$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa File: e19302d3-54e3-3784-8553-4362e2b89940.roa (raw, json) Hash identifier: 81VQZA0DIefyzI0JDArNlFgPR1Zf2jRwiYD5MTzjSB0= Subject key identifier: 0E:1C:5C:28:53:68:8A:97:5E:0D:4C:AB:CE:E8:76:72:51:C2:80:F0 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B715CA308E19B145EE1BEBB7A Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 210645 IP address blocks: 23.151.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a3:08:e1:9b:14:5e:e1:be:bb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=50a46023-49a5-4433-b5ff-7e61bb02db54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:60:7c:27:67:82:db:60:26:17:a1:48:08: a8:48:30:c4:3c:53:c0:24:54:54:d6:60:53:0e:85: d6:ab:6c:e7:08:4f:e3:6c:66:4d:6f:b5:45:30:94: 1e:cd:16:5d:65:a4:14:0b:47:c8:b1:51:12:ee:3a: 34:0a:7e:5e:20:ea:8a:0c:11:89:c5:af:28:bc:8c: d2:ec:f3:74:15:7b:aa:0e:67:6d:0d:b7:c4:2b:a8: ae:55:27:9d:04:f4:59:a1:ff:3e:b8:55:8e:9c:2d: 86:dc:23:5c:8b:f5:21:d6:17:b8:21:8d:f6:88:6e: 18:4d:db:22:09:1b:16:55:6d:97:76:57:37:30:9c: 9b:4a:ea:22:2b:9b:33:83:2c:30:d8:ab:6c:31:6c: fb:d0:69:a8:ac:68:ee:b6:87:92:d7:11:d9:b8:f7: 3d:18:7e:12:a6:7d:e3:7a:e4:9d:f6:14:d7:ed:93: 62:1a:90:34:2d:7d:0d:5a:51:1c:89:b6:9e:f4:52: 60:1e:51:bc:34:88:b1:c9:e8:0d:a2:24:66:bd:06: b0:2c:11:a9:9a:ed:d0:5f:c1:4f:c1:0c:18:64:b2: 82:55:ea:e5:97:50:33:fa:8b:a4:c8:97:a3:ac:02: 81:ee:9f:6b:e0:99:a5:02:06:f8:c5:6a:c4:a4:0d: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1C:5C:28:53:68:8A:97:5E:0D:4C:AB:CE:E8:76:72:51:C2:80:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 23.151.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:17:4a:38:4e:10:c5:58:33:57:a4:c4:ba:de:13:04:8b: 09:51:a0:65:40:50:f7:2b:86:a0:bb:40:f4:82:81:f5:a7:8a: 00:28:80:ab:93:78:7b:b2:ec:f9:dc:b7:23:bd:73:f8:87:cc: 3e:8a:d9:08:d9:ea:6a:97:43:6e:01:10:e6:ad:d3:dd:13:fb: e6:79:08:e0:5a:ed:e5:c7:d2:71:7b:0b:3b:1d:2f:be:c6:26: 02:95:9e:61:76:11:e9:ac:d6:ca:0b:dc:e5:1e:06:23:fc:43: 71:49:39:a9:cd:b1:5b:ea:d5:60:87:a3:da:8e:97:ad:ca:e5: 4a:ce:87:e3:f7:1c:08:7b:52:11:c2:a3:9a:9a:bb:ee:6a:90: f3:0e:4c:df:d2:d5:d9:a7:cb:50:ca:43:94:78:31:79:c8:65: 99:a3:96:66:85:6f:0a:08:4a:5b:b3:a0:38:8e:c5:ca:4c:74: 7c:ea:45:82:a9:58:7b:8f:3a:d5:36:48:0e:5f:f2:35:c3:ac: 4d:8c:b3:b1:b2:ef:2d:b5:40:5f:cd:7c:6c:30:0d:1d:22:98: f2:41:c1:cd:7a:93:d3:ed:61:fa:e3:1c:50:72:95:4a:85:7b: c2:6e:4c:85:6a:a7:5b:a9:66:91:86:d7:d0:7c:c7:47:e9:c3: 9e:08:62:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKMI4ZsUXuG+u3owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTBhNDYwMjMtNDlhNS00NDMzLWI1ZmYtN2U2MWJiMDJkYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp5gfCdngttgJhehSAioSDDEPFPAJFRU1mBT DoXWq2znCE/jbGZNb7VFMJQezRZdZaQUC0fIsVES7jo0Cn5eIOqKDBGJxa8ovIzS 7PN0FXuqDmdtDbfEK6iuVSedBPRZof8+uFWOnC2G3CNci/Uh1he4IY32iG4YTdsi CRsWVW2Xdlc3MJybSuoiK5szgyww2KtsMWz70GmorGjutoeS1xHZuPc9GH4Spn3j euSd9hTX7ZNiGpA0LX0NWlEcibae9FJgHlG8NIixyegNoiRmvQawLBGpmu3QX8FP wQwYZLKCVerll1Az+oukyJejrAKB7p9r4JmlAgb4xWrEpA1wRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4cXChTaIqXXg1Mq87odnJRwoDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTE5MzAyZDMtNTRlMy0z Nzg0LTg1NTMtNDM2MmUyYjg5OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdF0o4ThDFWDNXpMS63hMEiwlRoGVAUPcrhqC7QPSCgfWnigAogKuT eHuy7PnctyO9c/iHzD6K2QjZ6mqXQ24BEOat090T++Z5COBa7eXH0nF7CzsdL77G JgKVnmF2Eems1soL3OUeBiP8Q3FJOanNsVvq1WCHo9qOl63K5UrOh+P3HAh7UhHC o5qau+5qkPMOTN/S1dmny1DKQ5R4MXnIZZmjlmaFbwoISluzoDiOxcpMdHzqRYKp WHuPOtU2SA5f8jXDrE2Ms7Gy7y21QF/NfGwwDR0imPJBwc16k9PtYfrjHFBylUqF e8JuTIVqp1upZpGG19B8x0fpw54IYjo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:10 2025 by rpki-client