$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/9fe2122c-93e5-3906-9b89-c68c27d52e21.roa File: 9fe2122c-93e5-3906-9b89-c68c27d52e21.roa (raw, json) Hash identifier: mTPEEN6+FaulRMbLL6vKyAM/MfRM8eXaqw8CGxQn7UQ= Subject key identifier: 0F:73:81:DF:DE:73:76:80:80:D1:39:80:B0:C1:E3:7F:20:DC:3F:1E Certificate issuer: /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Certificate serial: 010D0C9F4328584B2E5C4CA5402CC3CF5A1EED00 Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/9fe2122c-93e5-3906-9b89-c68c27d52e21.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 16276 IP address blocks: 23.156.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4c:a5:40:2c:c3:cf:5a:1e:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=29c68e3a-2998-4f4b-8f41-86c0c62303bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:6d:02:ab:6c:3b:e4:3a:68:9b:0c:06:0b: ba:c6:30:fb:f1:87:15:f6:16:5e:0e:0d:05:4e:b2: 72:10:6d:6e:d0:63:be:16:e1:52:1a:51:f0:ce:25: 06:11:d7:d3:1c:f5:85:88:9a:d8:85:1f:0c:05:27: e3:5c:0c:e1:4b:2b:b9:e3:85:b0:56:a7:f1:0d:5f: 89:b2:4d:a4:4b:62:81:ff:ff:63:20:26:d4:da:da: f2:36:45:c5:3e:67:0d:a6:bd:dc:8d:a7:e9:1f:7e: 92:e6:5d:5b:43:f5:41:49:1e:a8:f8:f8:65:0c:02: 14:73:56:1a:3a:62:43:86:dc:8a:dd:cc:84:74:cf: d7:75:72:10:b9:df:4a:5d:d6:1c:80:a6:b9:a2:c9: 09:0e:18:da:cf:ea:d2:4d:cf:c9:60:8a:bf:56:af: 9c:92:c2:98:6a:6d:cd:1a:32:1f:8d:9e:ff:7e:44: 78:d8:f5:a9:a3:33:7d:29:55:4e:8f:49:c8:15:90: 81:d0:ab:14:53:f5:a1:34:d3:d0:bd:20:4f:1b:b8: d0:c3:a0:be:8a:35:55:4e:f9:83:e5:29:e4:da:76: 44:19:bf:4d:4a:63:4c:1d:a4:e9:80:05:31:b2:84: ad:05:97:c7:09:4c:68:83:28:8c:7e:fb:4a:98:dc: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:73:81:DF:DE:73:76:80:80:D1:39:80:B0:C1:E3:7F:20:DC:3F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/9fe2122c-93e5-3906-9b89-c68c27d52e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl X509v3 Authority Key Identifier: keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ad:16:8d:d0:7a:7f:0d:66:e7:10:ce:2c:ba:2d:b2:44:d9: da:53:6d:55:6b:31:6e:9e:4b:de:87:18:a6:a0:e4:5e:4f:81: ae:ff:41:62:8c:29:c7:7e:72:4f:fc:59:8c:f3:26:55:0e:77: 92:c6:a0:16:75:bc:3f:b8:7b:ac:ee:a4:a2:19:72:17:60:bb: 87:00:25:73:f2:a2:7a:91:a7:93:5e:3d:0d:bf:bf:ea:ca:cf: 49:d6:92:19:49:34:e1:ed:64:ec:22:2f:c5:0f:23:6c:3d:0e: 74:2d:f3:99:21:c2:49:50:f3:0d:57:f9:4b:64:80:73:39:16: e9:c8:e0:18:56:88:5a:e5:1f:fa:04:59:67:6e:74:98:ad:78: 91:49:9b:a1:53:7e:d2:fa:ba:61:19:37:26:5e:38:e6:4b:2f: 64:57:f2:dd:30:7d:3e:17:e1:31:ea:9b:a8:a2:ca:cc:e6:56: 50:85:c1:c3:8e:86:94:c2:0f:59:6f:06:b5:24:14:68:25:48: d7:be:91:39:f8:cc:10:8e:a7:8f:5b:9e:57:1d:2d:17:e5:82: 80:42:dd:23:87:ba:65:a2:2a:7c:a4:83:72:bc:32:92:ad:e2: 8c:47:cd:41:56:f2:d6:f6:43:e5:8b:c3:3a:3c:46:87:45:dc: 1c:7c:bc:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEylQCzDz1oe7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlNDc4ODEtNWM2NC00ZmMwLWJmMDMtNWEzOWQwODI3 YmMzMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk MjljNjhlM2EtMjk5OC00ZjRiLThmNDEtODZjMGM2MjMwM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tptAqtsO+Q6aJsMBgu6xjD78YcV9hZeDg0F TrJyEG1u0GO+FuFSGlHwziUGEdfTHPWFiJrYhR8MBSfjXAzhSyu544WwVqfxDV+J sk2kS2KB//9jICbU2tryNkXFPmcNpr3cjafpH36S5l1bQ/VBSR6o+PhlDAIUc1Ya OmJDhtyK3cyEdM/XdXIQud9KXdYcgKa5oskJDhjaz+rSTc/JYIq/Vq+cksKYam3N GjIfjZ7/fkR42PWpozN9KVVOj0nIFZCB0KsUU/WhNNPQvSBPG7jQw6C+ijVVTvmD 5Snk2nZEGb9NSmNMHaTpgAUxsoStBZfHCUxogyiMfvtKmNw5fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9zgd/ec3aAgNE5gLDB438g3D8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0 Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5ZDA4MjdiYzMvOWZlMjEyMmMtOTNlNS0z OTA2LTliODktYzY4YzI3ZDUyZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDhlNDc4ODEtNWM2NC00ZmMwLWJm MDMtNWEzOWQwODI3YmMzLzQ4ZTQ3ODgxLTVjNjQtNGZjMC1iZjAzLTVhMzlkMDgy N2JjMy5jcmwwHwYDVR0jBBgwFoAUWOJ2ljppqKVnq6q+5Yl0Q4TG80YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5 ZDA4MjdiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+tFo3Qen8NZucQziy6LbJE2dpTbVVrMW6eS96HGKag5F5Pga7/QWKM Kcd+ck/8WYzzJlUOd5LGoBZ1vD+4e6zupKIZchdgu4cAJXPyonqRp5NePQ2/v+rK z0nWkhlJNOHtZOwiL8UPI2w9DnQt85khwklQ8w1X+UtkgHM5FunI4BhWiFrlH/oE WWdudJiteJFJm6FTftL6umEZNyZeOOZLL2RX8t0wfT4X4THqm6iiyszmVlCFwcOO hpTCD1lvBrUkFGglSNe+kTn4zBCOp49bnlcdLRflgoBC3SOHumWiKnykg3K8MpKt 4oxHzUFW8tb2Q+WLwzo8RodF3Bx8vI0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:15:52 2025 by rpki-client