$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa File: e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa (raw, json) Hash identifier: yjbm3icIOE+KtwQ6Fzsxix0amHHUbBJA8yCg+3yzp6A= Subject key identifier: 74:69:C2:D0:9C:C4:77:19:F3:F9:02:6B:4F:24:F8:69:8F:3C:1E:8F Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584B636748332738FB7FE465F480 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 8095 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:48:33:27:38:fb:7f:e4:65:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=e7a2be84-e61f-4886-a80d-9cb3f6ff1283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:60:60:c0:b7:45:5e:13:73:1c:20:f3:e9: e0:4a:58:53:25:72:26:65:9c:9e:7f:73:b8:7b:2e: ed:a0:38:c9:9a:0a:88:17:bd:57:37:12:fa:29:d4: 3c:09:b5:77:1c:e7:8a:24:33:e3:9d:f5:bb:e0:7c: d8:c2:9e:20:69:ee:c9:0b:13:e2:3f:fa:15:2a:7d: ae:3c:d0:cb:05:3d:db:24:82:cb:21:bd:6e:8c:90: 59:66:42:6c:c4:15:fc:01:ec:83:32:5c:38:5b:e5: 1c:46:18:1a:2a:91:a0:ce:4a:26:b9:2e:93:b8:de: c6:16:1d:8a:48:1e:f7:85:dc:ca:a7:bc:b0:ba:d5: c8:ca:8e:72:af:e9:48:0d:52:fd:c7:60:77:80:5a: 94:85:27:af:91:ad:f0:38:2f:e4:95:8c:36:72:cf: 2b:34:8f:e8:f8:43:27:6a:e1:97:d6:b9:cf:4e:56: 41:13:50:49:1c:5d:0c:d1:6d:a3:80:3c:c1:7f:8a: 95:b7:ab:55:f9:1a:15:7e:af:4a:29:b3:4b:37:0c: 6f:d1:cf:39:a2:bf:7b:bb:99:c5:1b:83:17:f4:a5: ab:2b:b2:70:ec:da:ee:a2:61:f7:86:6e:b9:b4:e6: e0:1e:3c:40:66:88:d9:d0:e1:21:0e:73:cb:66:5f: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:C2:D0:9C:C4:77:19:F3:F9:02:6B:4F:24:F8:69:8F:3C:1E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e6:37:cb:0b:55:99:97:dd:eb:1c:f5:4f:a9:9b:5a:4e:01: e4:58:92:4c:76:01:85:d3:52:ca:ee:d3:34:7d:3f:95:ab:5d: 93:68:90:00:4b:41:dd:75:78:d8:c7:da:1e:d4:02:8f:44:b2: 54:51:39:5a:a4:e6:d3:91:d9:6a:be:5d:b8:90:44:47:8d:4e: 02:ff:4d:3f:86:6e:89:59:a7:9f:64:b9:25:a7:17:87:d4:4b: 8a:e0:80:29:60:96:2c:14:5a:f7:8b:12:2e:14:34:28:a4:e0: c1:29:e6:6d:d6:92:3e:01:f7:98:10:a2:ba:77:80:ec:0f:c6: 1c:06:f2:a0:56:bb:b8:bc:e3:d5:d7:81:d2:1b:93:91:13:6e: 50:69:d8:ce:f7:ed:c9:3f:71:4f:0f:06:a5:f3:0d:f7:fc:ba: a6:a6:33:02:00:a8:7b:a2:a7:2f:ff:70:25:32:16:68:b9:10: 22:66:53:c3:03:33:33:9a:bd:9a:e1:fc:f7:1e:2a:95:e2:e1: 7c:10:4e:98:7a:fb:8a:cb:08:9a:dc:a9:85:5d:7e:f7:d0:56: 37:d6:fd:64:e1:00:02:e0:72:b3:71:1a:cb:ee:cd:9a:30:c2: aa:01:8e:0e:57:d4:62:86:b2:7d:17:c6:92:f8:7e:e8:ef:7d: 1c:0a:3b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0gzJzj7f+Rl9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTdhMmJlODQtZTYxZi00ODg2LWE4MGQtOWNiM2Y2ZmYxMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIRgYMC3RV4Tcxwg8+ngSlhTJXImZZyef3O4 ey7toDjJmgqIF71XNxL6KdQ8CbV3HOeKJDPjnfW74HzYwp4gae7JCxPiP/oVKn2u PNDLBT3bJILLIb1ujJBZZkJsxBX8AeyDMlw4W+UcRhgaKpGgzkomuS6TuN7GFh2K SB73hdzKp7ywutXIyo5yr+lIDVL9x2B3gFqUhSevka3wOC/klYw2cs8rNI/o+EMn auGX1rnPTlZBE1BJHF0M0W2jgDzBf4qVt6tV+RoVfq9KKbNLNwxv0c85or97u5nF G4MX9KWrK7Jw7NruomH3hm65tObgHjxAZojZ0OEhDnPLZl9NwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRpwtCcxHcZ8/kCa08k+GmPPB6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvZTg4ZDBiYjctYzRkNS0z NjY0LWI4ZjktMzdhZjFhMTg5ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrmN8sLVZmX3esc9U+pm1pOAeRYkkx2AYXTUsru0zR9P5WrXZNokABL Qd11eNjH2h7UAo9EslRROVqk5tOR2Wq+XbiQREeNTgL/TT+GbolZp59kuSWnF4fU S4rggClgliwUWveLEi4UNCik4MEp5m3Wkj4B95gQorp3gOwPxhwG8qBWu7i849XX gdIbk5ETblBp2M737ck/cU8PBqXzDff8uqamMwIAqHuipy//cCUyFmi5ECJmU8MD MzOavZrh/PceKpXi4XwQTph6+4rLCJrcqYVdfvfQVjfW/WThAALgcrNxGsvuzZow wqoBjg5X1GKGsn0XxpL4fujvfRwKOyE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:00 2025 by rpki-client