$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa File: baf89299-a768-3de2-97bb-42764b25fb78.roa (raw, json) Hash identifier: f/zcoNBmePGVPyBXxgDIxkVvFHOCTp8X1EuUq0SdTBc= Subject key identifier: 0B:75:6D:87:E0:E4:78:D3:3E:D0:27:B8:8F:41:56:5B:A8:ED:71:23 Certificate issuer: /CN=1222a11d-80a3-457a-aa55-a4b1fec71a5c Certificate serial: 010D0C9F4328584B8C5A33DD7DA06C25DF14CF00 Authority key identifier: A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa Signing time: Fri 17 Oct 2025 05:02:04 +0000 ROA not before: Fri 17 Oct 2025 05:02:04 +0000 ROA not after: Thu 15 Jan 2026 06:02:04 +0000 asID: 46664 IP address blocks: 23.148.144.0/24 maxlen: 24 23.148.145.0/24 maxlen: 24 23.148.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:5a:33:dd:7d:a0:6c:25:df:14:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1222a11d-80a3-457a-aa55-a4b1fec71a5c Validity Not Before: Oct 17 05:02:04 2025 GMT Not After : Jan 15 06:02:04 2026 GMT Subject: CN=aac1f577-46f9-485d-81ea-b4c416ae882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:ea:8a:93:e2:b1:47:ea:ac:65:4e:d7:09: cd:53:ff:56:ba:1a:06:e6:57:7e:ea:62:db:bd:ed: 26:67:73:57:cc:bb:ea:43:e8:3a:7c:ac:76:f2:5e: 3b:59:fa:4d:28:b8:ba:66:ad:d8:f9:00:89:eb:d1: 7b:a8:fa:a3:99:1a:d7:57:5f:21:c3:e6:a5:09:36: 40:d4:03:9e:2d:e0:10:02:f0:d1:49:fa:b0:08:32: 6b:f1:63:12:82:a6:bc:b7:f1:c1:bf:25:d6:6e:35: 59:74:b9:e0:37:6a:00:7c:8c:bb:b9:ff:c0:21:be: ab:88:cb:9d:7a:c5:65:07:b2:07:bd:6e:6e:52:dd: a2:21:1d:da:9a:6b:55:7d:1d:6c:3e:7f:d0:05:21: 08:d4:82:48:39:bd:ef:d0:ca:6c:89:c5:81:e0:54: 85:0c:5b:f8:4a:13:2d:86:66:ed:47:1d:6b:76:fc: 88:57:38:05:34:49:77:c0:b4:06:ec:43:68:d3:ff: 09:67:75:ff:90:8b:e4:dc:f0:d3:e3:cb:c6:6b:60: 16:67:db:b9:74:56:4a:54:d2:e9:4d:04:43:a2:8a: 76:e4:01:95:15:e3:53:55:a0:d4:8d:03:5e:44:ca: f3:51:d3:89:c9:3b:82:a9:6d:f5:99:a8:23:ac:b2: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:6D:87:E0:E4:78:D3:3E:D0:27:B8:8F:41:56:5B:A8:ED:71:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.crl X509v3 Authority Key Identifier: keyid:A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer sbgp-ipAddrBlock: critical IPv4: 23.148.144.0-23.148.146.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:45:b3:0d:1e:29:59:44:06:0d:5b:d6:80:1c:18:56:ce:37: 57:df:67:e5:6a:3e:d6:50:49:d1:f9:fd:85:4f:48:de:9a:0d: e2:58:03:5e:72:60:35:be:29:14:9f:a6:d9:72:a7:09:4b:f4: 84:a9:a3:a2:da:bb:e3:a7:d9:f8:59:49:aa:58:25:16:2b:81: 01:70:7c:39:20:3b:8b:c0:39:e3:0b:98:fe:5e:b7:3f:cd:9f: 42:18:f1:57:6e:2b:b8:c3:df:81:08:9f:d7:65:bc:d6:0c:a5: c8:c2:48:1a:b8:72:c8:b9:5c:69:73:48:88:8d:17:d7:39:b6: ba:6c:85:9d:b3:3f:c7:d6:2e:9c:20:ee:a6:a8:d4:07:e8:cb: 65:3f:08:99:14:5d:e5:c3:51:0e:1c:74:d2:a2:ca:f7:12:a4: bb:56:9f:de:81:8c:98:0f:30:9d:8e:e6:4c:df:88:99:33:43: 09:39:20:ea:f4:eb:90:42:d6:d3:89:04:05:f3:a4:13:24:de: 87:8b:7f:3e:a7:d0:3b:a9:52:4e:a7:be:47:4f:ab:76:3b:84: ae:c5:d2:c1:37:09:84:28:7c:fb:37:f6:fb:70:9e:6b:43:81: 60:90:90:ab:d2:e3:a2:9c:61:41:34:4e:d9:56:f5:56:af:59: 35:eb:e7:ee -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuMWjPdfaBsJd8UzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIyMmExMWQtODBhMy00NTdhLWFhNTUtYTRiMWZlYzcx YTVjMB4XDTI1MTAxNzA1MDIwNFoXDTI2MDExNTA2MDIwNFowLzEtMCsGA1UEAxMk YWFjMWY1NzctNDZmOS00ODVkLTgxZWEtYjRjNDE2YWU4ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LzqipPisUfqrGVO1wnNU/9WuhoG5ld+6mLb ve0mZ3NXzLvqQ+g6fKx28l47WfpNKLi6Zq3Y+QCJ69F7qPqjmRrXV18hw+alCTZA 1AOeLeAQAvDRSfqwCDJr8WMSgqa8t/HBvyXWbjVZdLngN2oAfIy7uf/AIb6riMud esVlB7IHvW5uUt2iIR3ammtVfR1sPn/QBSEI1IJIOb3v0MpsicWB4FSFDFv4ShMt hmbtRx1rdvyIVzgFNEl3wLQG7ENo0/8JZ3X/kIvk3PDT48vGa2AWZ9u5dFZKVNLp TQRDoop25AGVFeNTVaDUjQNeRMrzUdOJyTuCqW31magjrLKqNwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAt1bYfg5HjTPtAnuI9BVluo7XEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjIy YTExZC04MGEzLTQ1N2EtYWE1NS1hNGIxZmVjNzFhNWMvYmFmODkyOTktYTc2OC0z ZGUyLTk3YmItNDI3NjRiMjVmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTIyMmExMWQtODBhMy00NTdhLWFh NTUtYTRiMWZlYzcxYTVjLzEyMjJhMTFkLTgwYTMtNDU3YS1hYTU1LWE0YjFmZWM3 MWE1Yy5jcmwwHwYDVR0jBBgwFoAUoIXC8Da7JsZBl4xwRtEpAF3dvocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjIyYTExZC04MGEzLTQ1N2EtYWE1NS1hNGIx ZmVjNzFhNWMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQXlJAD BAAXlJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAg0WzDR4pWUQGDVvWgBwYVs43V99n5Wo+1lBJ0fn9hU9I 3poN4lgDXnJgNb4pFJ+m2XKnCUv0hKmjotq746fZ+FlJqlglFiuBAXB8OSA7i8A5 4wuY/l63P82fQhjxV24ruMPfgQif12W81gylyMJIGrhyyLlcaXNIiI0X1zm2umyF nbM/x9YunCDupqjUB+jLZT8ImRRd5cNRDhx00qLK9xKku1af3oGMmA8wnY7mTN+I mTNDCTkg6vTrkELW04kEBfOkEyTeh4t/PqfQO6lSTqe+R0+rdjuErsXSwTcJhCh8 +zf2+3Cea0OBYJCQq9LjopxhQTRO2Vb1Vq9ZNevn7g== -----END CERTIFICATE-----Generated at Tue Oct 21 06:12:53 2025 by rpki-client