$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa File: 289bd71b-2aa4-38c0-9cbb-96cb01650911.roa (raw, json) Hash identifier: vLNQ28qdRsOns0WOPDTKuSVxj+K0GV91oDJR7Fn6WAo= Subject key identifier: E4:0A:2B:96:05:49:CF:33:D3:F3:79:D4:31:E1:36:DE:3F:9F:2C:BF Certificate issuer: /CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Certificate serial: 010D0C9F4328584B8F62B0EC04A239722E8515C0 Authority key identifier: B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa Signing time: Sat 18 Oct 2025 07:07:09 +0000 ROA not before: Sat 18 Oct 2025 07:07:09 +0000 ROA not after: Fri 16 Jan 2026 08:07:09 +0000 asID: 401990 IP address blocks: 23.147.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:62:b0:ec:04:a2:39:72:2e:85:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f7ffc2-37e7-4f6b-8e00-f62d62821de7 Validity Not Before: Oct 18 07:07:09 2025 GMT Not After : Jan 16 08:07:09 2026 GMT Subject: CN=279e5642-a92f-4baa-88f5-f66da4c1c54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:05:6e:0b:f4:38:a3:94:e7:11:16:f1:81: 76:be:16:03:07:05:75:fa:20:86:b2:3d:b7:40:ca: 39:c9:07:fb:22:13:e4:fc:b3:71:ac:68:c0:7d:3d: ff:31:43:3c:e5:c1:3d:13:13:1f:30:ba:0c:f6:ba: 54:49:29:fb:23:4b:71:a4:e9:74:53:6a:6b:75:eb: fb:a8:71:4a:48:51:3a:58:e2:a3:68:e5:e0:83:e7: e6:18:e9:c0:5d:b8:49:c9:ec:3b:12:f5:3d:95:28: aa:b5:24:00:4e:a7:25:3f:70:fa:4f:57:b2:26:f8: f7:c6:3c:78:fd:51:2e:5a:38:d5:aa:38:28:3f:91: c4:bb:fb:24:7c:88:f3:59:14:de:b0:eb:27:8f:a4: 7f:92:41:bf:8c:88:57:38:bb:e2:7d:88:a9:3e:a4: f3:d6:b7:e9:79:c9:a4:48:e3:0f:3b:bc:49:cd:fd: 52:e7:21:27:19:f4:1d:f0:1f:a2:d8:b4:00:25:c2: 4a:c5:f2:29:b6:74:4b:9f:77:f5:41:53:31:f6:5a: 5c:8a:af:05:9b:0f:b0:e2:70:88:5f:d3:2d:a0:e6: 4c:d7:c2:71:3a:2f:69:3a:8b:fc:58:11:24:6c:5d: 9f:58:b6:c7:ef:13:91:ef:d1:27:01:eb:6f:8e:a9: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:2B:96:05:49:CF:33:D3:F3:79:D4:31:E1:36:DE:3F:9F:2C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/289bd71b-2aa4-38c0-9cbb-96cb01650911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.crl X509v3 Authority Key Identifier: keyid:B8:E7:12:EE:2F:6D:1F:A1:7B:D3:84:C1:89:3C:1D:CC:2F:DD:26:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e3f7ffc2-37e7-4f6b-8e00-f62d62821de7.cer sbgp-ipAddrBlock: critical IPv4: 23.147.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:df:b5:53:5b:49:bb:b5:2b:29:23:7a:61:01:d8:ea:79:9d: 39:b1:42:04:82:58:b1:95:1d:c8:89:ed:d4:3b:b9:19:62:93: 0e:a5:40:b9:8d:c0:39:8e:f4:b7:da:db:26:2c:ed:db:34:44: 42:74:12:0d:65:04:bb:49:e9:70:e6:92:7e:8a:61:aa:4e:9c: 07:e1:09:9c:14:79:e7:55:04:b3:50:aa:e6:43:81:8a:e1:aa: 26:0c:82:3b:36:ea:4b:8a:89:3c:5c:04:77:48:1b:ba:67:55: 25:71:b5:aa:59:fc:56:4e:8f:45:b8:b2:72:be:8a:60:92:c2: 00:c2:b7:4f:30:0a:7d:7e:2b:86:c6:ac:63:e9:e0:9c:2e:e2: 26:76:56:5b:ff:95:e5:c8:53:b5:d6:3a:6e:e8:c9:86:c1:3d: 76:b6:d9:71:63:4d:54:9d:05:d6:38:fe:d3:25:85:72:cc:ea: 95:b4:eb:20:87:ba:bf:34:f3:46:96:4d:70:d7:a9:7f:7b:b1: 81:ac:71:ea:76:65:aa:8e:2a:8f:a5:d6:7a:07:db:ef:2f:d3: 1a:08:a1:ae:22:7f:d2:9d:df:29:ae:c3:8c:5f:db:e5:fd:3c: 15:ea:03:9e:d2:96:95:b4:96:73:43:6f:2c:d5:90:42:2a:aa: c9:9d:23:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPYrDsBKI5ci6FFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmN2ZmYzItMzdlNy00ZjZiLThlMDAtZjYyZDYyODIx ZGU3MB4XDTI1MTAxODA3MDcwOVoXDTI2MDExNjA4MDcwOVowLzEtMCsGA1UEAxMk Mjc5ZTU2NDItYTkyZi00YmFhLTg4ZjUtZjY2ZGE0YzFjNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEwFbgv0OKOU5xEW8YF2vhYDBwV1+iCGsj23 QMo5yQf7IhPk/LNxrGjAfT3/MUM85cE9ExMfMLoM9rpUSSn7I0txpOl0U2prdev7 qHFKSFE6WOKjaOXgg+fmGOnAXbhJyew7EvU9lSiqtSQATqclP3D6T1eyJvj3xjx4 /VEuWjjVqjgoP5HEu/skfIjzWRTesOsnj6R/kkG/jIhXOLvifYipPqTz1rfpecmk SOMPO7xJzf1S5yEnGfQd8B+i2LQAJcJKxfIptnRLn3f1QVMx9lpciq8Fmw+w4nCI X9MtoOZM18JxOi9pOov8WBEkbF2fWLbH7xOR79EnAetvjqm4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQKK5YFSc8z0/N51DHhNt4/nyy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3 ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJkNjI4MjFkZTcvMjg5YmQ3MWItMmFhNC0z OGMwLTljYmItOTZjYjAxNjUwOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTNmN2ZmYzItMzdlNy00ZjZiLThl MDAtZjYyZDYyODIxZGU3L2UzZjdmZmMyLTM3ZTctNGY2Yi04ZTAwLWY2MmQ2Mjgy MWRlNy5jcmwwHwYDVR0jBBgwFoAUuOcS7i9tH6F704TBiTwdzC/dJoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lM2Y3ZmZjMi0zN2U3LTRmNmItOGUwMC1mNjJk NjI4MjFkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/ftVNbSbu1KykjemEB2Op5nTmxQgSCWLGVHciJ7dQ7uRlikw6lQLmN wDmO9Lfa2yYs7ds0REJ0Eg1lBLtJ6XDmkn6KYapOnAfhCZwUeedVBLNQquZDgYrh qiYMgjs26kuKiTxcBHdIG7pnVSVxtapZ/FZOj0W4snK+imCSwgDCt08wCn1+K4bG rGPp4Jwu4iZ2Vlv/leXIU7XWOm7oyYbBPXa22XFjTVSdBdY4/tMlhXLM6pW06yCH ur8080aWTXDXqX97sYGscep2ZaqOKo+l1noH2+8v0xoIoa4if9Kd3ymuw4xf2+X9 PBXqA57SlpW0lnNDbyzVkEIqqsmdIwU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:32:11 2025 by rpki-client