$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa File: 7a1721aa-faa9-366b-8a98-ce7f741692fc.roa (raw, json) Hash identifier: jYz0u1OMAj1DQaW8y4uYrC77lYG3gQHskWm+7dHhS/o= Subject key identifier: 76:BD:4A:3D:D0:A3:7C:C0:0D:5D:2D:90:8B:35:BA:C4:B6:57:DD:9F Certificate issuer: /CN=f80afed8-630c-4446-a972-f7554ab8ece0 Certificate serial: 010D0C9F4328584B8A7CCED51D782B73470CAA00 Authority key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 22339 IP address blocks: 23.135.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:ce:d5:1d:78:2b:73:47:0c:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80afed8-630c-4446-a972-f7554ab8ece0 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=ed7be50e-8fae-4c64-a76c-d02b2296ee9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:31:84:43:cf:a2:8d:00:e3:97:af:ad:10: 3c:12:24:d6:10:33:aa:90:99:6b:65:7d:74:88:5c: e0:98:30:1d:ca:d1:b9:3d:80:45:8f:ed:f6:13:a5: fe:af:bc:73:6b:44:6b:d8:99:3a:ea:dc:f3:6c:0e: 55:97:d9:0b:e1:d2:9b:41:d1:1d:92:dd:a7:a5:06: 50:70:3d:c1:58:9b:f4:5e:d0:f8:90:18:fb:6b:16: 16:26:d2:4b:77:c7:3a:59:1a:1b:78:32:3b:2c:26: 60:99:3a:e7:6c:d2:e2:41:35:8b:6c:b0:e0:ab:90: d9:e8:12:cd:ba:f4:32:67:64:07:b2:3a:1b:34:6c: e4:36:ae:01:e9:b8:85:a0:01:e3:50:71:39:bc:b2: fe:4a:67:83:f2:86:ec:1d:bb:e9:56:45:bd:5a:db: e2:c7:e5:09:57:47:c7:ed:a8:3f:7a:27:81:3a:21: 8d:06:b1:32:f1:cc:79:7d:07:fd:18:32:31:94:95: 38:42:d0:76:6a:53:dd:44:83:2b:9b:b5:b5:2c:4a: d2:d3:a4:ce:ee:de:a5:1d:a1:dc:ed:55:79:fe:82: ba:9c:a1:42:d1:be:d4:59:65:fc:79:9f:46:fb:59: 9e:25:a4:e0:68:4d:66:71:97:d4:b5:f7:51:c1:74: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:4A:3D:D0:A3:7C:C0:0D:5D:2D:90:8B:35:BA:C4:B6:57:DD:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/7a1721aa-faa9-366b-8a98-ce7f741692fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl X509v3 Authority Key Identifier: keyid:ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer sbgp-ipAddrBlock: critical IPv4: 23.135.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c8:5a:d8:1b:a6:2b:ce:3e:04:e5:ca:9d:6c:b9:36:a5:27: a9:15:a5:4f:78:4a:0e:d9:44:52:8f:84:af:23:07:fb:47:74: 45:46:10:23:7c:7c:42:7b:a9:ca:a8:0c:dc:86:50:b5:80:7a: dd:a9:c5:d4:89:97:46:40:46:8f:a1:5a:b8:df:2a:2f:24:13: e8:e1:be:dd:a4:cb:08:e2:da:f3:01:f0:66:f6:11:22:b4:10: d9:83:c0:12:74:a8:22:d2:40:70:13:c6:f1:cf:6f:c1:24:f7: 8d:41:54:66:4b:c8:9d:61:45:a6:b9:01:1f:48:00:82:15:b8: 0a:03:d4:58:31:71:f0:c3:6f:31:f0:6b:4d:e0:55:44:56:55: 63:9d:f1:32:7d:5b:30:85:4d:0c:a5:97:fc:22:c3:1e:de:63: 27:8b:b9:61:6f:9d:c2:70:f3:d7:1a:08:a1:ca:cf:9f:85:ec: d5:13:a1:1c:0a:a3:38:74:05:26:46:02:9b:9f:9b:e5:81:47: 19:53:bf:4c:0a:9d:92:fa:d0:6b:a1:c5:dc:25:cb:b3:e7:d1: cf:86:8c:e3:99:c9:10:1e:e6:44:ce:6a:82:86:d2:99:fe:62: b0:2b:58:7d:07:d8:9f:83:07:34:85:08:20:3c:ef:c1:12:fe: a5:55:92:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfM7VHXgrc0cMqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgwYWZlZDgtNjMwYy00NDQ2LWE5NzItZjc1NTRhYjhl Y2UwMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWQ3YmU1MGUtOGZhZS00YzY0LWE3NmMtZDAyYjIyOTZlZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SIxhEPPoo0A45evrRA8EiTWEDOqkJlrZX10 iFzgmDAdytG5PYBFj+32E6X+r7xza0Rr2Jk66tzzbA5Vl9kL4dKbQdEdkt2npQZQ cD3BWJv0XtD4kBj7axYWJtJLd8c6WRobeDI7LCZgmTrnbNLiQTWLbLDgq5DZ6BLN uvQyZ2QHsjobNGzkNq4B6biFoAHjUHE5vLL+SmeD8obsHbvpVkW9Wtvix+UJV0fH 7ag/eieBOiGNBrEy8cx5fQf9GDIxlJU4QtB2alPdRIMrm7W1LErS06TO7t6lHaHc 7VV5/oK6nKFC0b7UWWX8eZ9G+1meJaTgaE1mcZfUtfdRwXS47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa9Sj3Qo3zADV0tkIs1usS2V92fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mODBh ZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1NGFiOGVjZTAvN2ExNzIxYWEtZmFhOS0z NjZiLThhOTgtY2U3Zjc0MTY5MmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjgwYWZlZDgtNjMwYy00NDQ2LWE5 NzItZjc1NTRhYjhlY2UwL2Y4MGFmZWQ4LTYzMGMtNDQ0Ni1hOTcyLWY3NTU0YWI4 ZWNlMC5jcmwwHwYDVR0jBBgwFoAU7UZrNw5ek+WB+dDasXYLu4kuTycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mODBhZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1 NGFiOGVjZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3IWtgbpivOPgTlyp1suTalJ6kVpU94Sg7ZRFKPhK8jB/tHdEVGECN8 fEJ7qcqoDNyGULWAet2pxdSJl0ZARo+hWrjfKi8kE+jhvt2kywji2vMB8Gb2ESK0 ENmDwBJ0qCLSQHATxvHPb8Ek941BVGZLyJ1hRaa5AR9IAIIVuAoD1FgxcfDDbzHw a03gVURWVWOd8TJ9WzCFTQyll/wiwx7eYyeLuWFvncJw89caCKHKz5+F7NUToRwK ozh0BSZGApufm+WBRxlTv0wKnZL60Guhxdwly7Pn0c+GjOOZyRAe5kTOaoKG0pn+ YrArWH0H2J+DBzSFCCA878ES/qVVkuI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:46:02 2025 by rpki-client