$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa File: be0dee30-c326-3427-9dce-49d70b8e6c8c.roa (raw, json) Hash identifier: etVxzJdC5bJ4OmIe0qPTtSVzGNRPB6kUskLos0G0ozg= Subject key identifier: 6A:CA:66:ED:65:6B:17:73:51:DA:17:68:51:8C:C4:F6:33:17:33:8D Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584B84E77CCD88CDD8754446DA00 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 395842 IP address blocks: 23.144.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:cd:88:cd:d8:75:44:46:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ac970a87-b03e-4dbd-b957-43de6642817f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:ea:34:c8:a9:77:7d:0d:a1:53:7d:28:43: 8e:65:e1:6e:48:4d:7c:2f:76:6a:61:d1:0d:ff:54: 8b:46:fc:1c:03:94:17:ef:76:55:22:5e:8d:64:d5: e9:99:05:47:ce:a8:6a:9b:3b:88:6f:34:7e:66:87: 3e:7b:49:ac:f6:41:27:ef:ee:3a:d3:51:37:f7:db: 62:3e:f5:65:b1:77:94:ba:d8:bd:29:cd:4a:c8:bf: 87:01:08:2e:52:63:e2:b1:7e:28:3d:53:7e:e9:0a: 29:4a:7b:c7:ce:88:5c:b7:ea:14:f9:9f:b4:36:8e: b7:7a:f3:97:57:02:1e:bd:19:ff:87:d2:e9:14:c9: ba:fd:5a:09:ee:95:15:5a:89:4e:15:70:f4:37:a4: 0d:64:f0:06:32:46:cc:f4:87:cf:d9:eb:db:55:dc: 15:0f:c0:1f:ad:5d:7c:3a:53:f6:50:8d:02:ff:85: 23:10:93:14:81:cd:81:5a:40:a2:a2:4a:c0:d7:e4: 27:44:44:76:bb:60:f4:cf:1c:e4:64:83:97:90:7e: 15:92:87:2e:97:84:fb:94:47:84:3a:15:2b:c9:5c: ff:3f:4d:4d:9f:4c:20:60:fe:e3:99:12:e3:02:b4: 34:83:22:a3:99:d4:46:55:2f:87:86:68:32:33:fd: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:66:ED:65:6B:17:73:51:DA:17:68:51:8C:C4:F6:33:17:33:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv4: 23.144.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:43:b3:ec:23:b8:ae:f6:55:ee:82:03:58:87:ad:6b:aa:83: e8:d1:e1:3d:3f:b8:42:6f:79:2c:bb:25:fd:eb:d3:35:f1:1a: e5:89:f8:22:a4:83:d8:b1:46:52:97:fa:83:a0:7c:ed:10:fa: 26:b4:7a:b3:15:1f:79:1d:6e:b8:4c:66:ef:15:5e:62:48:f5: 3c:69:17:15:6c:aa:e3:4f:34:78:58:62:91:a5:68:34:20:ef: 26:70:cb:d1:ee:8d:5f:6a:b6:9d:7b:df:7a:cf:ae:1e:b8:2e: 0d:b1:57:4a:ca:36:54:9a:46:e1:7e:32:86:ef:68:97:31:87: 19:84:89:4a:27:f9:63:80:97:9c:04:08:28:a5:b9:ce:3a:86: 00:05:ec:89:67:5f:dd:03:47:f8:8c:fd:ba:55:ff:f6:a6:1a: 70:57:bf:af:01:f3:1b:62:02:31:96:03:f3:6d:d4:c0:c8:56: 70:8b:9c:33:46:3a:c1:61:c4:8f:fe:ed:4c:cf:42:16:58:52: 1c:a2:cf:6e:12:96:d4:e1:d4:1b:29:25:01:f3:b7:1e:78:98: a7:83:e1:dc:77:7f:e6:92:62:6a:e4:47:b0:16:2d:64:93:4d: 56:aa:72:6c:40:d7:73:e9:db:a0:25:85:b8:ef:ab:e3:eb:42: bd:ab:26:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53zNiM3YdURG2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWM5NzBhODctYjAzZS00ZGJkLWI5NTctNDNkZTY2NDI4MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/qNMipd30NoVN9KEOOZeFuSE18L3ZqYdEN /1SLRvwcA5QX73ZVIl6NZNXpmQVHzqhqmzuIbzR+Zoc+e0ms9kEn7+4601E399ti PvVlsXeUuti9Kc1KyL+HAQguUmPisX4oPVN+6QopSnvHzohct+oU+Z+0No63evOX VwIevRn/h9LpFMm6/VoJ7pUVWolOFXD0N6QNZPAGMkbM9IfP2evbVdwVD8AfrV18 OlP2UI0C/4UjEJMUgc2BWkCiokrA1+QnRER2u2D0zxzkZIOXkH4Vkocul4T7lEeE OhUryVz/P01Nn0wgYP7jmRLjArQ0gyKjmdRGVS+HhmgyM/1BBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrKZu1laxdzUdoXaFGMxPYzFzONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvYmUwZGVlMzAtYzMyNi0z NDI3LTlkY2UtNDlkNzBiOGU2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRDs+wjuK72Ve6CA1iHrWuqg+jR4T0/uEJveSy7Jf3r0zXxGuWJ+CKk g9ixRlKX+oOgfO0Q+ia0erMVH3kdbrhMZu8VXmJI9TxpFxVsquNPNHhYYpGlaDQg 7yZwy9HujV9qtp1733rPrh64Lg2xV0rKNlSaRuF+MobvaJcxhxmEiUon+WOAl5wE CCiluc46hgAF7IlnX90DR/iM/bpV//amGnBXv68B8xtiAjGWA/Nt1MDIVnCLnDNG OsFhxI/+7UzPQhZYUhyiz24SltTh1BspJQHztx54mKeD4dx3f+aSYmrkR7AWLWST TVaqcmxA13Pp26Alhbjvq+PrQr2rJtQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:05 2025 by rpki-client