$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa File: 8b0ed026-e0d3-3184-87c2-e9755bc80733.roa (raw, json) Hash identifier: DqG6ycud18oR4CID+6e3VhiULykJcL3dbK8GpGTuKDY= Subject key identifier: 68:21:A2:D5:E1:2D:89:F9:60:01:98:EE:40:8C:AF:2F:E6:BE:8B:E2 Certificate issuer: /CN=deaf388e-6941-424e-9f96-abe06598e29c Certificate serial: 010D0C9F4328584B94421CD03A868FD8701DA160 Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401371 IP address blocks: 23.138.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1c:d0:3a:86:8f:d8:70:1d:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=cebcb6e7-300a-4d2c-a638-5b2b909c0a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:ab:58:56:77:1c:dc:0d:1e:30:4d:94:b0: a1:70:63:cb:16:e9:d0:8d:a3:fc:cc:13:2c:1d:7e: 7c:e7:cf:8c:d7:b6:53:64:3f:2a:da:d3:65:56:02: fb:09:b0:6f:72:5e:32:85:60:41:2b:de:ff:73:1b: 00:60:0c:03:92:a7:d4:0a:9a:a8:e4:e2:a9:ec:73: 3a:50:88:eb:83:6c:e1:7e:58:ae:32:c3:34:ab:ca: 36:f2:4b:1a:0e:ce:d3:1f:2c:61:c4:91:31:bc:12: 4b:9d:7c:69:7f:9f:32:aa:c3:0b:b0:ff:cc:3c:a9: 8b:d8:00:88:17:fe:8a:c5:94:b7:8c:80:1d:82:78: 94:b0:bf:57:c8:7f:ed:49:a5:74:8d:fd:95:f8:af: f9:2f:ff:ef:f8:43:91:ba:2f:9e:4a:77:01:f6:6e: d3:89:42:78:c8:bd:27:b7:4c:c0:31:2e:87:5b:79: a7:6d:ca:4f:74:12:af:a0:cc:65:61:8b:09:a6:d9: 30:8b:13:6a:ae:be:4b:8b:bd:ec:f4:33:b9:b5:36: 0d:7d:d3:ef:53:36:33:e1:bd:a4:b3:c6:81:8b:b8: 84:87:d1:30:21:a4:97:55:fb:4f:ac:55:da:9f:70: 82:fb:d1:b6:a4:f8:36:53:9e:af:c8:be:2e:41:3e: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:A2:D5:E1:2D:89:F9:60:01:98:EE:40:8C:AF:2F:E6:BE:8B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/8b0ed026-e0d3-3184-87c2-e9755bc80733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl X509v3 Authority Key Identifier: keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer sbgp-ipAddrBlock: critical IPv4: 23.138.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3b:54:d1:9b:99:71:b7:25:25:25:51:07:db:9b:a1:1d:a2: ae:ff:0b:3b:8c:d9:8d:16:e8:10:9f:3c:ac:05:4d:27:47:69: 34:68:32:fa:7a:1c:88:2e:76:4c:c7:55:e0:38:d9:72:92:95: 0a:0a:87:cf:b2:ae:e5:20:db:af:82:03:ed:18:57:5c:fd:63: 75:8b:d1:93:5c:1c:34:96:ff:87:5c:29:14:45:f3:40:50:a1: db:f8:a5:74:b8:23:e1:7f:57:b8:10:cb:9e:b2:0b:bd:eb:ef: ff:3d:fd:aa:5b:88:9d:b1:5e:38:a7:9b:05:e1:d3:96:4c:24: 5c:7b:84:7c:2b:34:52:41:ff:f4:0a:a7:dd:5a:05:2a:63:64: 84:0b:c4:ed:b8:ed:d9:40:ae:c3:09:7c:6b:dd:7d:f9:c9:94: 71:86:59:db:dc:6b:5b:b9:31:f7:b0:e6:d6:cd:9b:7e:21:88: 0a:21:30:03:b1:5d:c0:73:78:ee:4d:51:88:09:1a:03:a8:4f: a8:81:a3:fb:5d:dc:ba:31:0b:e0:e5:ce:a5:86:e1:a9:eb:53: 11:b9:16:f8:66:0d:02:26:3d:4b:d9:9e:5c:38:23:69:71:bc: 38:34:18:23:16:77:22:29:55:28:04:c5:47:77:be:8e:9a:62: f7:93:88:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQhzQOoaP2HAdoWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThl MjljMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Y2ViY2I2ZTctMzAwYS00ZDJjLWE2MzgtNWIyYjkwOWMwYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVarWFZ3HNwNHjBNlLChcGPLFunQjaP8zBMs HX5858+M17ZTZD8q2tNlVgL7CbBvcl4yhWBBK97/cxsAYAwDkqfUCpqo5OKp7HM6 UIjrg2zhfliuMsM0q8o28ksaDs7THyxhxJExvBJLnXxpf58yqsMLsP/MPKmL2ACI F/6KxZS3jIAdgniUsL9XyH/tSaV0jf2V+K/5L//v+EORui+eSncB9m7TiUJ4yL0n t0zAMS6HW3mnbcpPdBKvoMxlYYsJptkwixNqrr5Li73s9DO5tTYNfdPvUzYz4b2k s8aBi7iEh9EwIaSXVftPrFXan3CC+9G2pPg2U56vyL4uQT5bNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGghotXhLYn5YAGY7kCMry/mvoviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFm Mzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvOGIwZWQwMjYtZTBkMy0z MTg0LTg3YzItZTk3NTViYzgwNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVhZjM4OGUtNjk0MS00MjRlLTlm OTYtYWJlMDY1OThlMjljL2RlYWYzODhlLTY5NDEtNDI0ZS05Zjk2LWFiZTA2NTk4 ZTI5Yy5jcmwwHwYDVR0jBBgwFoAU08yKMqfd0vAFIgVggYqZufYSxWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUw NjU5OGUyOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs7VNGbmXG3JSUlUQfbm6Edoq7/CzuM2Y0W6BCfPKwFTSdHaTRoMvp6 HIgudkzHVeA42XKSlQoKh8+yruUg26+CA+0YV1z9Y3WL0ZNcHDSW/4dcKRRF80BQ odv4pXS4I+F/V7gQy56yC73r7/89/apbiJ2xXjinmwXh05ZMJFx7hHwrNFJB//QK p91aBSpjZIQLxO247dlArsMJfGvdffnJlHGGWdvca1u5Mfew5tbNm34hiAohMAOx XcBzeO5NUYgJGgOoT6iBo/td3LoxC+DlzqWG4anrUxG5FvhmDQImPUvZnlw4I2lx vDg0GCMWdyIpVSgExUd3vo6aYveTiIc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:24 2025 by rpki-client