$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25f70409-13cd-31d6-a2f4-ecebc2f6ed1c.roa File: 25f70409-13cd-31d6-a2f4-ecebc2f6ed1c.roa (raw, json) Hash identifier: WgKD5pCrUV5DF8DgxP+AAp0+R34GBizAPhihrGEhgUI= Subject key identifier: 6E:7A:A9:79:65:2B:F2:02:B2:7E:E8:C5:38:09:BC:D4:AE:74:6B:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7662E9D1191772E460000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25f70409-13cd-31d6-a2f4-ecebc2f6ed1c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7725 IP address blocks: 23.31.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:66:2e:9d:11:91:77:2e:46:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=823a7363-7569-4f94-ba66-9b40a2245b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:47:60:1a:aa:f8:89:78:7b:ea:18:3c:c5:b7: 2b:3d:9e:ce:15:5d:b4:b2:b7:b7:80:99:34:be:79: e3:6d:a9:e8:f5:d8:38:f5:80:f3:75:3c:3f:8a:e7: e8:1f:bb:01:86:b0:ff:2d:a5:c8:93:cc:a3:a8:34: 8d:63:94:b4:9f:e8:76:3b:9e:de:3f:ec:a0:e9:71: 4c:3f:53:74:76:ed:5d:8d:ff:65:a9:b8:5b:ba:dc: 2f:68:fe:d4:e5:b1:ac:55:fd:b1:31:ee:4f:f5:e9: 6f:12:fa:98:73:fe:82:7b:15:0a:a0:93:44:80:33: 0a:8c:f4:6b:d4:10:25:27:a3:a7:8a:a7:e9:75:51: a7:6a:04:a3:7a:ef:96:e7:92:56:70:8d:fc:83:64: 95:0c:30:c2:28:f1:72:e5:5f:9d:e9:7a:6f:9a:39: 7b:5c:9a:24:0a:b7:26:ec:40:5b:cd:bc:b3:8c:1e: a1:5b:57:4c:91:e4:29:2b:71:ed:4d:55:29:2c:b4: f3:a4:23:5a:a3:bd:25:79:ea:d3:80:e0:fc:05:4c: 22:71:bf:b3:0c:0b:85:f1:71:32:85:b4:d7:c7:65: 9b:35:76:37:a1:1c:6f:1d:ba:f9:c8:ca:a3:65:0b: 81:dc:b9:42:3b:75:6a:22:b1:1f:f2:e7:ab:c3:f7: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:A9:79:65:2B:F2:02:B2:7E:E8:C5:38:09:BC:D4:AE:74:6B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25f70409-13cd-31d6-a2f4-ecebc2f6ed1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 23.31.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:9b:32:ce:07:fa:cd:7f:19:47:e8:6d:86:c0:53:d3:92:57: 42:9f:fa:70:16:80:1a:9a:ae:96:5b:0d:5f:77:e2:6b:c3:dc: c9:91:e3:e3:e2:2b:3b:3c:73:63:ea:90:1e:63:6f:d5:2e:27: 04:df:f1:e7:4e:b4:18:99:8e:95:22:39:36:94:18:98:9b:38: f2:a6:8c:06:3c:74:b8:e7:33:81:65:4e:a5:c1:04:d5:35:20: e0:f3:a7:c8:7e:73:b6:cc:43:9e:42:e8:70:e1:be:54:f4:bf: 9d:b3:20:e7:70:e3:28:ce:88:57:91:d8:18:95:dc:44:e9:de: 34:e0:b5:2d:7c:a9:3a:95:89:d3:dc:ed:53:4f:8c:87:6a:ee: cb:63:cc:ef:f0:4a:04:2c:f6:c5:f7:ae:0c:02:8c:2f:4a:a1: d6:a6:c9:50:5a:f1:9a:11:78:ae:5d:23:f9:f7:14:8a:f1:98: 26:dc:3b:c5:42:2c:b9:c2:c9:28:34:a8:e5:d5:1a:6a:fa:30: ab:bc:f7:df:e8:a3:1d:40:f6:3e:c4:f9:6e:30:39:3c:64:03: 9e:2e:9e:38:59:ee:e5:92:56:de:b9:32:a1:5d:70:18:8c:66: 3e:f1:72:cf:29:9b:b1:c0:a9:d0:0d:e4:36:77:22:d8:ed:92: 31:fe:40:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t2YunRGRdy5GAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODIzYTczNjMtNzU2OS00Zjk0LWJhNjYtOWI0MGEyMjQ1YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kdgGqr4iXh76hg8xbcrPZ7OFV20sre3gJk0 vnnjbano9dg49YDzdTw/iufoH7sBhrD/LaXIk8yjqDSNY5S0n+h2O57eP+yg6XFM P1N0du1djf9lqbhbutwvaP7U5bGsVf2xMe5P9elvEvqYc/6CexUKoJNEgDMKjPRr 1BAlJ6OniqfpdVGnagSjeu+W55JWcI38g2SVDDDCKPFy5V+d6Xpvmjl7XJokCrcm 7EBbzbyzjB6hW1dMkeQpK3HtTVUpLLTzpCNao70leerTgOD8BUwicb+zDAuF8XEy hbTXx2WbNXY3oRxvHbr5yMqjZQuB3LlCO3VqIrEf8uerw/d0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG56qXllK/ICsn7oxTgJvNSudGvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVmNzA0MDktMTNjZC0z MWQ2LWEyZjQtZWNlYmMyZjZlZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFx+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKebMs4H+s1/GUfobYbAU9OSV0Kf+nAWgBqarpZbDV934mvD3MmR4+Pi Kzs8c2PqkB5jb9UuJwTf8edOtBiZjpUiOTaUGJibOPKmjAY8dLjnM4FlTqXBBNU1 IODzp8h+c7bMQ55C6HDhvlT0v52zIOdw4yjOiFeR2BiV3ETp3jTgtS18qTqVidPc 7VNPjIdq7stjzO/wSgQs9sX3rgwCjC9KodamyVBa8ZoReK5dI/n3FIrxmCbcO8VC LLnCySg0qOXVGmr6MKu899/oox1A9j7E+W4wOTxkA54unjhZ7uWSVt65MqFdcBiM Zj7xcs8pm7HAqdAN5DZ3ItjtkjH+QKY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:41 2025 by rpki-client