$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json) Hash identifier: wbybYKKsa0q4uAmXTMu88YuWWn5zfQbDS7H22ULzNLw= Subject key identifier: E0:26:05:18:73:0F:6E:72:E0:31:6A:A9:D6:59:F1:C0:03:16:4F:78 Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Certificate serial: 010D0C9F4328584B92DCF8BA267095B4AEC60960 Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 13737 IP address blocks: 23.189.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f8:ba:26:70:95:b4:ae:c6:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=47928e01-81f7-458d-8636-4e63edbe3556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:92:57:b5:81:dc:b2:c2:78:e5:3b:e3:9b: 8e:7d:31:f6:5a:c0:27:fa:2e:72:2c:b2:c4:c2:d8: d4:d6:00:7a:fc:8b:c3:18:17:77:a6:3c:03:78:5b: a5:19:25:de:8c:9b:6e:38:aa:f3:95:d4:d6:89:9c: 54:7c:07:5c:c2:4a:6a:d3:53:30:06:ff:9b:32:9e: 0a:99:07:56:64:a1:af:26:bf:ae:29:fd:ab:82:f9: bd:d9:47:24:c2:36:81:0d:7f:b6:a5:8a:f8:c4:3e: a6:c9:d3:c1:f8:5c:b9:2f:de:2b:db:1b:9b:f6:27: b4:65:1c:34:c6:5e:51:2d:b0:1d:48:1d:e1:6c:80: cd:7b:cd:a8:ea:a5:72:a9:fd:6f:2e:0c:32:9b:99: 43:03:97:87:2f:4f:aa:d5:a7:c8:93:b5:e3:8f:cd: f6:c9:4b:84:21:e6:b3:90:d3:df:c0:24:36:ed:5e: e6:ba:4c:45:7e:e1:2b:98:1a:4d:fb:bf:5e:3d:24: c2:d5:f6:61:0a:e4:4a:e1:e4:27:49:f5:ee:13:78: c1:4c:d5:cf:47:0a:31:92:a9:eb:bd:e0:7e:a4:0f: 0e:99:2f:f8:9b:c1:a1:80:b5:c9:3c:4e:37:af:0c: 8f:b4:02:0f:4d:90:47:b3:1d:ec:0a:68:df:0f:1f: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:05:18:73:0F:6E:72:E0:31:6A:A9:D6:59:F1:C0:03:16:4F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl X509v3 Authority Key Identifier: keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e0:53:ef:df:17:e2:23:0c:95:88:21:61:49:0f:4f:e9:e8: 40:d5:76:bb:84:5d:90:61:50:53:7a:4e:1b:00:5f:bd:cc:05: 95:db:99:58:4c:af:24:ab:cc:4b:25:1f:48:30:74:9f:28:bb: ca:52:78:99:f5:57:9b:e6:a1:d0:c5:31:c9:05:4d:1a:81:b7: 43:a7:79:14:d0:81:91:42:6d:bd:d3:eb:32:30:09:5e:b7:7d: 2b:e7:b2:9b:b4:33:c7:5f:35:80:db:a8:f0:90:a4:16:e5:bb: cd:55:24:a2:e4:68:69:d5:45:70:52:ab:07:7f:cf:42:6c:11: 41:a7:24:c5:cc:5f:20:23:c6:1e:fb:d3:6a:55:97:8c:1f:7d: 25:30:ee:9f:aa:56:cb:b8:92:8a:7d:50:52:9b:84:87:b3:cd: 1f:b3:63:96:66:e5:38:db:0f:0c:51:5c:64:f4:3f:9d:99:58: 29:d9:3f:7c:73:0c:86:89:32:7b:02:32:d2:d3:15:da:ab:29: 3c:20:b8:09:02:ab:2f:5c:5d:15:77:16:15:f9:d0:77:5b:e6: 06:10:b0:3a:25:33:6a:91:ce:5a:34:ca:ef:01:63:9f:d2:ed: dd:ab:65:88:63:8b:31:cf:08:06:b0:99:9d:bb:07:1c:2c:3f: 81:21:96:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Pi6JnCVtK7GCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2 MjRiMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDc5MjhlMDEtODFmNy00NThkLTg2MzYtNGU2M2VkYmUzNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpmSV7WB3LLCeOU745uOfTH2WsAn+i5yLLLE wtjU1gB6/IvDGBd3pjwDeFulGSXejJtuOKrzldTWiZxUfAdcwkpq01MwBv+bMp4K mQdWZKGvJr+uKf2rgvm92UckwjaBDX+2pYr4xD6mydPB+Fy5L94r2xub9ie0ZRw0 xl5RLbAdSB3hbIDNe82o6qVyqf1vLgwym5lDA5eHL0+q1afIk7Xjj832yUuEIeaz kNPfwCQ27V7mukxFfuErmBpN+79ePSTC1fZhCuRK4eQnSfXuE3jBTNXPRwoxkqnr veB+pA8OmS/4m8GhgLXJPE43rwyPtAIPTZBHsx3sCmjfDx+BmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAmBRhzD25y4DFqqdZZ8cADFk94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1 ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3 NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3gU+/fF+IjDJWIIWFJD0/p6EDVdruEXZBhUFN6ThsAX73MBZXbmVhM rySrzEslH0gwdJ8ou8pSeJn1V5vmodDFMckFTRqBt0OneRTQgZFCbb3T6zIwCV63 fSvnspu0M8dfNYDbqPCQpBblu81VJKLkaGnVRXBSqwd/z0JsEUGnJMXMXyAjxh77 02pVl4wffSUw7p+qVsu4kop9UFKbhIezzR+zY5Zm5TjbDwxRXGT0P52ZWCnZP3xz DIaJMnsCMtLTFdqrKTwguAkCqy9cXRV3FhX50Hdb5gYQsDolM2qRzlo0yu8BY5/S 7d2rZYhjizHPCAawmZ27BxwsP4EhloM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:29 2025 by rpki-client