$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa File: feaece30-d037-38af-8e64-48ea4333f827.roa (raw, json) Hash identifier: Wmk7VqlXyeFkNXKmi7EIXnOV6+nlKBnn07iSbaTfSEw= Subject key identifier: A3:AF:09:69:78:69:DC:B3:AD:85:24:43:77:42:85:43:32:31:7C:02 Certificate issuer: /CN=8c36215c-1577-42c1-a44f-f836bc4d03b3 Certificate serial: 010D0C9F4328584B6BC758336B74202484863880 Authority key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 62563 IP address blocks: 23.162.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:58:33:6b:74:20:24:84:86:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=026ff0f3-67a0-4818-b54e-a1b1480a758d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:b8:d7:bb:cc:f5:d1:c4:ab:02:36:e6:43: f8:42:da:d2:3f:12:2f:89:b8:f2:fc:9d:0c:55:67: 97:e3:e4:c4:ca:e4:bb:50:28:e1:74:c9:29:a1:d3: b8:22:fd:a7:a6:12:12:1e:eb:10:4c:9f:42:35:7c: ef:5c:90:3c:47:87:fd:46:60:a6:4e:d7:b4:ef:7b: bd:55:c2:71:05:91:86:2c:91:6b:2c:03:2b:42:0d: 12:70:4e:78:e2:76:a0:ff:d3:9e:10:13:b8:f3:4d: c2:a5:7d:0b:f2:8d:4d:72:5d:74:37:d3:72:ad:f0: 98:ca:c4:84:07:56:d1:81:35:db:23:0b:3a:04:85: 72:2a:6f:32:8a:96:02:0c:d7:9a:09:6e:d3:75:db: f8:58:06:74:e2:f3:b8:25:8c:c8:8f:2f:90:ec:c1: bd:4b:9f:da:e7:08:0d:91:f1:68:d4:5c:bb:da:67: 2e:97:19:82:0f:43:ea:f0:39:60:85:9e:23:05:59: 38:ea:41:bd:87:ba:0c:25:e8:bb:b8:5b:58:c4:10: 3d:49:75:6f:c4:10:6a:57:ea:88:76:f0:6b:7a:a0: 99:b4:28:c9:92:b2:97:26:db:a0:d9:1a:8b:0f:60: 1f:d5:fc:0c:4f:86:43:50:6c:65:35:a7:3e:cb:d2: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AF:09:69:78:69:DC:B3:AD:85:24:43:77:42:85:43:32:31:7C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl X509v3 Authority Key Identifier: keyid:4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer sbgp-ipAddrBlock: critical IPv4: 23.162.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:83:9f:59:a1:68:2c:79:37:08:c2:36:3e:f4:02:92:98:1f: 48:c5:e7:7f:2f:8d:80:1b:33:9b:88:3b:d0:72:00:73:e7:72: 44:23:1f:88:68:a5:0e:14:52:e1:54:8c:41:37:c6:a4:43:3d: dd:4b:1f:7b:95:a6:33:25:a1:16:78:83:b6:85:da:6a:64:3f: 59:70:8f:7a:29:de:b9:36:4d:1f:23:73:b6:a3:98:6a:a5:9a: 9e:6e:5a:c5:25:f6:ff:1f:2a:3f:69:3d:61:e0:26:b6:79:dd: e3:1b:10:76:3a:18:12:be:57:a2:42:38:e7:d0:5a:23:3b:36: dc:8f:5b:2e:30:25:81:bb:66:4e:6e:c3:03:ea:a9:bb:c8:42: 1f:85:ce:de:46:d8:58:2f:59:72:a5:b9:a2:96:0d:2c:7a:b0: 28:63:25:b8:dc:c9:24:19:7d:09:d0:42:dd:22:10:be:9f:bd: 55:30:cf:c5:1c:4e:57:4d:a4:4d:e7:27:9a:4f:56:e2:7e:67: 5a:46:69:83:78:41:ae:e3:13:19:e8:dc:5c:d3:1e:a0:c4:2e: 59:c0:e3:98:ad:8e:9d:da:f7:3e:90:ba:a4:89:df:98:18:e5: 9c:b3:c1:11:7b:59:07:1e:09:18:3f:f9:7b:5b:88:f3:98:4e: b4:2c:19:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1gza3QgJISGOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMzNjIxNWMtMTU3Ny00MmMxLWE0NGYtZjgzNmJjNGQw M2IzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDI2ZmYwZjMtNjdhMC00ODE4LWI1NGUtYTFiMTQ4MGE3NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU2417vM9dHEqwI25kP4QtrSPxIvibjy/J0M VWeX4+TEyuS7UCjhdMkpodO4Iv2nphISHusQTJ9CNXzvXJA8R4f9RmCmTte073u9 VcJxBZGGLJFrLAMrQg0ScE544nag/9OeEBO4803CpX0L8o1Ncl10N9NyrfCYysSE B1bRgTXbIws6BIVyKm8yipYCDNeaCW7Tddv4WAZ04vO4JYzIjy+Q7MG9S5/a5wgN kfFo1Fy72mculxmCD0Pq8DlghZ4jBVk46kG9h7oMJei7uFtYxBA9SXVvxBBqV+qI dvBreqCZtCjJkrKXJtug2RqLD2Af1fwMT4ZDUGxlNac+y9KSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOvCWl4adyzrYUkQ3dChUMyMXwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzM2 MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2YmM0ZDAzYjMvZmVhZWNlMzAtZDAzNy0z OGFmLThlNjQtNDhlYTQzMzNmODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMzNjIxNWMtMTU3Ny00MmMxLWE0 NGYtZjgzNmJjNGQwM2IzLzhjMzYyMTVjLTE1NzctNDJjMS1hNDRmLWY4MzZiYzRk MDNiMy5jcmwwHwYDVR0jBBgwFoAUTCt55IONP3wTxiIgcapxiZetf8AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzM2MjE1Yy0xNTc3LTQyYzEtYTQ0Zi1mODM2 YmM0ZDAzYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6I4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACDn1mhaCx5NwjCNj70ApKYH0jF538vjYAbM5uIO9ByAHPnckQjH4ho pQ4UUuFUjEE3xqRDPd1LH3uVpjMloRZ4g7aF2mpkP1lwj3op3rk2TR8jc7ajmGql mp5uWsUl9v8fKj9pPWHgJrZ53eMbEHY6GBK+V6JCOOfQWiM7NtyPWy4wJYG7Zk5u wwPqqbvIQh+Fzt5G2FgvWXKluaKWDSx6sChjJbjcySQZfQnQQt0iEL6fvVUwz8Uc TldNpE3nJ5pPVuJ+Z1pGaYN4Qa7jExno3FzTHqDELlnA45itjp3a9z6QuqSJ35gY 5ZyzwRF7WQceCRg/+XtbiPOYTrQsGYc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:13 2025 by rpki-client