$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa File: 573ad8c6-2882-33ac-86ca-8fda368a6c77.roa (raw, json) Hash identifier: rqGUd+6DJXklsEc6yYCVhGVNXRo6uqUPyEfAuYV+fzk= Subject key identifier: 9B:92:2C:B3:64:8D:92:4E:20:C5:6D:32:EB:BF:97:B4:60:41:49:D7 Certificate issuer: /CN=5e87876c-4225-44e7-b377-9a3bf9bdb315 Certificate serial: 010D0C9F4328584B8BF2E759B275EAE5C7DFA8F1 Authority key identifier: 50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa Signing time: Fri 17 Oct 2025 01:34:29 +0000 ROA not before: Fri 17 Oct 2025 01:34:29 +0000 ROA not after: Thu 15 Jan 2026 02:34:29 +0000 asID: 402090 IP address blocks: 23.147.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:f2:e7:59:b2:75:ea:e5:c7:df:a8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e87876c-4225-44e7-b377-9a3bf9bdb315 Validity Not Before: Oct 17 01:34:29 2025 GMT Not After : Jan 15 02:34:29 2026 GMT Subject: CN=19fc1099-d988-496e-957b-1ee79ff75811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:03:38:3e:b3:31:76:80:2e:c5:15:50:da: 22:7c:88:f7:cd:9b:d8:1d:85:0a:ee:2c:46:25:13: ea:a7:16:bd:70:b2:3d:88:62:24:f0:fc:6d:6e:0c: 48:72:b1:a5:75:64:a8:92:01:23:19:00:f6:fe:fa: a6:79:90:19:f7:21:c3:b0:33:fc:65:28:33:19:97: 0d:3d:6e:18:ad:69:70:dd:8b:75:93:6a:68:12:bc: f6:b5:90:56:26:1e:da:a3:ac:e3:0c:20:45:f5:47: 3f:c1:91:cd:3c:66:77:3f:4f:e8:1d:08:c3:df:38: cb:03:8f:04:f2:51:63:dd:75:29:e0:8d:25:66:b6: 76:b4:ea:c5:74:8e:76:93:27:92:a8:ef:b6:18:f2: 4d:91:4a:5a:2c:26:c7:fa:b9:06:50:68:9f:75:69: 7d:d5:ec:f2:dc:6f:4e:96:59:a1:23:eb:14:de:27: fa:58:40:ed:6b:90:b3:74:66:7e:05:35:83:cf:07: a8:59:ce:e3:90:1e:db:7b:84:c0:4f:16:b7:5b:50: 62:05:a7:d2:4f:5c:98:bc:0c:e3:4b:4b:aa:d3:3a: 48:ab:9c:69:bb:ef:97:8f:25:56:66:27:7b:5a:e7: d8:95:c3:10:c3:a8:bd:5f:19:61:09:f8:bd:de:56: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:2C:B3:64:8D:92:4E:20:C5:6D:32:EB:BF:97:B4:60:41:49:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl X509v3 Authority Key Identifier: keyid:50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer sbgp-ipAddrBlock: critical IPv4: 23.147.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3d:18:7a:65:7d:8c:d6:2d:14:a9:08:17:10:f1:f4:81:de: d3:91:b0:c5:ed:a3:3b:91:71:ab:1d:62:77:21:19:8e:e1:e9: 23:25:31:d4:99:69:92:64:e1:6e:1c:68:d8:26:51:f1:96:3c: 3d:66:71:c4:1e:0e:41:49:45:0c:88:2f:6c:b1:36:67:cf:7f: 03:71:23:48:71:96:fc:67:ad:4a:49:68:56:86:94:dd:3a:6f: 87:5a:ea:9b:6f:58:26:1f:e9:01:81:ff:b5:b4:25:bb:5c:05: 19:20:27:a0:d7:1d:45:72:ca:00:c5:48:f8:ac:57:d9:60:bb: 7f:e9:c6:36:bc:19:d5:74:05:37:b6:cc:3e:e5:39:61:d2:4d: fc:b8:e6:89:1c:37:13:a1:2a:15:b7:05:2c:f0:3e:27:f6:eb: 33:d7:e9:e2:11:ca:d5:11:e5:89:4e:92:8a:39:a9:dc:0d:57: e7:92:65:be:16:e8:80:4f:96:7c:9d:80:bc:19:bd:e1:7c:72: 22:b1:ec:3d:6d:66:0e:99:d9:32:2b:30:25:11:d8:b9:42:c3: 82:bb:d7:5e:9f:33:6c:03:a2:57:87:e3:fb:9d:dd:18:0c:d7: d2:a6:04:62:99:07:ce:a5:16:f3:c7:f9:09:7a:d1:d0:73:89: f8:70:b1:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL8udZsnXq5cffqPEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4Nzg3NmMtNDIyNS00NGU3LWIzNzctOWEzYmY5YmRi MzE1MB4XDTI1MTAxNzAxMzQyOVoXDTI2MDExNTAyMzQyOVowLzEtMCsGA1UEAxMk MTlmYzEwOTktZDk4OC00OTZlLTk1N2ItMWVlNzlmZjc1ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqscDOD6zMXaALsUVUNoifIj3zZvYHYUK7ixG JRPqpxa9cLI9iGIk8PxtbgxIcrGldWSokgEjGQD2/vqmeZAZ9yHDsDP8ZSgzGZcN PW4YrWlw3Yt1k2poErz2tZBWJh7ao6zjDCBF9Uc/wZHNPGZ3P0/oHQjD3zjLA48E 8lFj3XUp4I0lZrZ2tOrFdI52kyeSqO+2GPJNkUpaLCbH+rkGUGifdWl91ezy3G9O llmhI+sU3if6WEDta5CzdGZ+BTWDzweoWc7jkB7be4TATxa3W1BiBafST1yYvAzj S0uq0zpIq5xpu++XjyVWZid7WufYlcMQw6i9XxlhCfi93lYnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuSLLNkjZJOIMVtMuu/l7RgQUnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZTg3 ODc2Yy00MjI1LTQ0ZTctYjM3Ny05YTNiZjliZGIzMTUvNTczYWQ4YzYtMjg4Mi0z M2FjLTg2Y2EtOGZkYTM2OGE2Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWU4Nzg3NmMtNDIyNS00NGU3LWIz NzctOWEzYmY5YmRiMzE1LzVlODc4NzZjLTQyMjUtNDRlNy1iMzc3LTlhM2JmOWJk YjMxNS5jcmwwHwYDVR0jBBgwFoAUUG2K3+d3koOwTHiQI+5tRSlEO60wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZTg3ODc2Yy00MjI1LTQ0ZTctYjM3Ny05YTNi ZjliZGIzMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE49GHplfYzWLRSpCBcQ8fSB3tORsMXtozuRcasdYnchGY7h6SMlMdSZ aZJk4W4caNgmUfGWPD1mccQeDkFJRQyIL2yxNmfPfwNxI0hxlvxnrUpJaFaGlN06 b4da6ptvWCYf6QGB/7W0JbtcBRkgJ6DXHUVyygDFSPisV9lgu3/pxja8GdV0BTe2 zD7lOWHSTfy45okcNxOhKhW3BSzwPif26zPX6eIRytUR5YlOkoo5qdwNV+eSZb4W 6IBPlnydgLwZveF8ciKx7D1tZg6Z2TIrMCUR2LlCw4K7116fM2wDoleH4/ud3RgM 19KmBGKZB86lFvPH+Ql60dBzifhwsY4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:58 2025 by rpki-client