$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa File: ec1bc268-2e76-3051-8756-1153e2517f39.roa (raw, json) Hash identifier: h26ljlzVKYAJzk16oRMbH6nyebYq2/uw3AeFJdlFPMk= Subject key identifier: 2A:36:89:A2:C2:E1:BE:08:89:2A:5B:6D:A8:45:78:AF:0A:C8:6E:DB Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F4328584B609C8E9AFA71D2663BC11100 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 153371 IP address blocks: 23.175.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8e:9a:fa:71:d2:66:3b:c1:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=8b483578-19e2-423e-8d14-4b4308e264b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:8a:37:99:85:20:fc:00:ca:0f:99:f5:15: 8b:40:b8:41:d1:79:e8:5c:e5:ce:a7:6d:2c:b1:51: 5a:e8:44:55:47:c1:12:66:5c:94:4a:b7:e0:67:4e: f9:9b:44:f2:aa:d2:f0:0a:72:c8:3c:d8:3f:fd:eb: 54:11:22:45:74:c3:e6:24:74:71:70:8d:67:57:8c: 78:8e:19:66:09:3c:d6:fa:a1:31:11:b9:66:98:15: 26:90:89:6e:f0:6b:82:ac:dc:32:6b:72:f3:47:68: af:38:03:41:a3:2c:c8:f2:ac:8e:bc:dc:f9:cf:94: ee:d5:44:c2:dc:a8:d6:fe:94:77:d5:a3:ae:42:b5: 7e:ef:2d:e2:57:fe:0a:5a:30:9d:7b:95:82:58:46: 49:f9:8c:29:e6:fb:9a:84:af:46:da:c5:ea:68:92: 4e:71:5d:43:77:d1:c8:9f:df:3b:b5:9e:ba:bf:06: de:a1:95:cf:ec:23:c7:01:ff:61:09:5b:ac:f9:4e: 84:cf:58:86:88:9a:0d:8d:34:23:5f:84:f4:bc:56: 33:af:ba:63:3b:a9:81:3f:5d:a8:c9:84:82:7b:75: 1f:11:77:bc:25:6b:07:2b:1b:46:67:57:58:b5:7d: 1c:45:dd:65:36:f2:81:38:81:f3:7e:2f:6b:87:a8: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:89:A2:C2:E1:BE:08:89:2A:5B:6D:A8:45:78:AF:0A:C8:6E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 23.175.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a0:d5:17:e6:20:87:88:00:3c:27:38:e6:52:7a:70:40:89: fb:8d:d5:84:1e:a6:1b:4b:72:95:14:7e:cf:b3:a1:9c:96:75: ae:e6:ce:7d:be:b9:9f:10:01:46:6c:69:e1:9e:6d:f7:f3:94: 5d:d4:6f:1f:5e:0c:d6:ad:b3:df:7c:98:80:bc:ed:f6:70:22: 6f:78:16:e5:ee:f5:74:cf:1b:77:e1:51:c3:23:b9:a7:bf:1a: dd:9f:15:d9:14:53:22:0f:6b:29:60:12:f0:ec:05:e2:51:bb: ba:47:a9:69:83:3c:1c:3b:59:da:20:7f:1b:4a:de:ee:25:0e: ec:12:28:7a:ee:89:d6:2c:33:d0:7b:22:91:5c:d2:7f:f0:00: be:c3:72:ff:1a:90:80:e8:b3:6a:f9:38:65:3d:00:cf:eb:8a: 58:8b:eb:10:53:1c:a7:5b:fa:c9:18:63:c9:b0:f4:1d:ea:db: f8:14:c1:1d:bf:83:c0:df:61:c9:3a:56:d7:7c:4f:26:87:13: 64:b8:5a:cd:d4:b1:13:4f:8d:19:f9:03:3a:27:45:c7:c8:2d: 9a:5e:84:00:5d:4d:44:fe:37:4d:64:53:95:f0:6d:fd:f3:51: e3:bd:99:88:08:60:e2:16:9e:93:98:eb:34:ef:41:c0:9d:4f: d4:2b:fe:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnI6a+nHSZjvBEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OGI0ODM1NzgtMTllMi00MjNlLThkMTQtNGI0MzA4ZTI2NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRqKN5mFIPwAyg+Z9RWLQLhB0XnoXOXOp20s sVFa6ERVR8ESZlyUSrfgZ075m0TyqtLwCnLIPNg//etUESJFdMPmJHRxcI1nV4x4 jhlmCTzW+qExEblmmBUmkIlu8GuCrNwya3LzR2ivOANBoyzI8qyOvNz5z5Tu1UTC 3KjW/pR31aOuQrV+7y3iV/4KWjCde5WCWEZJ+Ywp5vuahK9G2sXqaJJOcV1Dd9HI n987tZ66vwbeoZXP7CPHAf9hCVus+U6Ez1iGiJoNjTQjX4T0vFYzr7pjO6mBP12o yYSCe3UfEXe8JWsHKxtGZ1dYtX0cRd1lNvKBOIHzfi9rh6hExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo2iaLC4b4IiSpbbahFeK8KyG7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZWMxYmMyNjgtMmU3Ni0z MDUxLTg3NTYtMTE1M2UyNTE3ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKg1RfmIIeIADwnOOZSenBAifuN1YQephtLcpUUfs+zoZyWda7mzn2+ uZ8QAUZsaeGebffzlF3Ubx9eDNats998mIC87fZwIm94FuXu9XTPG3fhUcMjuae/ Gt2fFdkUUyIPaylgEvDsBeJRu7pHqWmDPBw7WdogfxtK3u4lDuwSKHruidYsM9B7 IpFc0n/wAL7Dcv8akIDos2r5OGU9AM/riliL6xBTHKdb+skYY8mw9B3q2/gUwR2/ g8DfYck6Vtd8TyaHE2S4Ws3UsRNPjRn5AzonRcfILZpehABdTUT+N01kU5Xwbf3z UeO9mYgIYOIWnpOY6zTvQcCdT9Qr/ns= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:03 2025 by rpki-client