$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: nDWBdrjtgoKLrTLpE8lwoBBCD/E3oV/mqo1Jim10azU= Subject key identifier: 9C:6F:09:05:DC:DA:B7:D3:D0:12:8B:B9:3B:88:D5:28:1E:2E:B0:21 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584B4081A70E1FC67A9CB51B0F60 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a7:0e:1f:c6:7a:9c:b5:1b:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=1f91d118-c72f-4ea2-956c-15641dd978c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:4a:be:37:3e:c2:48:e9:83:79:d4:0d:6d: 7b:5d:5f:0b:6a:1a:ab:f9:40:40:7e:60:85:30:15: b7:9c:d7:92:14:53:a0:d7:3c:4f:93:13:45:2f:d2: 0b:e2:df:41:d9:ea:5e:02:39:49:d3:d8:c2:d4:62: de:ab:4e:02:5f:de:03:46:9a:7e:31:10:35:40:14: 37:e5:b5:16:14:b0:d6:63:f1:7f:45:33:e6:86:3c: 38:22:0e:28:7e:57:1f:81:00:4f:16:25:47:59:5a: ef:71:75:b7:2e:be:ae:43:0b:23:a0:2f:d7:9c:6f: 28:e7:3e:7f:8b:a9:f6:7c:2b:f7:b8:f2:c4:3c:2f: b8:ab:13:08:19:d2:65:12:d3:31:a8:7d:f1:55:c4: 04:6c:ee:4b:ab:07:ad:0f:08:ad:7f:49:f5:6f:ec: fe:53:5e:aa:f8:49:4d:c1:12:d5:4a:71:00:53:2b: 5a:51:17:99:15:55:56:55:ba:ba:40:1d:e1:7e:76: b9:84:22:be:0a:d6:ae:47:c4:45:a6:69:72:c4:0c: 42:7c:8e:45:6f:fe:8d:34:17:16:15:05:c4:1d:f3: 26:f1:92:05:e2:f8:1d:ac:b0:22:79:cd:26:b9:4c: 41:e3:37:c2:cb:55:90:2a:b8:96:26:1d:ea:76:a1: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6F:09:05:DC:DA:B7:D3:D0:12:8B:B9:3B:88:D5:28:1E:2E:B0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:45:0f:0d:c0:9e:7d:dc:93:a0:db:30:95:aa:f2:81:7c:f3: 2b:a2:f4:c1:70:28:c1:d2:bc:4a:19:ba:a1:62:20:5b:9f:91: 31:4e:20:7c:c0:79:0e:08:b4:92:56:de:6c:5c:c6:e4:38:68: 4d:eb:5c:eb:84:7f:11:fa:ee:cb:ea:45:73:bc:6a:5a:22:88: 2a:d2:57:c3:ea:c8:cb:73:de:be:5a:0f:95:50:5c:82:30:b1: f0:27:e6:6f:8d:9e:be:9c:ce:e5:24:27:5d:9c:d5:7d:a1:35: f5:da:c4:15:91:eb:d3:1f:d4:6c:77:31:a6:15:8a:74:66:c8: 00:ad:69:cd:d3:04:c6:c1:08:b1:8e:f6:28:dc:aa:ee:3e:31: 4a:62:ce:fb:77:04:cd:3a:63:1f:84:04:72:ad:fe:fa:6d:3e: 37:96:24:55:28:e6:18:55:d9:38:cc:32:96:f6:65:ff:5c:bc: f7:09:9e:4c:2f:66:b0:1b:8b:23:4d:5a:c7:fd:73:b2:98:65: 67:56:e1:c4:61:71:b2:35:1c:e2:7e:f4:2a:e5:82:9e:c9:e7: ae:32:03:05:82:18:78:9d:bf:ee:be:5e:82:3c:b3:a5:63:0e: 16:47:0f:2e:6c:2d:66:10:47:61:0b:b3:9b:52:29:96:33:4d: 59:58:d8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgacOH8Z6nLUbD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MWY5MWQxMTgtYzcyZi00ZWEyLTk1NmMtMTU2NDFkZDk3OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDZKvjc+wkjpg3nUDW17XV8Lahqr+UBAfmCF MBW3nNeSFFOg1zxPkxNFL9IL4t9B2epeAjlJ09jC1GLeq04CX94DRpp+MRA1QBQ3 5bUWFLDWY/F/RTPmhjw4Ig4oflcfgQBPFiVHWVrvcXW3Lr6uQwsjoC/XnG8o5z5/ i6n2fCv3uPLEPC+4qxMIGdJlEtMxqH3xVcQEbO5LqwetDwitf0n1b+z+U16q+ElN wRLVSnEAUytaUReZFVVWVbq6QB3hfna5hCK+CtauR8RFpmlyxAxCfI5Fb/6NNBcW FQXEHfMm8ZIF4vgdrLAiec0muUxB4zfCy1WQKriWJh3qdqHSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxvCQXc2rfT0BKLuTuI1SgeLrAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5FDw3Ann3ck6DbMJWq8oF88yui9MFwKMHSvEoZuqFiIFufkTFOIHzA eQ4ItJJW3mxcxuQ4aE3rXOuEfxH67svqRXO8aloiiCrSV8PqyMtz3r5aD5VQXIIw sfAn5m+Nnr6czuUkJ12c1X2hNfXaxBWR69Mf1Gx3MaYVinRmyACtac3TBMbBCLGO 9ijcqu4+MUpizvt3BM06Yx+EBHKt/vptPjeWJFUo5hhV2TjMMpb2Zf9cvPcJnkwv ZrAbiyNNWsf9c7KYZWdW4cRhcbI1HOJ+9Crlgp7J564yAwWCGHidv+6+XoI8s6Vj DhZHDy5sLWYQR2ELs5tSKZYzTVlY2Kc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:57 2025 by rpki-client