$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa File: ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa (raw, json) Hash identifier: LmywzrMZcFPfldr+17QPU8NgtHksv3obnb1Pmpzye2o= Subject key identifier: 09:1F:38:91:65:D5:08:40:30:A5:7A:E9:B4:30:5F:19:67:4F:04:38 Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584B56D72EA2203E6AE47B1E4880 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 397700 IP address blocks: 23.188.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2e:a2:20:3e:6a:e4:7b:1e:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=2cc43f99-bd02-4bad-b577-5a27e85827da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:06:21:61:38:fa:d4:75:3e:c7:f5:50:81: 7f:5a:89:4e:4c:07:75:b3:7a:c1:ef:54:4f:5a:ce: 54:6f:67:35:12:f3:20:83:08:c7:a8:68:2f:33:4a: 7a:7f:ad:0c:e0:af:82:fd:01:20:33:7f:df:7c:e5: e7:0c:12:47:da:4f:1b:b1:a9:a0:aa:40:d9:8b:89: 71:73:d6:33:f1:5e:b5:35:48:97:1a:52:e2:54:0d: a7:de:cd:35:f4:63:1a:ac:3a:f6:12:46:a3:b8:87: ef:19:f4:c4:e5:a7:38:17:0a:c5:cc:44:c6:ab:bd: 68:54:68:30:f5:a0:ad:f6:73:1e:b9:ec:09:a3:34: 26:35:ea:3e:1c:c2:9f:50:89:e6:d3:f9:4f:40:4d: 69:2b:3f:15:3b:9e:9b:35:a5:91:11:63:14:44:c4: f1:45:22:8d:31:67:17:38:22:74:60:5c:11:54:01: 76:a3:7d:e7:62:7f:47:b2:e8:da:de:bc:ae:a1:d3: 5e:b2:32:f9:23:33:c5:41:c2:9c:f4:96:02:0f:e0: eb:a6:0f:e1:b1:e0:71:fa:25:9c:84:64:ee:3b:c5: d5:57:c9:39:bc:76:9a:5d:3a:db:3b:e7:ea:75:5e: be:fd:18:76:5a:20:ab:c7:a4:a7:f7:cd:ef:51:93: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:38:91:65:D5:08:40:30:A5:7A:E9:B4:30:5F:19:67:4F:04:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ffe04b76-6663-3c40-bf1c-61fc74949fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7f:2b:cc:fb:ef:27:d3:ae:f5:11:b1:1a:48:65:03:25:76: 6b:9f:f7:8d:d4:4c:00:72:44:35:a9:c5:2d:84:4b:c7:b6:48: d5:81:5a:05:d3:0d:a4:c5:ee:4c:39:09:f7:10:94:ff:4e:95: 03:1e:bc:2f:67:ea:82:13:d6:27:b4:ec:8a:cb:df:2d:bb:c4: 19:c7:0f:00:51:95:9d:6a:c5:91:54:ca:df:b9:f2:56:44:a3: a3:de:27:e4:59:d8:05:28:e9:ad:8d:f5:a4:42:76:46:c7:73: 61:13:5c:70:65:3e:91:b3:1f:ad:cc:79:f4:d6:5d:9c:22:5d: b0:0f:92:e5:19:c7:79:46:54:8f:2a:68:d7:a9:ba:6b:dc:bb: 19:b7:22:86:41:c7:28:e2:06:1f:7d:b4:c7:e1:ad:53:ab:78: 8b:3f:50:ec:6a:3f:bd:8a:2a:f5:4a:d9:ba:ee:db:26:62:de: 85:f1:39:6a:d7:08:5b:cd:86:11:50:7e:ec:d9:e1:23:0f:27: 36:65:ac:11:a4:dc:2c:a3:07:3c:32:f5:52:61:39:a1:50:2b: 0c:a6:17:38:11:0c:01:58:a1:5e:30:0f:e7:a0:9a:95:2a:a5: da:55:37:51:14:64:06:01:c3:d5:57:c1:81:ce:8a:45:b6:15: 41:4a:5d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1y6iID5q5HseSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MmNjNDNmOTktYmQwMi00YmFkLWI1NzctNWEyN2U4NTgyN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JcGIWE4+tR1Psf1UIF/WolOTAd1s3rB71RP Ws5Ub2c1EvMggwjHqGgvM0p6f60M4K+C/QEgM3/ffOXnDBJH2k8bsamgqkDZi4lx c9Yz8V61NUiXGlLiVA2n3s019GMarDr2EkajuIfvGfTE5ac4FwrFzETGq71oVGgw 9aCt9nMeuewJozQmNeo+HMKfUInm0/lPQE1pKz8VO56bNaWREWMURMTxRSKNMWcX OCJ0YFwRVAF2o33nYn9Hsuja3ryuodNesjL5IzPFQcKc9JYCD+Drpg/hseBx+iWc hGTuO8XVV8k5vHaaXTrbO+fqdV6+/Rh2WiCrx6Sn983vUZPWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkfOJFl1QhAMKV66bQwXxlnTwQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvZmZlMDRiNzYtNjY2My0z YzQwLWJmMWMtNjFmYzc0OTQ5ZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF/K8z77yfTrvURsRpIZQMldmuf943UTAByRDWpxS2ES8e2SNWBWgXT DaTF7kw5CfcQlP9OlQMevC9n6oIT1ie07IrL3y27xBnHDwBRlZ1qxZFUyt+58lZE o6PeJ+RZ2AUo6a2N9aRCdkbHc2ETXHBlPpGzH63MefTWXZwiXbAPkuUZx3lGVI8q aNepumvcuxm3IoZBxyjiBh99tMfhrVOreIs/UOxqP72KKvVK2bru2yZi3oXxOWrX CFvNhhFQfuzZ4SMPJzZlrBGk3CyjBzwy9VJhOaFQKwymFzgRDAFYoV4wD+egmpUq pdpVN1EUZAYBw9VXwYHOikW2FUFKXZA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:09:29 2025 by rpki-client