$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/5fe3a3f0-f373-32d8-981c-3aa9e9ce4054.roa File: 5fe3a3f0-f373-32d8-981c-3aa9e9ce4054.roa (raw, json) Hash identifier: NG99txja2q1MUpqj+sutiEIqcnuSL0JBVrdXPoeyx9o= Subject key identifier: 5E:59:69:92:B3:F5:01:19:D2:D1:37:83:80:46:8F:EA:2A:7D:C0:9B Certificate issuer: /CN=2ca5e7d8-de7d-48b8-9cb1-491065714227 Certificate serial: 010D0C9F4328584B44412420312C8A7CD8443080 Authority key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/5fe3a3f0-f373-32d8-981c-3aa9e9ce4054.roa Signing time: Sun 21 Sep 2025 09:13:55 +0000 ROA not before: Sun 21 Sep 2025 09:13:55 +0000 ROA not after: Sat 20 Dec 2025 10:13:55 +0000 asID: 25618 IP address blocks: 23.144.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:41:24:20:31:2c:8a:7c:d8:44:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227 Validity Not Before: Sep 21 09:13:55 2025 GMT Not After : Dec 20 10:13:55 2025 GMT Subject: CN=af1cb094-f466-43b2-a034-f795a205cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:3d:9c:94:a0:9e:cb:81:ab:8a:96:94:03: a8:17:49:81:dc:77:7b:1d:97:74:92:53:ae:51:85: 81:88:08:bd:4e:71:5e:2a:bc:49:11:51:9c:9a:f2: db:74:b9:49:88:2b:4f:e0:a6:90:30:a8:30:af:b2: 68:d6:6c:94:93:91:b1:d9:6d:d6:82:92:7b:40:1e: 58:62:25:9c:c1:ed:f5:07:bb:58:b1:97:00:50:e7: 8e:01:a7:80:36:db:77:6d:3f:c2:28:22:31:8e:fb: 13:b5:c4:f5:c6:50:bd:a8:9f:90:24:6b:d2:db:fc: 32:06:9e:4b:f6:49:86:08:48:86:4f:8d:4f:40:66: 2f:23:f4:33:9c:27:77:0e:9a:eb:ad:ec:2b:05:c6: 8a:2a:c1:d9:92:06:6b:31:b6:95:c0:46:49:68:0d: 4f:b0:4b:2a:33:4e:34:a3:9b:51:ba:ad:66:1d:4b: d2:a1:cb:f2:09:ed:60:3f:cc:f2:a9:05:87:4e:33: 04:a8:e1:f3:5e:fb:13:30:3c:2b:63:f4:66:d1:1c: e7:33:05:d9:42:b7:a5:00:db:c5:d1:6f:26:e7:f6: 1e:db:24:90:8b:26:ee:11:99:b3:fc:d1:db:d0:96: c9:de:85:a1:9e:38:bc:b1:28:6d:16:1a:1d:02:85: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:59:69:92:B3:F5:01:19:D2:D1:37:83:80:46:8F:EA:2A:7D:C0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/5fe3a3f0-f373-32d8-981c-3aa9e9ce4054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl X509v3 Authority Key Identifier: keyid:26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer sbgp-ipAddrBlock: critical IPv4: 23.144.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:66:53:9d:23:02:1e:8b:f0:24:fe:fa:e4:49:51:a2:b4:17: bc:1b:5c:e3:27:5c:41:1a:1d:31:e3:7f:4f:7c:e8:7f:9e:f9: c1:32:b6:0d:1a:7f:22:c1:07:88:65:56:57:de:00:87:fd:f9: 38:d7:40:00:2d:4f:75:3c:24:9f:3d:22:8a:89:d5:78:81:e8: 5a:b9:be:2c:69:43:51:a6:3a:2c:48:9e:d6:3d:2d:03:22:55: f0:88:c8:7c:f9:a6:43:b9:89:ef:de:78:97:e8:ab:33:9a:6e: 65:bd:7a:aa:c3:9a:2e:cd:38:2c:cd:43:4f:8b:e6:8d:85:62: 4b:bc:07:89:9b:45:c1:58:f3:70:3c:3f:8d:fc:00:ba:f1:57: f8:61:80:ef:a5:d6:38:0c:5d:7f:20:75:f1:7e:95:bb:65:f9: b7:99:45:95:67:90:8f:51:34:19:dd:57:04:86:e0:58:6b:0f: 88:72:23:d3:d6:70:2f:78:a7:26:73:6c:6a:2e:c9:f4:e6:bf: 08:84:ac:87:5e:c4:cb:3a:68:a7:ab:e2:a4:bf:0c:83:d7:2a: d4:66:27:5c:34:16:f8:30:d4:31:49:74:c3:39:ca:ec:d6:55: f6:44:6d:90:4a:35:ab:24:e9:be:83:a8:8f:40:55:ad:76:44: 64:11:6c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEQSQgMSyKfNhEMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNWU3ZDgtZGU3ZC00OGI4LTljYjEtNDkxMDY1NzE0 MjI3MB4XDTI1MDkyMTA5MTM1NVoXDTI1MTIyMDEwMTM1NVowLzEtMCsGA1UEAxMk YWYxY2IwOTQtZjQ2Ni00M2IyLWEwMzQtZjc5NWEyMDVjYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pw9nJSgnsuBq4qWlAOoF0mB3Hd7HZd0klOu UYWBiAi9TnFeKrxJEVGcmvLbdLlJiCtP4KaQMKgwr7Jo1myUk5Gx2W3WgpJ7QB5Y YiWcwe31B7tYsZcAUOeOAaeANtt3bT/CKCIxjvsTtcT1xlC9qJ+QJGvS2/wyBp5L 9kmGCEiGT41PQGYvI/QznCd3DprrrewrBcaKKsHZkgZrMbaVwEZJaA1PsEsqM040 o5tRuq1mHUvSocvyCe1gP8zyqQWHTjMEqOHzXvsTMDwrY/Rm0RznMwXZQrelANvF 0W8m5/Ye2ySQiybuEZmz/NHb0JbJ3oWhnji8sShtFhodAoVFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ZaZKz9QEZ0tE3g4BGj+oqfcCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yY2E1 ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEwNjU3MTQyMjcvNWZlM2EzZjAtZjM3My0z MmQ4LTk4MWMtM2FhOWU5Y2U0MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmNhNWU3ZDgtZGU3ZC00OGI4LTlj YjEtNDkxMDY1NzE0MjI3LzJjYTVlN2Q4LWRlN2QtNDhiOC05Y2IxLTQ5MTA2NTcx NDIyNy5jcmwwHwYDVR0jBBgwFoAUJjqyNqEqE8wKepN2icSqqiQtipowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yY2E1ZTdkOC1kZTdkLTQ4YjgtOWNiMS00OTEw NjU3MTQyMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdmU50jAh6L8CT++uRJUaK0F7wbXOMnXEEaHTHjf0986H+e+cEytg0a fyLBB4hlVlfeAIf9+TjXQAAtT3U8JJ89IoqJ1XiB6Fq5vixpQ1GmOixIntY9LQMi VfCIyHz5pkO5ie/eeJfoqzOabmW9eqrDmi7NOCzNQ0+L5o2FYku8B4mbRcFY83A8 P438ALrxV/hhgO+l1jgMXX8gdfF+lbtl+beZRZVnkI9RNBndVwSG4FhrD4hyI9PW cC94pyZzbGouyfTmvwiErIdexMs6aKer4qS/DIPXKtRmJ1w0Fvgw1DFJdMM5yuzW VfZEbZBKNask6b6DqI9AVa12RGQRbGU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:02:06 2025 by rpki-client