0FqIJNqYz/rOuFMoaKGjV4V1XYIYz nmCoGb5aPu6FrZMZI0kuUO2z94nFhRUtojTUKXnbbo34rSbCd2lvNGDruonvX0U5 URzRCwC+lLsTaDICsZG/HNyzsrxGCzc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:33:02 2025 by rpki-client