$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa File: 15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa (raw, json) Hash identifier: Xwj8mVksp3gfSCEusPftPPrg4LqDpSwp7iPXjOrm0G0= Subject key identifier: D0:B6:01:86:D0:0B:E7:FA:CC:80:9B:DE:D5:E4:EB:58:86:7E:61:B5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B92DCF815ED2269DA2C549500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 26959 IP address blocks: 8.44.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f8:15:ed:22:69:da:2c:54:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=133299da-107b-4848-8f05-a7a3d39e6417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:69:99:fd:a1:b0:2e:46:ca:a1:79:af:e1: 99:dd:ff:55:2e:29:46:a5:74:20:eb:0a:fb:2b:13: 0f:6d:a2:e4:d7:04:7e:2b:46:3b:ac:e8:e5:ed:6b: 1e:5b:c0:a9:df:f1:ed:af:24:84:28:3e:7e:e0:bc: 28:20:34:21:1a:41:3c:d8:c5:33:4d:84:27:1a:41: 91:66:73:5c:0c:99:fd:87:7d:76:4d:54:29:66:aa: 7b:b8:fa:a4:b3:6d:72:c3:6f:26:a7:04:12:15:ed: 60:98:7c:48:27:52:e7:ec:c4:93:7d:c1:89:15:af: 86:af:3a:a9:ed:f2:50:1b:2c:8a:b2:bf:58:ad:36: ba:bd:65:a2:2a:94:79:b2:0f:51:5e:5c:5c:e8:a3: d0:5b:5d:ae:7c:b0:1e:b8:00:11:29:25:26:18:2b: df:d7:db:d2:be:37:24:e3:6d:ed:c2:c8:d6:cd:df: 22:a8:b6:84:74:65:42:c9:3b:a5:21:c5:40:21:11: 11:81:92:48:f3:42:4e:98:06:bf:e4:f2:98:19:50: 5a:b5:e4:00:9c:a4:3a:63:b0:0f:7a:6f:a0:9d:51: 4f:fe:62:18:67:4f:3a:08:60:29:99:ae:2c:84:24: 4b:16:c5:fc:8d:6b:c0:ff:20:10:8f:dd:b9:ba:3d: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:01:86:D0:0B:E7:FA:CC:80:9B:DE:D5:E4:EB:58:86:7E:61:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.44.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:4a:cb:1c:67:e0:0a:9e:90:6b:e3:35:be:16:21:ee:ce:f8: cf:98:f8:0c:34:24:25:25:b0:2a:71:61:fd:a2:92:21:45:73: e6:35:25:73:5f:04:f4:52:cf:96:23:ee:40:d4:04:fe:bc:f7: 75:3a:44:bb:95:68:fb:2b:36:04:0d:75:48:38:42:37:d3:3d: 9c:96:cc:f0:3c:7f:29:41:3d:75:61:3d:25:26:b8:2c:c7:3c: b8:0b:46:71:d6:46:c7:2d:05:fc:7e:ba:07:20:ca:61:30:7e: b7:35:11:fb:b6:52:3b:d2:c2:16:8c:bf:78:c2:b6:e5:39:89: 77:a6:71:be:4a:0b:93:48:df:a3:0c:91:2f:54:a2:b2:04:25: 62:33:9d:5a:e5:8a:f0:d7:e9:b7:b9:31:75:bd:31:47:1a:b6: 5c:fb:6e:05:92:8f:b7:84:38:3d:02:ca:b0:05:91:d8:3f:80: 75:c5:5e:a8:05:2e:2e:75:3b:b9:d1:5e:30:bb:c2:f9:08:58: a0:9a:00:aa:25:ce:2c:4c:50:9b:2b:14:0a:d4:45:d1:a5:90: c0:9d:b9:45:7e:73:37:08:6f:1d:aa:6b:ef:60:ce:f4:06:33: bc:67:99:af:5e:c4:e9:71:3f:d6:a0:94:7d:75:f1:56:8b:0d: e2:06:37:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PgV7SJp2ixUlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MTMzMjk5ZGEtMTA3Yi00ODQ4LThmMDUtYTdhM2QzOWU2NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2dpmf2hsC5GyqF5r+GZ3f9VLilGpXQg6wr7 KxMPbaLk1wR+K0Y7rOjl7WseW8Cp3/HtrySEKD5+4LwoIDQhGkE82MUzTYQnGkGR ZnNcDJn9h312TVQpZqp7uPqks21yw28mpwQSFe1gmHxIJ1Ln7MSTfcGJFa+Grzqp 7fJQGyyKsr9YrTa6vWWiKpR5sg9RXlxc6KPQW12ufLAeuAARKSUmGCvf19vSvjck 423twsjWzd8iqLaEdGVCyTulIcVAIRERgZJI80JOmAa/5PKYGVBateQAnKQ6Y7AP em+gnVFP/mIYZ086CGApma4shCRLFsX8jWvA/yAQj925uj3EpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC2AYbQC+f6zICb3tXk61iGfmG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMTU4NThjNzUtODNmNy0z ODk4LThhZWUtNjRiOWY2YjVhMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtKyxxn4AqekGvjNb4WIe7O+M+Y+Aw0JCUlsCpxYf2ikiFFc+Y1JXNf BPRSz5Yj7kDUBP6893U6RLuVaPsrNgQNdUg4QjfTPZyWzPA8fylBPXVhPSUmuCzH PLgLRnHWRsctBfx+ugcgymEwfrc1Efu2UjvSwhaMv3jCtuU5iXemcb5KC5NI36MM kS9UorIEJWIznVrlivDX6be5MXW9MUcatlz7bgWSj7eEOD0CyrAFkdg/gHXFXqgF Li51O7nRXjC7wvkIWKCaAKolzixMUJsrFArURdGlkMCduUV+czcIbx2qa+9gzvQG M7xnma9exOlxP9aglH118VaLDeIGN0E= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:05 2025 by rpki-client