$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/16d88df4-fe82-3441-a34e-87b3d2d1ccef.roa File: 16d88df4-fe82-3441-a34e-87b3d2d1ccef.roa (raw, json) Hash identifier: ewtCCmvgG4FrfqxJQ00hfVV44pSZlHZjVMFrMZc66Nc= Subject key identifier: 7E:A4:20:BC:CA:AC:D9:6D:05:7B:50:42:AA:CC:E9:21:83:F7:E6:D2 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584B56D74C90BC9B78F95034ED80 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/16d88df4-fe82-3441-a34e-87b3d2d1ccef.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 54696 IP address blocks: 23.148.155.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4c:90:bc:9b:78:f9:50:34:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=25380e46-dc1b-464d-8b0c-a6154f238038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:e9:20:55:44:f6:fa:a4:b6:43:76:45:a2: a7:23:83:6f:30:32:e3:41:73:9e:da:f7:b0:15:b8: 22:ff:7e:bd:91:f1:fb:e7:40:00:8f:c9:d1:22:e8: 4c:c0:6d:27:b9:48:50:8a:83:3a:8d:62:60:04:28: 58:11:73:8f:f2:1d:3a:42:a8:ad:08:53:96:2e:0a: b6:00:7f:d0:7f:20:04:af:ab:58:78:f1:50:fc:bf: e6:a1:48:be:24:41:b8:f1:d9:a7:86:fe:4b:d4:17: 86:32:2c:f6:9e:ec:9b:0b:4d:3b:a7:ff:08:44:b5: 8e:df:f4:17:5b:cb:58:9d:bc:12:13:cd:fd:c0:68: 6d:d5:d4:39:0d:b4:1d:9a:63:54:93:b4:8e:19:0b: b9:84:75:c6:62:e9:a8:e2:3e:22:16:12:6a:ba:43: bd:6e:f7:8d:2d:62:4c:2b:67:c4:8b:a7:31:e9:d2: 02:b5:3a:e5:29:aa:db:28:ab:93:b7:48:cc:45:e0: 6b:ea:43:a0:f5:3f:b9:98:78:b1:39:bc:d1:82:81: 96:04:c7:53:90:9b:36:7a:03:6c:ad:19:06:70:91: 7d:e8:b9:7f:0b:aa:e5:d5:63:73:7d:07:b6:3e:54: e9:a4:d8:2e:37:54:e1:55:97:16:e1:e6:83:60:c4: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A4:20:BC:CA:AC:D9:6D:05:7B:50:42:AA:CC:E9:21:83:F7:E6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/16d88df4-fe82-3441-a34e-87b3d2d1ccef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b0:a5:e9:50:48:10:da:f7:3a:ae:e3:0c:f0:b1:21:7f:6f: 00:b5:e2:fd:02:98:0a:a6:bf:47:c3:2a:0c:18:6c:c9:cf:a3: 5c:0f:02:05:5c:5c:71:68:22:8d:14:08:50:7a:37:cd:56:43: 83:74:3a:35:c1:c7:cf:1e:9e:9e:4f:68:55:1c:e2:45:17:d1: bf:d9:08:53:0d:a8:7f:f5:a3:c7:a0:0a:34:0b:62:08:b7:0b: 1d:b5:b8:ac:fa:16:3c:f7:6f:a4:53:81:84:79:57:21:72:e2: d6:c0:52:d7:fa:e5:2b:3c:44:a3:24:0c:63:20:90:c8:66:cf: 74:14:b6:a9:1a:48:47:21:a4:c6:34:a9:3c:4c:ff:67:83:8a: 90:73:ee:1d:0a:03:9e:79:4d:f3:76:86:5b:ad:c9:b0:42:bc: 97:a9:cd:57:b2:82:46:1f:4c:e6:6a:8b:c9:3d:81:c1:b7:a5: 1e:d2:d2:80:eb:fa:20:39:3a:ac:24:f7:c1:a0:dc:ac:c0:fe: c1:a1:35:1c:94:c9:5d:5e:ec:4e:07:0e:06:01:bf:4a:4e:59: 3f:d3:ed:8a:fc:3f:35:05:a0:c8:be:4d:e2:69:76:67:54:04: f7:e2:b0:fc:4f:5b:8a:48:a7:68:42:b9:5c:21:b8:30:24:71: 97:73:7e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10yQvJt4+VA07YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MjUzODBlNDYtZGMxYi00NjRkLThiMGMtYTYxNTRmMjM4MDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYzpIFVE9vqktkN2RaKnI4NvMDLjQXOe2vew Fbgi/369kfH750AAj8nRIuhMwG0nuUhQioM6jWJgBChYEXOP8h06QqitCFOWLgq2 AH/QfyAEr6tYePFQ/L/moUi+JEG48dmnhv5L1BeGMiz2nuybC007p/8IRLWO3/QX W8tYnbwSE839wGht1dQ5DbQdmmNUk7SOGQu5hHXGYumo4j4iFhJqukO9bveNLWJM K2fEi6cx6dICtTrlKarbKKuTt0jMReBr6kOg9T+5mHixObzRgoGWBMdTkJs2egNs rRkGcJF96Ll/C6rl1WNzfQe2PlTppNguN1ThVZcW4eaDYMQ+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6kILzKrNltBXtQQqrM6SGD9+bSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvMTZkODhkZjQtZmU4Mi0z NDQxLWEzNGUtODdiM2QyZDFjY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICwpelQSBDa9zqu4wzwsSF/bwC14v0CmAqmv0fDKgwYbMnPo1wPAgVc XHFoIo0UCFB6N81WQ4N0OjXBx88enp5PaFUc4kUX0b/ZCFMNqH/1o8egCjQLYgi3 Cx21uKz6Fjz3b6RTgYR5VyFy4tbAUtf65Ss8RKMkDGMgkMhmz3QUtqkaSEchpMY0 qTxM/2eDipBz7h0KA555TfN2hlutybBCvJepzVeygkYfTOZqi8k9gcG3pR7S0oDr +iA5Oqwk98Gg3KzA/sGhNRyUyV1e7E4HDgYBv0pOWT/T7Yr8PzUFoMi+TeJpdmdU BPfisPxPW4pIp2hCuVwhuDAkcZdzflQ= -----END CERTIFICATE-----Generated at Wed Oct 22 00:40:14 2025 by rpki-client