$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa File: 8c96b8b5-6d96-394f-8062-cb55430e1548.roa (raw, json) Hash identifier: vGu6OmR7sHZOb1Ll92J4Ry3M+YaZ24o1mUhqUUty8ZQ= Subject key identifier: 41:FE:C3:7B:63:A7:D6:42:42:13:16:2C:5C:F3:87:3D:4E:ED:6C:AC Certificate issuer: /CN=265875fa-2cd8-4782-9b63-97850fa49dfa Certificate serial: 010D0C9F4328584B8F621953049229D15C6F8B40 Authority key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa Signing time: Sat 18 Oct 2025 07:05:57 +0000 ROA not before: Sat 18 Oct 2025 07:05:57 +0000 ROA not after: Fri 16 Jan 2026 08:05:57 +0000 asID: 402075 IP address blocks: 23.147.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:62:19:53:04:92:29:d1:5c:6f:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265875fa-2cd8-4782-9b63-97850fa49dfa Validity Not Before: Oct 18 07:05:57 2025 GMT Not After : Jan 16 08:05:57 2026 GMT Subject: CN=791e9b2f-a3ef-4cad-bad0-e7d3a50ad226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:fd:8d:a0:a3:0d:58:8c:cb:66:ef:bb:4f: 24:d5:19:ae:55:0f:79:2d:0d:84:f9:0b:46:d7:71: 77:33:da:d0:4c:7c:d0:c5:ac:74:24:9a:ed:69:6d: 5c:a6:b7:4a:2c:75:dd:b1:6e:00:81:01:5a:c5:06: bd:f7:c9:35:17:06:11:91:c9:1a:da:92:1d:32:d6: f4:6d:92:ff:1a:a9:57:58:35:62:c1:94:c3:0d:f7: 5d:6d:ed:f5:3d:98:c2:a7:5a:ea:ec:37:97:4e:5d: 20:34:d8:b7:47:68:f2:f9:9d:82:cd:58:d1:ff:32: 33:07:19:87:f8:31:ff:4c:0c:82:c5:54:14:04:fa: 8c:69:88:2a:cb:26:aa:7b:2f:a5:f6:96:78:0d:e4: 5d:54:45:4c:b8:e4:72:0e:33:3d:c5:81:4b:ee:1a: a2:c0:4e:88:0d:53:3c:5a:b8:d8:3d:5d:a2:fc:65: 34:a5:08:e1:d1:c1:fc:da:99:1e:c7:d1:7f:7d:62: 1c:40:b3:1b:7a:93:8d:f0:37:f4:9c:26:7e:32:de: 43:23:2f:32:31:c4:67:d7:fe:96:52:6a:e9:2a:fe: dc:a2:ce:5b:25:e9:b8:e0:ed:0e:95:29:92:35:a6: 45:cd:e3:f8:8a:9e:46:6e:c1:f9:92:58:be:25:45: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FE:C3:7B:63:A7:D6:42:42:13:16:2C:5C:F3:87:3D:4E:ED:6C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl X509v3 Authority Key Identifier: keyid:2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer sbgp-ipAddrBlock: critical IPv4: 23.147.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0f:f0:a2:3d:32:45:1a:79:81:f0:cd:28:f0:37:cc:d1:fe: 6b:43:f4:22:e5:9b:b6:29:d2:01:5f:81:ed:9c:e4:43:53:84: e9:ff:69:7c:20:41:c0:df:2c:4d:b5:73:30:02:2e:12:d5:e8: 4d:79:ec:b4:07:2d:6c:47:15:4d:9b:90:6b:81:43:8c:0f:94: bd:2f:a0:a8:49:c0:16:04:a9:b8:e2:e0:17:12:dc:35:fd:32: 21:86:5f:50:fc:75:7a:11:d8:49:b3:b3:0e:28:db:f7:0c:70: ef:30:22:8f:9c:12:cd:3e:a5:29:52:d7:a9:7f:ac:9a:d7:63: 00:c7:99:58:69:3b:ca:75:6d:be:74:95:f4:c3:0a:7f:5f:5c: 4b:cf:60:16:ba:66:9a:b0:69:51:21:53:43:b7:91:7b:31:ab: dc:d0:a1:7b:c0:25:ba:6c:19:e6:94:2d:5f:02:04:35:3d:1d: 77:7a:b0:ab:04:d0:56:67:58:13:42:a7:e9:61:34:06:cf:18: 33:e2:9d:71:e2:f7:d7:d7:2a:7d:56:d3:04:3f:37:bb:a6:b3: 57:78:9d:aa:4e:b5:d6:03:c1:b5:70:c9:45:f0:e0:cb:c6:75: ae:95:11:94:47:e5:3b:74:fd:1d:8d:b9:3a:e1:8f:20:6f:f9: af:0f:6d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPYhlTBJIp0Vxvi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1ODc1ZmEtMmNkOC00NzgyLTliNjMtOTc4NTBmYTQ5 ZGZhMB4XDTI1MTAxODA3MDU1N1oXDTI2MDExNjA4MDU1N1owLzEtMCsGA1UEAxMk NzkxZTliMmYtYTNlZi00Y2FkLWJhZDAtZTdkM2E1MGFkMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLD9jaCjDViMy2bvu08k1RmuVQ95LQ2E+QtG 13F3M9rQTHzQxax0JJrtaW1cprdKLHXdsW4AgQFaxQa998k1FwYRkcka2pIdMtb0 bZL/GqlXWDViwZTDDfddbe31PZjCp1rq7DeXTl0gNNi3R2jy+Z2CzVjR/zIzBxmH +DH/TAyCxVQUBPqMaYgqyyaqey+l9pZ4DeRdVEVMuORyDjM9xYFL7hqiwE6IDVM8 WrjYPV2i/GU0pQjh0cH82pkex9F/fWIcQLMbepON8Df0nCZ+Mt5DIy8yMcRn1/6W UmrpKv7cos5bJem44O0OlSmSNaZFzeP4ip5GbsH5kli+JUWG1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH+w3tjp9ZCQhMWLFzzhz1O7WysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNjU4 NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1MGZhNDlkZmEvOGM5NmI4YjUtNmQ5Ni0z OTRmLTgwNjItY2I1NTQzMGUxNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjY1ODc1ZmEtMmNkOC00NzgyLTli NjMtOTc4NTBmYTQ5ZGZhLzI2NTg3NWZhLTJjZDgtNDc4Mi05YjYzLTk3ODUwZmE0 OWRmYS5jcmwwHwYDVR0jBBgwFoAULF0GCc8W0GaB0VhRo/joXVCpn9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNjU4NzVmYS0yY2Q4LTQ3ODItOWI2My05Nzg1 MGZhNDlkZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIP8KI9MkUaeYHwzSjwN8zR/mtD9CLlm7Yp0gFfge2c5ENThOn/aXwg QcDfLE21czACLhLV6E157LQHLWxHFU2bkGuBQ4wPlL0voKhJwBYEqbji4BcS3DX9 MiGGX1D8dXoR2Emzsw4o2/cMcO8wIo+cEs0+pSlS16l/rJrXYwDHmVhpO8p1bb50 lfTDCn9fXEvPYBa6ZpqwaVEhU0O3kXsxq9zQoXvAJbpsGeaULV8CBDU9HXd6sKsE 0FZnWBNCp+lhNAbPGDPinXHi99fXKn1W0wQ/N7ums1d4napOtdYDwbVwyUXw4MvG da6VEZRH5Tt0/R2NuTrhjyBv+a8Pbdo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:50 2025 by rpki-client