$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa File: f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa (raw, json) Hash identifier: 3vWbA0hEJe0f+rTxIjxE798336Q4Tf6GLdIYt35H10A= Subject key identifier: 15:7F:5C:F8:7F:EC:ED:D6:6A:A7:A7:EE:72:63:CA:F7:FC:EA:51:D8 Certificate issuer: /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Certificate serial: 010D0C9F4328584B838216AA3FA82EBFFB61C900 Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 401736 IP address blocks: 23.142.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:16:aa:3f:a8:2e:bf:fb:61:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=eef720a4-ec0d-4f10-b4da-ce9d35d7c0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:80:c0:54:6d:77:4b:8a:23:03:c4:3f:1d: 6a:a3:37:07:8b:45:b2:47:9e:47:5c:ef:48:2d:07: 3b:80:f4:c3:8e:49:b3:35:12:8c:b1:e3:3b:27:de: 54:29:da:f9:53:d8:fd:0a:bf:b5:7f:6d:1c:18:3f: 85:b6:4e:f3:61:c1:87:e0:ff:e7:6a:4c:62:02:94: 3b:a2:4b:f2:f0:c2:3f:05:85:fb:7d:4c:8f:67:6c: 1c:a3:e3:c1:37:07:73:d1:09:81:d7:3b:8d:b7:06: a5:72:12:61:39:e4:75:fe:b7:b6:00:c3:95:c2:aa: 52:94:9a:9a:8a:45:f1:06:fd:57:9e:80:37:2a:f0: 18:2a:d3:ec:6a:26:83:b8:9e:72:be:a0:46:23:ef: 60:64:05:29:00:0f:9e:c6:22:40:71:c5:e1:b5:2b: 00:17:4d:63:5e:8d:36:db:cb:f6:39:2a:44:5e:ed: 22:3a:1c:c8:51:ff:fc:31:4e:9c:12:7f:c6:59:4e: 97:38:79:a2:ff:3d:04:ff:21:16:43:61:bc:92:5e: fb:a4:2d:c7:25:22:22:43:42:a5:0d:96:52:91:9f: bc:c7:1d:3f:23:43:1b:b9:41:92:3b:a9:8a:df:1c: 7a:81:85:3d:7c:07:99:10:d3:77:37:c5:96:52:0e: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7F:5C:F8:7F:EC:ED:D6:6A:A7:A7:EE:72:63:CA:F7:FC:EA:51:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl X509v3 Authority Key Identifier: keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer sbgp-ipAddrBlock: critical IPv4: 23.142.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:39:3c:88:15:22:f0:d6:2a:80:18:18:a6:95:c8:f8:6a:9c: bb:34:b5:62:fc:49:95:df:62:06:ef:5b:98:35:d3:02:5a:ff: a8:ff:67:8b:70:f0:96:92:d3:dd:12:a3:a1:1a:5e:bb:d6:fe: f4:77:7f:e0:e7:dc:eb:12:c9:27:7f:3c:2a:57:0e:4a:cc:72: 7d:ad:88:30:fc:e6:bb:f6:e5:d4:41:09:c5:03:f0:1a:75:8d: 28:29:53:a3:a8:4c:d9:61:57:44:65:03:32:ab:51:1d:1e:ac: ff:0a:76:ec:97:91:87:04:72:97:f1:c8:21:1a:8b:ae:c0:8c: 2a:a8:6b:5f:8f:fa:c6:89:21:18:7e:2e:6d:69:1b:32:da:17: c5:fe:d1:17:2e:1c:a4:cc:bb:11:a6:0c:66:4b:86:02:1c:e6: 74:07:56:b7:6b:9f:f2:c0:e9:de:6e:9f:ad:22:bf:af:ac:ab: 43:5d:61:76:f5:0f:b7:8c:db:88:3b:f1:c3:33:67:f4:05:ad: 76:ac:16:52:1e:b2:cd:ce:73:0d:17:22:58:44:b3:2d:b6:60: 8b:97:34:c7:c7:f5:f0:ae:83:df:75:4d:2a:58:8c:1a:26:a3: 18:93:b0:ff:92:8a:73:1e:ab:f2:46:27:14:1b:7d:0d:0d:34: fd:ab:40:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDghaqP6guv/thyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q0ZDFmNTUtYWIzNS00YzM1LTkwMzctZTU2ZGRkODMz MTY4MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk ZWVmNzIwYTQtZWMwZC00ZjEwLWI0ZGEtY2U5ZDM1ZDdjMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAuAwFRtd0uKIwPEPx1qozcHi0WyR55HXO9I LQc7gPTDjkmzNRKMseM7J95UKdr5U9j9Cr+1f20cGD+Ftk7zYcGH4P/nakxiApQ7 okvy8MI/BYX7fUyPZ2wco+PBNwdz0QmB1zuNtwalchJhOeR1/re2AMOVwqpSlJqa ikXxBv1XnoA3KvAYKtPsaiaDuJ5yvqBGI+9gZAUpAA+exiJAccXhtSsAF01jXo02 28v2OSpEXu0iOhzIUf/8MU6cEn/GWU6XOHmi/z0E/yEWQ2G8kl77pC3HJSIiQ0Kl DZZSkZ+8xx0/I0MbuUGSO6mK3xx6gYU9fAeZENN3N8WWUg42hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV/XPh/7O3Waqen7nJjyvf86lHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRk MWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZkZGQ4MzMxNjgvZjIxZGM2ZmEtYTMwYi0z NWIzLWEyZDUtNjFiOWViY2VkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2Q0ZDFmNTUtYWIzNS00YzM1LTkw MzctZTU2ZGRkODMzMTY4LzdkNGQxZjU1LWFiMzUtNGMzNS05MDM3LWU1NmRkZDgz MzE2OC5jcmwwHwYDVR0jBBgwFoAUj0SV22NYyzwm/QC+u5uv6rcsmWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRkMWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZk ZGQ4MzMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA5PIgVIvDWKoAYGKaVyPhqnLs0tWL8SZXfYgbvW5g10wJa/6j/Z4tw 8JaS090So6EaXrvW/vR3f+Dn3OsSySd/PCpXDkrMcn2tiDD85rv25dRBCcUD8Bp1 jSgpU6OoTNlhV0RlAzKrUR0erP8KduyXkYcEcpfxyCEai67AjCqoa1+P+saJIRh+ Lm1pGzLaF8X+0RcuHKTMuxGmDGZLhgIc5nQHVrdrn/LA6d5un60iv6+sq0NdYXb1 D7eM24g78cMzZ/QFrXasFlIess3Ocw0XIlhEsy22YIuXNMfH9fCug991TSpYjBom oxiTsP+SinMeq/JGJxQbfQ0NNP2rQHU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:52 2025 by rpki-client