$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa File: 455b85de-a208-333d-ad2f-1cacd114a2e0.roa (raw, json) Hash identifier: PRXlgATFkjRekVKKW8ZIBFBWfahXN2Z/5/fJjTsGoSQ= Subject key identifier: 02:AE:99:29:AB:5C:B5:42:CC:8F:0C:04:52:34:22:8C:1A:D4:77:C7 Certificate issuer: /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Certificate serial: 010D0C9F4328584AFEE6A57110C0FACF94A2A440 Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 21557 IP address blocks: 23.128.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a5:71:10:c0:fa:cf:94:a2:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=5452e0e0-7d85-4f58-bc0c-626f23b9dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:85:7f:07:c3:bf:bf:83:f0:1d:f0:0f:d8: 59:e7:c6:4b:f7:0c:c6:7e:02:8b:c8:98:7a:53:e9: a4:3a:6c:5f:4a:6c:ed:18:90:67:53:31:32:3a:e5: 40:82:45:b8:a1:51:6f:6a:94:5b:bd:5c:20:32:6b: 91:01:ed:ac:5d:6f:33:74:15:51:7e:56:ba:dd:38: b8:99:27:51:c4:44:48:ae:e7:ab:ea:e8:95:42:47: 62:7f:0b:16:7a:59:f7:95:2c:5b:84:1f:34:89:d7: 2b:14:5a:14:e9:ce:58:2c:96:90:40:40:c5:0d:12: 5f:8b:15:d2:26:3a:3e:79:37:b6:b3:8b:12:99:c2: c7:fc:65:24:39:4e:48:9c:67:ed:96:52:52:b2:db: 3b:22:b4:cc:d1:75:c0:28:c1:6d:f5:71:da:6a:05: 3f:31:19:50:cd:60:7e:58:c1:ca:ad:95:a4:bb:10: bc:66:5b:36:53:cb:8e:e5:7b:fc:29:7a:1a:29:e0: 21:9a:1f:27:a0:06:e5:6a:e9:83:9d:9e:b5:1b:53: 94:a9:ad:8b:22:e5:02:ce:9b:21:e2:dd:02:b0:ad: a2:52:48:03:3d:fc:7c:c4:3c:3c:7f:66:a7:e3:19: d6:57:3e:9a:a1:c0:67:5e:d5:65:24:f3:78:dc:5f: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:99:29:AB:5C:B5:42:CC:8F:0C:04:52:34:22:8C:1A:D4:77:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/455b85de-a208-333d-ad2f-1cacd114a2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl X509v3 Authority Key Identifier: keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer sbgp-ipAddrBlock: critical IPv4: 23.128.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6d:8b:88:2f:76:fc:e3:2e:cc:0f:ea:40:02:e1:05:4b:61: 90:1f:34:27:5b:2c:bf:66:f9:65:cc:2f:93:ee:7b:09:80:b0: be:3a:31:d2:e7:d6:ce:59:1a:96:e4:8f:a1:c9:8d:ae:92:fa: 9e:54:58:d7:d4:d2:a8:47:3f:31:ce:73:0e:a8:3f:65:3d:02: 4d:17:16:04:40:19:65:a6:f7:50:76:92:93:2c:6f:bb:ac:98: 1e:b3:94:dd:99:cf:91:11:f0:db:1f:15:94:f8:60:77:16:75: 1e:e1:75:26:94:40:cf:89:b3:eb:b3:80:33:d2:c9:ce:31:f7: df:fa:03:8a:27:e6:c6:da:07:d6:64:10:b2:7b:55:1e:89:fa: 10:25:89:d5:f1:52:48:31:e8:7e:6c:f4:b0:09:bd:3a:93:49: 54:9e:2b:ce:b1:a7:63:75:22:73:eb:39:9d:43:94:8c:3a:67: 37:21:af:c0:02:66:b3:e3:5f:a5:1b:b1:f9:27:a6:6b:09:b1: 5f:4b:82:74:a5:72:63:53:f8:b7:77:09:33:e5:d4:36:35:92: ca:80:9b:d7:3f:f2:dd:58:89:7a:74:df:4f:de:d7:d8:b9:3f: 58:32:c5:e7:5e:38:c3:48:cb:89:d5:4d:fd:9b:47:f3:77:13: 7e:18:64:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qVxEMD6z5SipEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkwZGM0NGItODViNi00MjQ3LWI1NzktZWI4Y2ZkOGU5 N2ZlMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NTQ1MmUwZTAtN2Q4NS00ZjU4LWJjMGMtNjI2ZjIzYjlkYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCFfwfDv7+D8B3wD9hZ58ZL9wzGfgKLyJh6 U+mkOmxfSmztGJBnUzEyOuVAgkW4oVFvapRbvVwgMmuRAe2sXW8zdBVRfla63Ti4 mSdRxERIruer6uiVQkdifwsWeln3lSxbhB80idcrFFoU6c5YLJaQQEDFDRJfixXS Jjo+eTe2s4sSmcLH/GUkOU5InGftllJSsts7IrTM0XXAKMFt9XHaagU/MRlQzWB+ WMHKrZWkuxC8Zls2U8uO5Xv8KXoaKeAhmh8noAblaumDnZ61G1OUqa2LIuUCzpsh 4t0CsK2iUkgDPfx8xDw8f2an4xnWVz6aocBnXtVlJPN43F+n7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKumSmrXLVCzI8MBFI0Iowa1HfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBk YzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhjZmQ4ZTk3ZmUvNDU1Yjg1ZGUtYTIwOC0z MzNkLWFkMmYtMWNhY2QxMTRhMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDkwZGM0NGItODViNi00MjQ3LWI1 NzktZWI4Y2ZkOGU5N2ZlL2Q5MGRjNDRiLTg1YjYtNDI0Ny1iNTc5LWViOGNmZDhl OTdmZS5jcmwwHwYDVR0jBBgwFoAUSeUkbiuQSDtea7R3FumUVA+zGEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kOTBkYzQ0Yi04NWI2LTQyNDctYjU3OS1lYjhj ZmQ4ZTk3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVti4gvdvzjLswP6kAC4QVLYZAfNCdbLL9m+WXML5PuewmAsL46MdLn 1s5ZGpbkj6HJja6S+p5UWNfU0qhHPzHOcw6oP2U9Ak0XFgRAGWWm91B2kpMsb7us mB6zlN2Zz5ER8NsfFZT4YHcWdR7hdSaUQM+Js+uzgDPSyc4x99/6A4on5sbaB9Zk ELJ7VR6J+hAlidXxUkgx6H5s9LAJvTqTSVSeK86xp2N1InPrOZ1DlIw6Zzchr8AC ZrPjX6UbsfknpmsJsV9LgnSlcmNT+Ld3CTPl1DY1ksqAm9c/8t1YiXp030/e19i5 P1gyxedeOMNIy4nVTf2bR/N3E34YZC8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:22 2025 by rpki-client