$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/e86e2d1f-b1e2-3208-90d3-5f3afbd0e350.roa File: e86e2d1f-b1e2-3208-90d3-5f3afbd0e350.roa (raw, json) Hash identifier: mBGiocfvZIt27diDzrNygIQc7tXGjUDfDO85xuUV+Qc= Subject key identifier: 58:C4:9B:AE:37:8D:50:22:8B:30:F4:13:AD:FA:D2:9B:85:A5:A5:B2 Certificate issuer: /CN=8639dc2c-221f-4637-896b-3c4a58cfc6c6 Certificate serial: 010D0C9F4328584B87B21E8943AE141464150978 Authority key identifier: 65:0C:AD:6F:5E:7C:8D:F3:31:CF:50:3B:EF:0B:26:64:DC:51:35:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/e86e2d1f-b1e2-3208-90d3-5f3afbd0e350.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.187.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1e:89:43:ae:14:14:64:15:09:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8639dc2c-221f-4637-896b-3c4a58cfc6c6 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=9c9bb33e-db8f-4ce8-bc11-50a0732dd4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:8b:17:a3:c4:62:6b:35:9c:ad:6f:f5:16: 40:d1:b5:93:ff:41:1c:ec:b2:9e:d5:70:bb:cf:a5: d9:a1:da:50:09:75:93:4e:d2:ac:1c:87:13:ae:b7: 5e:c4:b2:81:01:7f:89:44:8b:15:0b:96:16:09:ab: 5b:ec:6c:2f:78:e8:57:43:9d:76:60:a8:ca:79:60: 98:0d:ea:15:e0:c4:bf:16:86:cf:96:93:6a:e0:f6: 64:e4:76:0e:9a:03:a8:11:96:d5:41:48:85:7f:49: 56:3c:4e:66:a1:06:8c:50:d9:4e:9a:0c:3f:24:a7: fb:da:03:91:83:48:34:2d:64:34:f6:39:e9:b5:71: 30:7a:9f:c6:69:e2:df:3b:9a:3e:c0:cf:ac:65:21: b9:24:f9:af:ee:2a:58:1d:ca:fd:96:3b:74:77:19: 80:ac:4d:d4:7d:d6:af:30:1b:18:4d:0a:d4:55:6b: 56:b6:3f:b6:d6:d0:75:be:0a:f5:88:5a:ba:c1:8d: 37:ed:53:00:ce:b8:f7:17:96:aa:70:4b:b0:3a:76: d4:75:53:4c:d7:04:d1:4d:7e:8a:63:30:e5:f1:06: 29:e3:e1:b9:de:1f:a2:5f:3a:57:e3:d0:a1:f1:c1: 99:e1:85:6c:75:47:98:37:c6:6f:a4:ea:2b:b1:1f: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:9B:AE:37:8D:50:22:8B:30:F4:13:AD:FA:D2:9B:85:A5:A5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/e86e2d1f-b1e2-3208-90d3-5f3afbd0e350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6/8639dc2c-221f-4637-896b-3c4a58cfc6c6.crl X509v3 Authority Key Identifier: keyid:65:0C:AD:6F:5E:7C:8D:F3:31:CF:50:3B:EF:0B:26:64:DC:51:35:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8639dc2c-221f-4637-896b-3c4a58cfc6c6.cer sbgp-ipAddrBlock: critical IPv4: 23.187.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9e:40:0e:13:69:7c:24:9d:f8:07:e0:49:61:ed:06:a4:97: b5:6f:b5:1a:00:15:8c:9c:ca:35:5d:6d:f6:04:4c:b6:db:25: c3:d7:f2:51:8e:71:77:08:59:2a:71:10:9e:31:3f:f7:39:5f: 45:26:98:7a:5a:59:2e:11:17:f3:99:28:00:c0:ce:6d:f1:9c: 53:50:81:77:ab:9c:0a:05:8e:63:72:c1:37:04:20:6f:ea:ff: 81:de:ec:de:4b:9c:f8:4f:35:cc:6b:08:03:ad:36:81:c4:79: 28:99:fb:07:23:b6:e9:4b:e2:8c:c9:f3:4e:22:a8:de:4e:df: 3f:b8:d1:88:2b:07:36:70:e1:ed:35:24:c3:ba:e4:b2:0e:04: 31:df:2d:5d:a3:e4:44:0a:47:f0:5f:50:6e:ff:c3:04:33:2f: 89:40:da:cc:48:85:d6:11:29:7b:13:97:b5:3a:10:ef:3b:ea: 14:2c:18:66:3c:9d:3d:ab:0d:15:86:9d:4a:e0:d6:b8:67:95: f7:f2:a1:9e:87:18:91:a3:fd:ba:9a:7e:5a:d4:1d:fc:69:b5: 50:42:61:37:7f:71:a5:f4:5c:72:38:56:43:54:d6:44:66:fe: 4b:bb:ba:63:d7:4e:83:38:40:0a:23:f8:3a:a7:68:bf:64:eb: f5:ca:e4:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh6JQ64UFGQVCXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzOWRjMmMtMjIxZi00NjM3LTg5NmItM2M0YTU4Y2Zj NmM2MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OWM5YmIzM2UtZGI4Zi00Y2U4LWJjMTEtNTBhMDczMmRkNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqLF6PEYms1nK1v9RZA0bWT/0Ec7LKe1XC7 z6XZodpQCXWTTtKsHIcTrrdexLKBAX+JRIsVC5YWCatb7GwveOhXQ512YKjKeWCY DeoV4MS/FobPlpNq4PZk5HYOmgOoEZbVQUiFf0lWPE5moQaMUNlOmgw/JKf72gOR g0g0LWQ09jnptXEwep/GaeLfO5o+wM+sZSG5JPmv7ipYHcr9ljt0dxmArE3Ufdav MBsYTQrUVWtWtj+21tB1vgr1iFq6wY037VMAzrj3F5aqcEuwOnbUdVNM1wTRTX6K YzDl8QYp4+G53h+iXzpX49Ch8cGZ4YVsdUeYN8ZvpOorsR9MGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjEm643jVAiizD0E6360puFpaWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NjM5 ZGMyYy0yMjFmLTQ2MzctODk2Yi0zYzRhNThjZmM2YzYvZTg2ZTJkMWYtYjFlMi0z MjA4LTkwZDMtNWYzYWZiZDBlMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODYzOWRjMmMtMjIxZi00NjM3LTg5 NmItM2M0YTU4Y2ZjNmM2Lzg2MzlkYzJjLTIyMWYtNDYzNy04OTZiLTNjNGE1OGNm YzZjNi5jcmwwHwYDVR0jBBgwFoAUZQytb158jfMxz1A77wsmZNxRNa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjM5ZGMyYy0yMjFmLTQ2MzctODk2Yi0zYzRh NThjZmM2YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7u4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeeQA4TaXwknfgH4Elh7Qakl7VvtRoAFYycyjVdbfYETLbbJcPX8lGO cXcIWSpxEJ4xP/c5X0UmmHpaWS4RF/OZKADAzm3xnFNQgXernAoFjmNywTcEIG/q /4He7N5LnPhPNcxrCAOtNoHEeSiZ+wcjtulL4ozJ804iqN5O3z+40YgrBzZw4e01 JMO65LIOBDHfLV2j5EQKR/BfUG7/wwQzL4lA2sxIhdYRKXsTl7U6EO876hQsGGY8 nT2rDRWGnUrg1rhnlffyoZ6HGJGj/bqaflrUHfxptVBCYTd/caX0XHI4VkNU1kRm /ku7umPXToM4QAoj+DqnaL9k6/XK5EI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:14 2025 by rpki-client