$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa File: 99f3809d-ec71-387f-b47f-d40d61add1c9.roa (raw, json) Hash identifier: QJMNxpLDz8JCId+j8imjX1QfbUqVSbLWKLyzGuU0k/A= Subject key identifier: 36:34:68:90:9E:50:2D:88:1E:E4:B5:F9:B4:B7:1E:59:25:C8:43:EC Certificate issuer: /CN=25d202df-6bec-4085-8c1b-d1f141557cfe Certificate serial: 010D0C9F4328584B4081A5F808023D036AF5C500 Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 211051 IP address blocks: 23.144.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a5:f8:08:02:3d:03:6a:f5:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b4c131af-cb60-4bcd-bd3c-dff00f654e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:8f:8b:81:95:72:30:20:0d:b0:18:f2:ca: 6d:82:69:1f:78:fc:46:7d:6b:f9:2c:11:b3:2d:ca: 5b:e0:96:b8:a9:28:a0:6f:3b:fa:c2:29:70:3f:85: d7:60:a9:00:23:05:82:a0:24:53:8c:75:b5:15:e8: 7f:63:c1:bb:a0:04:8e:47:70:7d:3b:51:d6:e3:9e: 8f:a4:10:4a:0b:85:ef:e6:1f:9a:fc:ab:f1:24:5a: 1c:95:82:f7:48:7e:46:ad:50:91:0b:b1:cf:ff:e1: b8:4c:0e:97:2e:e1:6d:f1:01:61:5f:c4:42:bd:7c: 55:1c:45:16:96:d9:09:5d:1e:ff:de:6b:4e:ed:b2: 71:9a:53:cd:47:d8:48:c1:6e:b8:1d:39:40:2a:a4: 84:1d:bf:de:c8:57:62:76:d7:e0:65:27:7c:68:03: 3c:d6:a4:dd:95:4f:6b:c3:2e:62:b2:43:ae:f0:e3: 31:26:30:01:f3:3f:c1:32:ea:d0:be:f0:af:db:4c: d1:82:b1:f0:80:7f:7d:e1:08:19:f9:78:78:5b:dc: 87:e6:1e:29:f5:5a:fa:a0:51:18:74:25:30:f6:d2: 84:19:73:31:8e:07:ab:75:fa:8f:c2:ee:a1:8a:50: 06:0e:2d:44:30:b6:b7:fc:db:0b:17:63:9c:48:83: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:68:90:9E:50:2D:88:1E:E4:B5:F9:B4:B7:1E:59:25:C8:43:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl X509v3 Authority Key Identifier: keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.144.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b3:77:c0:48:aa:71:75:73:7a:be:91:00:2d:b4:78:7c:c2: c5:d7:37:9e:c7:f1:53:03:f5:11:db:b5:a4:2e:50:13:34:f1: f5:53:74:69:d9:be:da:e3:e1:20:ac:05:e2:2c:c1:70:ff:67: 14:2c:61:fa:db:9a:ad:8b:71:dd:e5:42:f5:52:cd:77:6c:83: 38:c1:b2:d8:f6:73:aa:5c:ff:10:5e:9f:8e:2c:b1:ec:91:f5: 45:6d:8a:c4:ff:ab:0d:cb:e5:1b:56:77:a1:f6:55:50:93:7c: d2:03:10:2e:a4:b9:be:64:98:6c:cb:52:bc:40:fc:68:09:39: fc:a7:1e:f8:8c:c3:d2:64:98:19:1e:e6:cf:4a:a8:26:1c:cb: 2d:d8:13:84:77:76:a8:99:08:fd:06:54:cc:ad:ad:4a:75:84: e4:5b:77:f0:3f:5c:8b:73:99:bd:e1:55:72:ab:36:1f:86:61: 4d:21:a2:85:15:97:87:0b:a3:97:6f:3b:9b:1d:09:c7:08:d7: 39:6a:e8:62:90:b5:17:19:c6:e4:e7:e9:cb:e9:4e:97:b8:f0: 9f:12:84:99:bb:f0:1a:b3:0b:da:ed:46:c4:8e:94:bb:03:03: 86:f6:68:a1:da:01:ff:77:78:21:25:05:be:5d:30:06:f9:c0: 49:dc:6c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaX4CAI9A2r1xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3 Y2ZlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjRjMTMxYWYtY2I2MC00YmNkLWJkM2MtZGZmMDBmNjU0ZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRCPi4GVcjAgDbAY8sptgmkfePxGfWv5LBGz Lcpb4Ja4qSigbzv6wilwP4XXYKkAIwWCoCRTjHW1Feh/Y8G7oASOR3B9O1HW456P pBBKC4Xv5h+a/KvxJFoclYL3SH5GrVCRC7HP/+G4TA6XLuFt8QFhX8RCvXxVHEUW ltkJXR7/3mtO7bJxmlPNR9hIwW64HTlAKqSEHb/eyFdidtfgZSd8aAM81qTdlU9r wy5iskOu8OMxJjAB8z/BMurQvvCv20zRgrHwgH994QgZ+Xh4W9yH5h4p9Vr6oFEY dCUw9tKEGXMxjgerdfqPwu6hilAGDi1EMLa3/NsLF2OcSIO92QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY0aJCeUC2IHuS1+bS3HlklyEPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvOTlmMzgwOWQtZWM3MS0z ODdmLWI0N2YtZDQwZDYxYWRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1 N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKizd8BIqnF1c3q+kQAttHh8wsXXN57H8VMD9RHbtaQuUBM08fVTdGnZ vtrj4SCsBeIswXD/ZxQsYfrbmq2Lcd3lQvVSzXdsgzjBstj2c6pc/xBen44sseyR 9UVtisT/qw3L5RtWd6H2VVCTfNIDEC6kub5kmGzLUrxA/GgJOfynHviMw9JkmBke 5s9KqCYcyy3YE4R3dqiZCP0GVMytrUp1hORbd/A/XItzmb3hVXKrNh+GYU0hooUV l4cLo5dvO5sdCccI1zlq6GKQtRcZxuTn6cvpTpe48J8ShJm78BqzC9rtRsSOlLsD A4b2aKHaAf93eCElBb5dMAb5wEncbP8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:20 2025 by rpki-client