$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa File: df871159-6ea6-31a7-9d8c-875a3108e463.roa (raw, json) Hash identifier: sctFwo3BJ1kqBncvr20r5vVXaFZsOcsnp5SIa+RuDf0= Subject key identifier: 49:A7:49:7F:41:D6:07:1D:64:23:95:B6:81:3B:54:68:F9:BC:AC:CA Certificate issuer: /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Certificate serial: 010D0C9F4328584B4081AB6A4D803807BEA4D6B0 Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 25942 IP address blocks: 23.156.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ab:6a:4d:80:38:07:be:a4:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=f214deb0-e10d-4c74-beb3-21ba0c4df19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:bb:b7:c5:ee:d6:4e:7a:f8:db:89:3a:a0: 97:c8:59:fa:dd:66:95:31:d4:17:8a:f0:18:84:6c: 5b:54:b2:d5:48:1f:c0:45:62:a3:f7:a2:af:ef:be: 02:a4:75:10:59:8d:9b:3c:43:bd:14:3c:d1:5b:02: 0e:07:de:29:9e:6f:20:11:73:e4:64:36:7f:5c:97: cd:b0:3c:e4:46:b9:59:0d:1a:4f:40:35:b6:b6:06: 0d:87:0a:b4:ac:ee:41:75:ab:c0:f8:ae:3c:19:cd: 75:f6:3b:ae:a5:f7:68:b7:e6:9c:1c:29:b2:e5:4e: 96:53:00:41:33:42:4b:7a:6c:8a:04:81:ad:e0:47: b0:d1:f0:71:36:65:07:5f:ba:dd:b2:6e:36:74:14: 68:63:af:08:c5:69:67:64:05:5b:90:53:7a:24:a6: e7:ff:4d:d9:f3:f1:5b:93:fb:2d:39:24:a4:99:ad: 53:fe:ed:43:ed:7e:8b:49:df:45:53:69:b9:32:e2: 67:e2:24:64:b9:e8:bb:07:70:38:20:6c:c4:64:6a: 47:94:d4:5a:c0:d0:b4:cf:0d:44:af:45:47:1d:6b: a4:9c:c8:f2:7e:2d:38:f6:22:99:28:5c:c9:0a:b2: 2d:fc:63:78:6d:3d:a1:5c:c7:49:28:de:f4:88:28: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A7:49:7F:41:D6:07:1D:64:23:95:B6:81:3B:54:68:F9:BC:AC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl X509v3 Authority Key Identifier: keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer sbgp-ipAddrBlock: critical IPv4: 23.156.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:63:37:d0:9d:ad:55:20:f7:50:aa:dc:5c:e3:e0:03:46:5d: 1e:ba:7f:04:69:4d:c8:cd:35:96:7e:53:8c:71:53:af:de:8c: 53:d1:3e:13:de:a7:25:13:ce:0b:f8:75:61:98:4c:f7:cd:c1: 39:f2:e6:44:24:e6:e1:db:37:2a:bf:d4:35:33:d3:df:55:63: 95:7d:74:95:35:88:33:46:3f:fb:93:d8:99:bb:99:5c:be:f8: d4:8a:fa:ef:6e:e1:5b:d7:b9:6e:24:08:dc:3f:23:7d:b9:a1: 9f:25:d6:9f:8d:c3:78:be:73:2e:89:3a:ad:8d:f4:65:4a:3a: a8:54:d6:ea:fa:87:0e:a4:5b:35:c8:11:19:be:95:8e:fc:45: ce:35:36:67:70:b6:a5:e6:af:00:fc:5e:64:b3:98:28:4b:03: d8:d9:53:81:1c:f1:6b:c0:42:ef:57:39:75:0d:fb:e5:48:bf: 10:1a:02:a9:95:b8:54:e5:9c:e6:81:4e:7d:bc:db:a6:69:a1: 46:4a:3b:8b:c0:ca:28:ad:d2:56:f0:6b:de:ea:2e:3d:fd:39: fa:59:39:21:3f:3c:47:56:06:d6:2f:90:d4:7f:3c:f8:a6:d5: 42:65:3b:2e:79:fb:47:5b:92:6f:46:ba:d8:1d:9b:fc:d4:f1: 08:6b:dd:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgatqTYA4B76k1rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcyNTc2NmQtNWQ0Mi00ZmExLWEyNTMtODBiZDg4ZGFi YzhkMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjIxNGRlYjAtZTEwZC00Yzc0LWJlYjMtMjFiYTBjNGRmMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM67t8Xu1k56+NuJOqCXyFn63WaVMdQXivAY hGxbVLLVSB/ARWKj96Kv774CpHUQWY2bPEO9FDzRWwIOB94pnm8gEXPkZDZ/XJfN sDzkRrlZDRpPQDW2tgYNhwq0rO5BdavA+K48Gc119juupfdot+acHCmy5U6WUwBB M0JLemyKBIGt4Eew0fBxNmUHX7rdsm42dBRoY68IxWlnZAVbkFN6JKbn/03Z8/Fb k/stOSSkma1T/u1D7X6LSd9FU2m5MuJn4iRkuei7B3A4IGzEZGpHlNRawNC0zw1E r0VHHWuknMjyfi049iKZKFzJCrIt/GN4bT2hXMdJKN70iChiSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmnSX9B1gcdZCOVtoE7VGj5vKzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1 NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhkYWJjOGQvZGY4NzExNTktNmVhNi0z MWE3LTlkOGMtODc1YTMxMDhlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcyNTc2NmQtNWQ0Mi00ZmExLWEy NTMtODBiZDg4ZGFiYzhkLzk3MjU3NjZkLTVkNDItNGZhMS1hMjUzLTgwYmQ4OGRh YmM4ZC5jcmwwHwYDVR0jBBgwFoAU4V2JhHBvD8fCC3IWTsDbmgxg5RUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJk ODhkYWJjOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKljN9CdrVUg91Cq3Fzj4ANGXR66fwRpTcjNNZZ+U4xxU6/ejFPRPhPe pyUTzgv4dWGYTPfNwTny5kQk5uHbNyq/1DUz099VY5V9dJU1iDNGP/uT2Jm7mVy+ +NSK+u9u4VvXuW4kCNw/I325oZ8l1p+Nw3i+cy6JOq2N9GVKOqhU1ur6hw6kWzXI ERm+lY78Rc41NmdwtqXmrwD8XmSzmChLA9jZU4Ec8WvAQu9XOXUN++VIvxAaAqmV uFTlnOaBTn2826ZpoUZKO4vAyiit0lbwa97qLj39OfpZOSE/PEdWBtYvkNR/PPim 1UJlOy55+0dbkm9Gutgdm/zU8Qhr3ac= -----END CERTIFICATE-----Generated at Tue Oct 21 00:47:50 2025 by rpki-client