$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa File: 97809f3e-1adc-322e-a56f-ba22f7c77564.roa (raw, json) Hash identifier: 2zVot4bR5oIe1L4ZXONElgdpkOu1qhZd+Z/V6bdm3aM= Subject key identifier: B5:60:F8:1F:9A:54:A2:08:6E:DA:F6:BE:41:A6:E5:0A:A0:26:D7:70 Certificate issuer: /CN=e2e521d7-dbfb-433c-b301-ee863aee12cd Certificate serial: 010D0C9F4328584B78574DFFC86FB87955162400 Authority key identifier: 5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 401835 IP address blocks: 23.164.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4d:ff:c8:6f:b8:79:55:16:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e521d7-dbfb-433c-b301-ee863aee12cd Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=d96fb6bf-cf7c-4b8a-b166-4858b147fa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:a1:f8:8b:aa:b4:1e:cf:c2:67:d0:05:4d: 70:e7:6f:8e:bd:2a:82:b2:71:0d:a8:b8:94:07:e2: 7e:5c:2e:62:9f:16:61:44:de:80:87:5d:45:79:32: 6d:60:be:05:a2:a1:ba:22:65:df:65:a1:de:75:2b: 21:ca:7b:e0:43:f2:cf:4b:4f:b3:eb:b7:de:26:d3: 1a:19:48:da:0e:f5:bc:da:a7:6c:4d:00:e8:bb:ca: 50:e4:7c:41:74:d5:d1:47:b9:0c:fd:4b:60:db:5e: 7f:09:32:86:94:6d:21:ea:95:59:8f:bb:a8:7c:a3: fe:12:33:27:fe:6f:2a:ce:91:06:0f:a4:8b:42:aa: b9:1c:cc:9e:58:64:28:69:75:3e:52:85:1e:9b:c4: 82:66:9f:60:01:fb:3d:d8:b3:89:f4:d1:9f:78:85: f1:a6:6c:23:8b:02:36:53:73:8c:6b:3e:ba:6b:41: 4c:55:ff:66:8a:0e:55:86:cc:3e:12:00:ac:8c:f2: 32:e8:7b:c3:1f:32:98:e3:96:ca:2f:52:f1:89:7e: ab:72:19:1f:09:7e:9b:9b:b2:c0:80:21:4e:a2:1e: 13:b9:bb:19:c0:51:16:70:77:98:bb:5e:66:8b:a7: ec:9d:a6:69:b3:68:fa:0d:8b:e5:d5:09:71:2f:93: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:F8:1F:9A:54:A2:08:6E:DA:F6:BE:41:A6:E5:0A:A0:26:D7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl X509v3 Authority Key Identifier: keyid:5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer sbgp-ipAddrBlock: critical IPv4: 23.164.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:71:ca:cb:a8:bb:ba:a8:24:eb:bf:cf:2f:5b:6d:53:2f:71: c3:e1:a1:ff:2a:02:f4:c6:be:7b:ea:37:9f:32:bf:46:9a:df: 08:9d:4e:71:de:7a:3f:ed:57:aa:1d:7e:3e:b6:3c:8b:a2:a6: b6:1b:be:c0:e3:ca:9c:c2:b6:94:10:40:bd:94:93:ba:15:d5: 7a:26:1d:fb:8a:26:75:35:7e:33:e1:f8:89:af:22:02:2f:13: d7:f3:40:9a:30:5c:2a:8a:b4:03:b5:56:e4:ee:73:e1:80:6d: 8b:72:06:79:af:44:df:c7:63:2c:c1:6e:59:88:7b:c2:b9:d5: 82:14:a5:04:f6:14:50:b3:39:29:d3:1c:0f:42:75:28:b6:37: 49:33:8f:f4:08:c1:7e:84:4f:cb:b9:e3:32:8b:43:40:e3:c0: 19:89:5b:98:97:9e:1b:92:a4:75:c1:c9:f9:f0:d6:7b:79:6d: 70:4e:f5:1a:15:47:9e:74:6f:5f:0f:13:76:4a:0f:dd:87:37: 96:70:c5:56:d1:ba:2f:7d:13:71:4e:9f:03:be:2d:70:36:44: e5:5f:ec:95:ae:10:e3:b6:f0:31:3e:8b:84:8a:37:39:b3:b0: 99:e6:db:98:be:89:8e:c4:ad:52:a3:2f:d7:9f:32:5e:f2:41: 55:7b:dd:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V03/yG+4eVUWJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTJlNTIxZDctZGJmYi00MzNjLWIzMDEtZWU4NjNhZWUx MmNkMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZDk2ZmI2YmYtY2Y3Yy00YjhhLWIxNjYtNDg1OGIxNDdmYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmh+IuqtB7PwmfQBU1w52+OvSqCsnENqLiU B+J+XC5inxZhRN6Ah11FeTJtYL4FoqG6ImXfZaHedSshynvgQ/LPS0+z67feJtMa GUjaDvW82qdsTQDou8pQ5HxBdNXRR7kM/Utg215/CTKGlG0h6pVZj7uofKP+EjMn /m8qzpEGD6SLQqq5HMyeWGQoaXU+UoUem8SCZp9gAfs92LOJ9NGfeIXxpmwjiwI2 U3OMaz66a0FMVf9mig5Vhsw+EgCsjPIy6HvDHzKY45bKL1LxiX6rchkfCX6bm7LA gCFOoh4TubsZwFEWcHeYu15mi6fsnaZps2j6DYvl1QlxL5PMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVg+B+aVKIIbtr2vkGm5QqgJtdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1 MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2M2FlZTEyY2QvOTc4MDlmM2UtMWFkYy0z MjJlLWE1NmYtYmEyMmY3Yzc3NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTJlNTIxZDctZGJmYi00MzNjLWIz MDEtZWU4NjNhZWUxMmNkL2UyZTUyMWQ3LWRiZmItNDMzYy1iMzAxLWVlODYzYWVl MTJjZC5jcmwwHwYDVR0jBBgwFoAUX7q1UzOd3OYwGvOceVq7vKjrCxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2 M2FlZTEyY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1xysuou7qoJOu/zy9bbVMvccPhof8qAvTGvnvqN58yv0aa3widTnHe ej/tV6odfj62PIuiprYbvsDjypzCtpQQQL2Uk7oV1XomHfuKJnU1fjPh+ImvIgIv E9fzQJowXCqKtAO1VuTuc+GAbYtyBnmvRN/HYyzBblmIe8K51YIUpQT2FFCzOSnT HA9CdSi2N0kzj/QIwX6ET8u54zKLQ0DjwBmJW5iXnhuSpHXByfnw1nt5bXBO9RoV R550b18PE3ZKD92HN5ZwxVbRui99E3FOnwO+LXA2ROVf7JWuEOO28DE+i4SKNzmz sJnm25i+iY7ErVKjL9efMl7yQVV73Xg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:36 2025 by rpki-client