$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa File: 86edd263-fed6-3415-a24f-5e67b707402e.roa (raw, json) Hash identifier: EppAEwQa4g95SZHxdw0qWzD10JpJhHJ9deqSxCeU3L4= Subject key identifier: 16:2F:17:E8:96:86:9D:75:A3:62:C0:B9:DC:1E:39:45:4C:AD:06:D8 Certificate issuer: /CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Certificate serial: 010D0C9F4328584B6E9202D1D37CABB6802D0500 Authority key identifier: 08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 979 IP address blocks: 23.142.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:92:02:d1:d3:7c:ab:b6:80:2d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=7a48b3f0-1986-465b-9f78-d0c6da978192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:fc:c2:43:d0:fe:45:08:94:d0:ff:26:b9: 21:13:9f:c5:a5:84:95:ee:12:0d:48:dc:a1:3a:8c: b8:fc:18:b5:b6:66:78:01:f7:1e:ec:72:7e:4c:01: b4:8b:bc:94:79:7b:d1:3a:85:00:71:c8:e7:be:68: ba:20:f5:f6:a3:50:6b:aa:29:4c:88:77:ee:25:c6: bd:34:a1:43:a2:8f:90:ba:cf:e1:34:f5:6d:69:92: e2:ae:9a:68:9e:0b:63:14:63:68:94:7a:04:dd:7f: c7:14:3f:db:3f:49:ff:4d:37:a7:17:17:2b:c0:1e: 7f:64:9c:2d:34:05:a1:ff:cb:9f:4e:1d:f2:ed:f4: 67:87:9c:4b:93:30:55:67:23:2e:2c:63:b9:61:f9: 4e:0f:f3:97:10:df:a3:da:3c:9c:12:5a:7a:e0:88: f9:4d:a5:0c:e4:2e:cd:0c:0a:2d:23:1c:e2:c2:48: 29:4b:66:ec:99:76:6d:8a:0d:be:4d:fb:26:40:bc: fe:36:43:82:76:84:95:db:bb:0b:e7:5f:0f:bc:0f: 0d:c7:d2:3c:0a:98:db:7c:75:75:33:d8:3e:a6:86: 30:d0:36:b8:96:73:8e:1d:d3:64:76:ec:17:b4:c6: 48:47:10:9e:ca:88:15:13:af:82:55:a0:b6:aa:b2: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:17:E8:96:86:9D:75:A3:62:C0:B9:DC:1E:39:45:4C:AD:06:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl X509v3 Authority Key Identifier: keyid:08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a8:28:13:59:b0:22:e4:8e:86:5b:e0:db:62:dc:ec:6b:6d: 16:45:4d:ef:39:3e:89:e3:d7:fc:b6:7e:f7:0d:e6:ef:80:80: 5a:ae:54:37:18:ff:07:cb:ce:98:da:37:a1:d8:c7:7b:e5:b1: 40:e3:40:a5:6d:c2:3e:69:b0:03:c7:2f:5c:f3:0f:65:27:79: 62:57:ef:fe:fd:66:bc:e7:ca:c6:20:a9:50:78:7d:9b:7c:28: ba:83:0f:c8:7a:ff:7d:67:fe:f7:d8:fa:6a:42:20:aa:fa:69: b7:0d:68:19:1c:cb:fb:00:77:85:b4:12:03:df:cb:24:67:44: 29:0a:41:fd:57:9b:7b:1c:08:3c:ae:09:1f:54:1e:ac:b5:c1: ce:5d:e8:d1:73:ee:58:f0:3e:8b:6d:b3:05:4a:33:01:93:8f: 17:5e:1b:80:9c:8b:aa:d2:8f:28:58:ea:6e:6d:20:34:67:8a: 65:57:a0:37:92:dd:dc:55:14:9c:68:69:9b:08:72:40:f1:5e: af:80:ca:bf:4e:02:b1:28:e1:5e:cf:43:53:76:2b:9d:55:a3: c5:a2:7b:a1:e0:29:8b:e8:1b:f5:b3:eb:63:5b:63:af:94:83: 34:28:08:14:d0:42:11:3a:dd:72:71:e1:5a:64:9d:74:da:6d: 0b:eb:e4:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukgLR03yrtoAtBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExZTkzZTYtZmYwNS00Y2I1LWFkNTItMzRjYWEwODdi N2IzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2E0OGIzZjAtMTk4Ni00NjViLTlmNzgtZDBjNmRhOTc4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc/8wkPQ/kUIlND/JrkhE5/FpYSV7hINSNyh Ooy4/Bi1tmZ4Afce7HJ+TAG0i7yUeXvROoUAccjnvmi6IPX2o1BrqilMiHfuJca9 NKFDoo+Qus/hNPVtaZLirppongtjFGNolHoE3X/HFD/bP0n/TTenFxcrwB5/ZJwt NAWh/8ufTh3y7fRnh5xLkzBVZyMuLGO5YflOD/OXEN+j2jycElp64Ij5TaUM5C7N DAotIxziwkgpS2bsmXZtig2+TfsmQLz+NkOCdoSV27sL518PvA8Nx9I8CpjbfHV1 M9g+poYw0Da4lnOOHdNkduwXtMZIRxCeyogVE6+CVaC2qrIGEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYvF+iWhp11o2LAudweOUVMrQbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFl OTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNhYTA4N2I3YjMvODZlZGQyNjMtZmVkNi0z NDE1LWEyNGYtNWU2N2I3MDc0MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTExZTkzZTYtZmYwNS00Y2I1LWFk NTItMzRjYWEwODdiN2IzL2ExMWU5M2U2LWZmMDUtNGNiNS1hZDUyLTM0Y2FhMDg3 YjdiMy5jcmwwHwYDVR0jBBgwFoAUCAnJPARwTxWWRe4vXUVbYhQsFY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFlOTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNh YTA4N2I3YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuoKBNZsCLkjoZb4Nti3OxrbRZFTe85Ponj1/y2fvcN5u+AgFquVDcY /wfLzpjaN6HYx3vlsUDjQKVtwj5psAPHL1zzD2UneWJX7/79ZrznysYgqVB4fZt8 KLqDD8h6/31n/vfY+mpCIKr6abcNaBkcy/sAd4W0EgPfyyRnRCkKQf1Xm3scCDyu CR9UHqy1wc5d6NFz7ljwPottswVKMwGTjxdeG4Cci6rSjyhY6m5tIDRnimVXoDeS 3dxVFJxoaZsIckDxXq+Ayr9OArEo4V7PQ1N2K51Vo8Wie6HgKYvoG/Wz62NbY6+U gzQoCBTQQhE63XJx4VpknXTabQvr5AQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:50 2025 by rpki-client