$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa File: bedc2541-9f1d-3098-ad90-8907351a956b.roa (raw, json) Hash identifier: nVMEfXIdHT/JnT0iXJa+N4sIyjW/JuOaFRgXYsImzsI= Subject key identifier: D7:22:A4:32:30:89:9A:07:7E:97:F5:E8:32:4D:27:76:5E:A0:46:45 Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F4328584B63673D759677F31034FC8440 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 8095 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3d:75:96:77:f3:10:34:fc:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=243b49f7-1374-4539-9ea9-22e1b8f70708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:d0:c3:e2:10:b8:c1:eb:86:9d:05:cb:a9: 6d:1d:81:5a:7a:43:58:cc:88:41:4b:ea:8a:e3:ea: c3:1e:a5:b4:8a:96:84:8f:d4:f2:c4:65:31:da:42: ff:6b:06:0a:27:50:a9:24:75:e6:91:d8:10:0e:bc: 8b:02:43:51:58:f0:8c:37:8b:dc:2e:3c:41:d0:d7: df:6f:31:74:40:e3:9a:c5:d1:bb:7e:92:c4:ef:7c: 9a:35:5b:53:63:7d:a7:5b:23:d7:e4:6e:ce:2a:39: 00:e5:17:4e:18:5c:d7:67:eb:85:d7:b1:d3:7c:a8: 79:90:54:a1:8c:38:0b:c7:0d:b5:02:a0:11:c3:07: 9d:ba:8d:46:f6:18:12:1b:3c:cf:f5:f4:fa:00:02: a8:e6:42:2a:5b:b8:2f:56:f1:ed:53:aa:f1:49:4e: b1:90:2f:07:2a:d7:61:45:3b:3a:f4:f7:19:2a:0d: b0:b3:d1:ca:59:cf:e0:12:77:9a:26:eb:b9:5d:be: 29:a7:63:3b:3a:4c:01:45:5d:ba:49:18:0a:04:fc: 81:24:b2:e6:50:84:1a:56:7f:43:04:49:78:a0:18: c6:9b:ab:a6:c1:2c:4f:df:1f:f5:af:be:e8:0c:db: 69:a2:6d:9e:e9:ce:3c:a6:1d:14:7a:13:7a:78:a6: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:A4:32:30:89:9A:07:7E:97:F5:E8:32:4D:27:76:5E:A0:46:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5b:e9:1c:81:64:a7:ed:e6:6a:82:f5:4e:85:04:26:39:82: 70:13:36:82:ea:e6:2f:86:b5:36:96:5f:31:c7:8b:fc:1a:ec: e2:b1:24:c0:7e:a0:b4:79:5a:4d:34:ff:59:ab:8c:cd:23:e3: 0e:40:81:d1:f5:af:9a:17:e8:96:28:46:83:67:e3:85:72:cf: 62:c8:fa:63:1c:92:51:70:d6:6c:d6:a2:a7:1d:fb:5c:ec:2f: 15:20:65:42:d2:69:eb:d3:82:20:02:d1:ef:5b:e1:a8:95:ae: f5:d3:59:24:44:61:f2:01:64:0e:fa:3d:0a:12:cc:91:1f:5b: a6:0f:e4:92:ce:bc:93:9b:c5:62:cd:66:51:38:91:c0:b6:e1: e8:b0:92:da:82:d9:fd:39:f6:28:e6:bf:07:29:68:98:cc:4f: 7c:72:85:48:73:e8:3b:45:9e:97:72:29:a0:de:0a:0e:0d:26: 39:5d:d7:0e:81:c2:5a:53:b8:7e:3d:de:fc:fb:f8:9f:e4:77: 01:35:8c:22:4b:a3:fb:65:c0:ad:d4:65:c4:69:c2:62:bf:61: f9:66:8b:5e:ca:0f:52:71:a4:f5:36:20:8b:75:a0:d7:32:a5: b3:5a:c1:e5:12:36:04:a8:83:48:90:f5:a9:0e:55:13:05:0e: 40:d3:63:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz11lnfzEDT8hEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MjQzYjQ5ZjctMTM3NC00NTM5LTllYTktMjJlMWI4ZjcwNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseHQw+IQuMHrhp0Fy6ltHYFaekNYzIhBS+qK 4+rDHqW0ipaEj9TyxGUx2kL/awYKJ1CpJHXmkdgQDryLAkNRWPCMN4vcLjxB0Nff bzF0QOOaxdG7fpLE73yaNVtTY32nWyPX5G7OKjkA5RdOGFzXZ+uF17HTfKh5kFSh jDgLxw21AqARwweduo1G9hgSGzzP9fT6AAKo5kIqW7gvVvHtU6rxSU6xkC8HKtdh RTs69PcZKg2ws9HKWc/gEneaJuu5Xb4pp2M7OkwBRV26SRgKBPyBJLLmUIQaVn9D BEl4oBjGm6umwSxP3x/1r77oDNtpom2e6c48ph0UehN6eKa6NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcipDIwiZoHfpf16DJNJ3ZeoEZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvYmVkYzI1NDEtOWYxZC0z MDk4LWFkOTAtODkwNzM1MWE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVb6RyBZKft5mqC9U6FBCY5gnATNoLq5i+GtTaWXzHHi/wa7OKxJMB+ oLR5Wk00/1mrjM0j4w5AgdH1r5oX6JYoRoNn44Vyz2LI+mMcklFw1mzWoqcd+1zs LxUgZULSaevTgiAC0e9b4aiVrvXTWSREYfIBZA76PQoSzJEfW6YP5JLOvJObxWLN ZlE4kcC24eiwktqC2f059ijmvwcpaJjMT3xyhUhz6DtFnpdyKaDeCg4NJjld1w6B wlpTuH493vz7+J/kdwE1jCJLo/tlwK3UZcRpwmK/Yflmi17KD1JxpPU2IIt1oNcy pbNaweUSNgSog0iQ9akOVRMFDkDTY5M= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:13 2025 by rpki-client