$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa File: 5c61e36a-6107-3475-8f1b-e616b1350dbe.roa (raw, json) Hash identifier: flVeTOaXKdDUVbRe6WgCAdnlgWHtkRHQ9Rt0ixlPc74= Subject key identifier: F3:7E:4E:02:8D:EB:17:FB:21:CC:51:54:F7:27:EF:26:12:89:2A:3A Certificate issuer: /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Certificate serial: 010D0C9F4328584B8BE23CE00AF8E9CDC3955BC0 Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 401879 IP address blocks: 23.142.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:3c:e0:0a:f8:e9:cd:c3:95:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=8f74310e-b3b1-4a70-9243-4b3e1928f189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f2:2a:5d:dc:e9:64:aa:99:00:7d:c9:5f:a1: 54:3b:04:3b:27:74:24:e4:0b:96:23:64:ec:09:64: f5:9c:41:bb:83:52:ef:3e:00:53:a6:c8:e8:bc:b7: 79:a8:fb:9b:d1:4a:89:fc:9a:ab:24:01:36:19:17: 89:a6:bf:ce:1c:4d:96:58:32:d2:61:00:d9:c0:20: 23:35:0d:15:bc:ba:29:cb:1b:b0:2c:0c:08:b3:2f: 5d:1b:57:31:eb:39:e8:20:9b:71:b1:00:15:26:ab: 44:06:f9:c5:7f:36:8e:b4:cb:23:62:f9:40:c9:eb: 95:92:93:e9:b2:24:72:be:76:84:87:c6:1e:d6:d8: f1:01:52:32:77:50:54:db:42:be:66:9d:2a:1e:cf: 1f:f8:9a:ce:70:9f:fa:a2:bd:2d:22:9a:65:3e:b1: d1:0c:d6:39:0b:be:86:2e:c3:64:57:52:3e:c8:13: 58:63:94:65:91:42:51:dc:54:16:6a:69:9f:c1:84: 4e:e3:ac:30:cd:63:dc:be:04:d9:62:55:64:68:3b: f3:b0:fe:0c:c9:45:15:b1:b5:17:3e:f3:26:64:8b: b6:cd:e0:fd:ef:98:61:6b:1b:e2:7a:c3:c0:43:cc: 10:c3:0e:42:79:f5:47:11:c1:97:7d:40:ad:82:ca: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:4E:02:8D:EB:17:FB:21:CC:51:54:F7:27:EF:26:12:89:2A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl X509v3 Authority Key Identifier: keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer sbgp-ipAddrBlock: critical IPv4: 23.142.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9c:95:a4:d6:8d:a8:29:cc:00:f9:57:e7:13:50:cd:96:8d: a1:e3:1d:3a:27:39:15:1c:20:d0:70:3d:6d:37:e4:84:1d:dc: 0d:68:65:ee:35:63:91:48:5b:79:7f:d6:13:08:79:c6:5e:1c: 42:24:da:d2:5b:bc:9b:5a:3f:de:11:c6:c1:ba:6b:92:ea:7f: 6f:5f:3f:df:f1:21:1a:87:21:0d:0b:42:80:89:3a:e1:2f:3b: 37:7a:4b:36:eb:d5:c7:0a:b4:70:09:63:f6:43:a0:e7:7a:84: 87:95:09:83:90:dd:63:3d:04:3d:35:5f:09:05:b2:75:ee:d5: 17:5f:8c:69:1d:29:6b:c2:f5:df:b9:c9:90:ec:ab:c5:7f:90: a9:c0:8b:28:26:f9:69:45:f2:31:05:f1:75:33:2f:f6:04:10: 83:d1:6d:fa:a1:07:b4:42:9d:02:ab:42:4a:86:37:00:17:5d: 97:b9:e3:23:25:4b:dc:88:a7:61:a9:a3:19:ec:f7:b9:ce:20: 62:4f:4a:9c:ef:01:ac:eb:22:24:9b:6a:bb:b1:e7:20:31:3a: 5f:e9:15:74:60:2b:d3:eb:a5:a0:76:0e:18:66:06:cd:ce:85: 45:2f:87:e1:aa:cd:86:cc:a1:8f:f9:af:5a:6a:95:95:ca:e4: a6:5f:50:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jzgCvjpzcOVW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI0ZDk5NGMtMTk2Yi00YjRhLWEyYzAtMGYyZTRiNGFj ZjU0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OGY3NDMxMGUtYjNiMS00YTcwLTkyNDMtNGIzZTE5MjhmMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPIqXdzpZKqZAH3JX6FUOwQ7J3Qk5AuWI2Ts CWT1nEG7g1LvPgBTpsjovLd5qPub0UqJ/JqrJAE2GReJpr/OHE2WWDLSYQDZwCAj NQ0VvLopyxuwLAwIsy9dG1cx6znoIJtxsQAVJqtEBvnFfzaOtMsjYvlAyeuVkpPp siRyvnaEh8Ye1tjxAVIyd1BU20K+Zp0qHs8f+JrOcJ/6or0tIpplPrHRDNY5C76G LsNkV1I+yBNYY5RlkUJR3FQWammfwYRO46wwzWPcvgTZYlVkaDvzsP4MyUUVsbUX PvMmZIu2zeD975hhaxviesPAQ8wQww5CefVHEcGXfUCtgsp82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN+TgKN6xf7IcxRVPcn7yYSiSo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRk OTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJlNGI0YWNmNTQvNWM2MWUzNmEtNjEwNy0z NDc1LThmMWItZTYxNmIxMzUwZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWI0ZDk5NGMtMTk2Yi00YjRhLWEy YzAtMGYyZTRiNGFjZjU0LzFiNGQ5OTRjLTE5NmItNGI0YS1hMmMwLTBmMmU0YjRh Y2Y1NC5jcmwwHwYDVR0jBBgwFoAUGU3Xozsv0HPfJ9YW4+MgY3AlxyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRkOTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJl NGI0YWNmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF470MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2claTWjagpzAD5V+cTUM2WjaHjHTonORUcINBwPW035IQd3A1oZe41 Y5FIW3l/1hMIecZeHEIk2tJbvJtaP94RxsG6a5Lqf29fP9/xIRqHIQ0LQoCJOuEv Ozd6Szbr1ccKtHAJY/ZDoOd6hIeVCYOQ3WM9BD01XwkFsnXu1RdfjGkdKWvC9d+5 yZDsq8V/kKnAiygm+WlF8jEF8XUzL/YEEIPRbfqhB7RCnQKrQkqGNwAXXZe54yMl S9yIp2Gpoxns97nOIGJPSpzvAazrIiSbarux5yAxOl/pFXRgK9PrpaB2DhhmBs3O hUUvh+GqzYbMoY/5r1pqlZXK5KZfUCg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:53 2025 by rpki-client