$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa File: 1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa (raw, json) Hash identifier: 7NzQb/flqEVrbPMwhfftq8Aev/aY3wsxXm4iCjQQSks= Subject key identifier: 78:03:80:80:5F:48:2D:D2:E7:11:67:B6:B1:80:A6:4C:17:A3:D0:E0 Certificate issuer: /CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Certificate serial: 010D0C9F4328584B66320056534E697600EAFF40 Authority key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 151338 IP address blocks: 23.142.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:00:56:53:4e:69:76:00:ea:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=b3f5882d-6bf0-4bcc-aa89-6df2b74cd6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:ae:bd:6e:8a:b3:00:b5:1d:a7:dd:a7:fd: cf:fd:fa:47:69:19:49:d4:01:43:ab:65:f4:f0:f0: cc:87:1a:a4:6c:08:bc:74:ef:f1:1e:38:4a:68:6f: 04:84:e9:57:9e:1f:12:22:2f:99:a6:c1:f5:a9:99: 76:de:51:76:fb:28:41:f5:5d:8d:c4:6b:2b:3a:fe: a7:ea:3b:b6:d8:83:9a:68:ca:be:8a:34:cb:13:1a: 21:b2:f3:8e:1b:28:46:e7:71:bc:45:5f:f9:74:75: 96:23:81:da:28:39:cb:d0:a0:72:dc:de:24:7f:a6: 46:f9:ba:56:b0:5e:f0:64:8f:d8:eb:48:7e:e0:8c: ae:de:8d:5d:65:cb:de:02:f0:aa:f3:75:22:7a:26: 20:18:c7:96:9c:37:46:da:4f:ae:9b:27:f7:ee:15: 6f:0c:f7:eb:da:21:ba:61:f2:2f:f6:6b:61:19:a2: 45:95:97:be:43:08:e3:9d:a2:ca:80:74:58:e7:6e: 9e:a6:20:99:96:e3:f1:a7:c1:30:0b:f6:b8:53:cd: dc:6f:51:11:f6:82:b8:de:38:36:0c:90:4b:ba:54: 50:2e:f2:16:29:b6:18:79:c8:22:62:d0:b1:8d:17: e4:07:f8:29:d6:98:19:ef:56:c1:ac:86:96:d3:f4: d1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:80:80:5F:48:2D:D2:E7:11:67:B6:B1:80:A6:4C:17:A3:D0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl X509v3 Authority Key Identifier: keyid:E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer sbgp-ipAddrBlock: critical IPv4: 23.142.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:01:42:1b:ca:c4:b4:95:0e:54:cd:ff:6e:39:ab:34:58:da: 70:73:87:eb:d9:d9:21:82:03:06:7b:14:2d:04:18:bb:fc:cc: b6:3f:ba:76:4d:e5:9a:97:76:56:5a:5e:68:05:6f:df:04:ac: eb:a0:1f:d6:b2:d1:83:9a:9c:5c:80:36:be:a7:98:45:4a:da: 02:d7:08:ad:fb:ee:d2:5c:1f:6f:f7:c7:eb:5b:63:6b:c8:4d: 9f:77:3d:5b:bb:99:f3:d4:88:2a:aa:5b:2d:64:76:8a:db:83: 38:8d:e0:94:97:56:1e:20:08:c9:35:7f:20:a8:f3:2f:79:7f: f4:14:63:76:ef:b6:22:43:87:f7:1e:c2:99:99:c6:0a:a9:8c: b4:31:f9:9d:fe:49:1b:d1:5d:13:9a:34:7e:5f:db:7e:a8:39: dd:19:27:42:54:14:63:67:93:54:ed:cb:70:da:90:d9:df:e3: e8:23:18:7d:42:a0:76:15:ce:06:1b:02:d6:b2:27:74:04:b3: 44:e8:0f:1c:de:9e:e0:ec:a5:71:45:e3:71:d8:6e:c9:46:ad: 6e:07:5b:c2:67:ee:b5:45:d0:dc:23:01:e1:bd:22:f8:74:c7: 7b:5a:ce:2f:d7:90:09:e9:33:b1:c3:08:05:11:d6:52:6d:c8: 9a:f9:2c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgBWU05pdgDq/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU4ODgwZjctNTZmYS00YzdjLWE3ZTctNmQxMTNlZGEz ODNkMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YjNmNTg4MmQtNmJmMC00YmNjLWFhODktNmRmMmI3NGNkNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrquvW6KswC1Hafdp/3P/fpHaRlJ1AFDq2X0 8PDMhxqkbAi8dO/xHjhKaG8EhOlXnh8SIi+ZpsH1qZl23lF2+yhB9V2NxGsrOv6n 6ju22IOaaMq+ijTLExohsvOOGyhG53G8RV/5dHWWI4HaKDnL0KBy3N4kf6ZG+bpW sF7wZI/Y60h+4Iyu3o1dZcveAvCq83UieiYgGMeWnDdG2k+umyf37hVvDPfr2iG6 YfIv9mthGaJFlZe+QwjjnaLKgHRY526epiCZluPxp8EwC/a4U83cb1ER9oK43jg2 DJBLulRQLvIWKbYYecgiYtCxjRfkB/gp1pgZ71bBrIaW0/TRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgDgIBfSC3S5xFntrGApkwXo9DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4 ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2VkYTM4M2QvMWY5MWY4ZjYtOWY0Ny0z Nzg5LTg5NjQtYTgyMWY1YTdkNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjU4ODgwZjctNTZmYS00YzdjLWE3 ZTctNmQxMTNlZGEzODNkLzI1ODg4MGY3LTU2ZmEtNGM3Yy1hN2U3LTZkMTEzZWRh MzgzZC5jcmwwHwYDVR0jBBgwFoAU4HeZDeDtMJxFcQwusHMU3fxVvoowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDEx M2VkYTM4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0BQhvKxLSVDlTN/245qzRY2nBzh+vZ2SGCAwZ7FC0EGLv8zLY/unZN 5ZqXdlZaXmgFb98ErOugH9ay0YOanFyANr6nmEVK2gLXCK377tJcH2/3x+tbY2vI TZ93PVu7mfPUiCqqWy1kdorbgziN4JSXVh4gCMk1fyCo8y95f/QUY3bvtiJDh/ce wpmZxgqpjLQx+Z3+SRvRXROaNH5f236oOd0ZJ0JUFGNnk1Tty3DakNnf4+gjGH1C oHYVzgYbAtayJ3QEs0ToDxzenuDspXFF43HYbslGrW4HW8Jn7rVF0NwjAeG9Ivh0 x3tazi/XkAnpM7HDCAUR1lJtyJr5LOM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:49:39 2025 by rpki-client