$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa File: a9e307cb-bc6d-318b-9659-6b643e6151fd.roa (raw, json) Hash identifier: MXEbq46638+79829CIe3OQX2iXSB6lqgsy0cOWCKeY0= Subject key identifier: E3:B8:E0:E7:B6:D7:F0:D8:46:2F:E4:BE:D2:14:53:9A:A6:C3:FA:25 Certificate issuer: /CN=9477d25a-981d-4eb4-9fd8-7eea914a2840 Certificate serial: 010D0C9F4328584B8F6267ACC129004726FE3B80 Authority key identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa Signing time: Sat 18 Oct 2025 07:06:34 +0000 ROA not before: Sat 18 Oct 2025 07:06:34 +0000 ROA not after: Fri 16 Jan 2026 08:06:34 +0000 asID: 402075 IP address blocks: 23.147.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:62:67:ac:c1:29:00:47:26:fe:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9477d25a-981d-4eb4-9fd8-7eea914a2840 Validity Not Before: Oct 18 07:06:34 2025 GMT Not After : Jan 16 08:06:34 2026 GMT Subject: CN=2cfc98d7-d140-41be-913d-f3745767fd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:f9:5a:66:d0:f4:73:8f:a3:45:6d:d2:f7: 34:a1:7d:00:a4:6b:7a:5e:ba:5d:07:e8:ad:02:ba: 78:4e:47:25:f8:1d:e7:7f:fb:ee:3e:a7:64:f9:23: 1c:56:00:13:3d:89:bc:0d:51:55:f1:90:98:f1:2c: 48:9e:59:cb:66:94:fe:04:b7:da:ee:19:c9:d1:1f: 04:bc:0e:a2:61:9f:f1:d1:f9:7a:ad:88:9b:e9:b0: ed:76:66:bb:0e:b5:90:72:f8:0d:93:f8:30:21:fd: c3:f5:57:93:99:e5:c6:72:65:7d:16:09:7b:16:72: 13:35:14:a8:db:a6:f1:ef:80:b8:c9:6e:04:3c:32: d2:69:30:04:32:91:e2:42:b2:c3:2f:45:69:e9:50: 9a:70:23:1c:fd:22:22:a0:9f:ac:c7:b3:a3:34:21: 10:c9:bd:33:c2:30:86:5a:d9:21:f6:67:47:0a:1e: 31:e8:1e:86:c0:93:88:d7:f4:e0:26:7b:f1:a2:66: fd:db:5b:d5:f2:7f:ed:1d:3f:34:df:54:13:56:eb: c0:50:fe:2c:86:42:fe:47:92:ce:87:3c:e5:06:56: d2:50:6b:d2:d8:3d:e3:b8:f4:2d:59:c5:ad:63:ef: cb:a6:73:19:35:c9:32:3d:fd:cc:59:40:b8:70:31: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:E0:E7:B6:D7:F0:D8:46:2F:E4:BE:D2:14:53:9A:A6:C3:FA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl X509v3 Authority Key Identifier: keyid:15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer sbgp-ipAddrBlock: critical IPv4: 23.147.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:41:9b:0c:dc:43:e4:c4:33:e1:f1:c9:e5:7f:04:cc:e9:4a: 39:ab:e3:ad:aa:62:a8:62:ba:d3:c2:54:71:2e:e7:1b:7f:15: ad:10:10:ff:e1:86:a0:b8:41:27:37:6f:4f:e7:9a:b4:2b:82: 98:2d:5e:c8:1c:de:ac:3a:e6:a0:6b:6b:0d:1e:d5:4f:d6:55: 5f:6f:51:8f:6f:68:02:6b:da:d6:ac:d0:0d:fe:7f:2d:c6:9c: 0d:c9:bd:3d:3e:60:d0:de:b7:7d:fe:55:3d:22:68:7a:89:eb: 54:bc:c8:58:26:86:ae:4a:5b:54:37:f9:04:20:34:6c:ec:f8: 7c:a9:f0:e3:e1:c6:32:e9:d5:75:31:38:7f:21:8b:75:62:26: 1e:8e:e5:1c:5d:8a:f9:a4:fe:ce:09:ee:81:f4:45:ae:dc:2e: fe:95:49:ea:2a:f2:06:f2:9e:dd:0b:42:92:76:e7:16:7e:be: c1:53:54:79:a9:ea:7c:b2:f3:83:ab:ff:ca:58:c3:87:e9:0d: b3:4c:56:ec:da:20:3f:1b:94:1c:f9:6c:43:1a:2b:44:71:e2: c1:6f:07:4a:ff:78:17:22:c1:bd:24:a9:06:ae:03:34:75:9e: 40:76:9a:e8:8e:5f:74:42:94:9a:64:90:8d:91:7c:8c:65:a4: 3e:1b:e6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPYmeswSkARyb+O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ3N2QyNWEtOTgxZC00ZWI0LTlmZDgtN2VlYTkxNGEy ODQwMB4XDTI1MTAxODA3MDYzNFoXDTI2MDExNjA4MDYzNFowLzEtMCsGA1UEAxMk MmNmYzk4ZDctZDE0MC00MWJlLTkxM2QtZjM3NDU3NjdmZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyT5WmbQ9HOPo0Vt0vc0oX0ApGt6XrpdB+it Arp4Tkcl+B3nf/vuPqdk+SMcVgATPYm8DVFV8ZCY8SxInlnLZpT+BLfa7hnJ0R8E vA6iYZ/x0fl6rYib6bDtdma7DrWQcvgNk/gwIf3D9VeTmeXGcmV9Fgl7FnITNRSo 26bx74C4yW4EPDLSaTAEMpHiQrLDL0Vp6VCacCMc/SIioJ+sx7OjNCEQyb0zwjCG Wtkh9mdHCh4x6B6GwJOI1/TgJnvxomb921vV8n/tHT8031QTVuvAUP4shkL+R5LO hzzlBlbSUGvS2D3juPQtWcWtY+/LpnMZNckyPf3MWUC4cDFmYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO44Oe21/DYRi/kvtIUU5qmw/olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDc3 ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVhOTE0YTI4NDAvYTllMzA3Y2ItYmM2ZC0z MThiLTk2NTktNmI2NDNlNjE1MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTQ3N2QyNWEtOTgxZC00ZWI0LTlm ZDgtN2VlYTkxNGEyODQwLzk0NzdkMjVhLTk4MWQtNGViNC05ZmQ4LTdlZWE5MTRh Mjg0MC5jcmwwHwYDVR0jBBgwFoAUFQukmWti1AsFPBwT1LQuSaVEi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NDc3ZDI1YS05ODFkLTRlYjQtOWZkOC03ZWVh OTE0YTI4NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlBmwzcQ+TEM+HxyeV/BMzpSjmr462qYqhiutPCVHEu5xt/Fa0QEP/h hqC4QSc3b0/nmrQrgpgtXsgc3qw65qBraw0e1U/WVV9vUY9vaAJr2tas0A3+fy3G nA3JvT0+YNDet33+VT0iaHqJ61S8yFgmhq5KW1Q3+QQgNGzs+Hyp8OPhxjLp1XUx OH8hi3ViJh6O5Rxdivmk/s4J7oH0Ra7cLv6VSeoq8gbynt0LQpJ25xZ+vsFTVHmp 6nyy84Or/8pYw4fpDbNMVuzaID8blBz5bEMaK0Rx4sFvB0r/eBciwb0kqQauAzR1 nkB2muiOX3RClJpkkI2RfIxlpD4b5qM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:35 2025 by rpki-client