$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/c41ca9db-3e18-301c-9498-e37113d2e238.roa File: c41ca9db-3e18-301c-9498-e37113d2e238.roa (raw, json) Hash identifier: 7HJRJi7Xp5CeHa3tBmW1uY8Y+lS3j65fH664TsfyKR8= Subject key identifier: A0:AC:81:2C:67:FF:62:A9:46:76:64:38:98:E0:4D:D2:C7:C8:D1:A5 Certificate issuer: /CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Certificate serial: 010D0C9F4328584B75FABFEA2AD4C112AB37D380 Authority key identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/c41ca9db-3e18-301c-9498-e37113d2e238.roa Signing time: Thu 09 Oct 2025 04:42:30 +0000 ROA not before: Thu 09 Oct 2025 04:42:30 +0000 ROA not after: Wed 07 Jan 2026 05:42:30 +0000 asID: 152179 IP address blocks: 23.146.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:fa:bf:ea:2a:d4:c1:12:ab:37:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Validity Not Before: Oct 9 04:42:30 2025 GMT Not After : Jan 7 05:42:30 2026 GMT Subject: CN=eaf8f178-3936-4302-a561-ecab5e0134e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:ef:c3:1d:06:b9:c0:4e:f8:96:e1:08:0c: eb:36:e3:3d:18:93:41:0d:c8:02:94:51:3b:98:86: 06:f4:ab:40:c1:67:c3:e5:29:02:14:86:77:1d:02: b9:78:7c:71:da:48:6e:54:de:0f:0c:8a:93:fa:98: a1:58:3b:df:74:b0:50:5b:75:8e:e2:e4:1d:f8:80: c8:7b:6f:09:b3:b3:53:98:62:a9:b6:7d:81:b2:d4: 78:52:5d:d0:fd:bb:4f:3e:7d:4f:21:e1:22:2d:3c: 91:ed:9a:28:f4:78:a2:3b:3f:4e:23:98:90:91:c7: 07:84:11:0b:ee:55:02:ef:81:eb:c7:c6:8c:87:4c: 8c:3f:2d:71:09:23:2a:0c:1b:4d:d1:4e:44:2a:a7: 42:8b:a0:7d:59:7a:4a:8f:77:9d:3c:5e:eb:4f:8b: dd:c6:15:3a:d4:5a:97:74:4d:32:a2:a6:2d:f8:d5: 16:c2:c1:f4:83:4e:28:cd:34:4c:18:db:df:16:80: 4f:6a:fc:df:95:de:d6:3a:ff:3b:dc:a0:29:e7:56: 0b:df:2b:04:df:60:d5:e7:9f:40:5a:a0:28:2e:fc: b1:f9:24:f5:5e:08:2e:72:08:db:b2:0d:aa:16:af: 0e:fa:6d:8e:da:d1:65:55:ce:01:89:c9:7d:63:75: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:81:2C:67:FF:62:A9:46:76:64:38:98:E0:4D:D2:C7:C8:D1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/c41ca9db-3e18-301c-9498-e37113d2e238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl X509v3 Authority Key Identifier: keyid:B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer sbgp-ipAddrBlock: critical IPv4: 23.146.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:42:cc:53:14:d9:1e:35:ec:e0:b1:9a:5f:c9:bf:a4:3d:66: 2a:6c:8b:e4:3b:8c:c1:82:8f:18:41:46:7e:88:c8:e6:c1:20: 97:83:78:24:65:83:e9:40:54:59:74:fc:21:d3:22:a8:82:41: 88:d1:c9:00:ee:94:14:dc:e5:ac:cf:cc:20:c7:88:8a:14:b4: a4:b1:5c:11:8f:84:c6:ed:84:67:f5:25:b2:03:ec:26:6d:33: c3:78:bd:da:7f:73:f4:43:20:06:9f:79:01:97:4e:48:d3:dd: 05:6f:d5:f7:89:9a:5c:04:10:8c:28:f7:96:27:65:c8:b1:8f: 44:c7:23:27:c0:40:f3:80:36:27:af:c4:c4:fe:c4:c7:86:76: dc:da:9a:d6:7d:b5:f1:76:5d:1d:c4:6d:4f:69:bc:1d:d7:86: 09:58:e5:2a:cb:d1:2f:d0:2f:69:ee:23:b6:58:b2:09:53:ba: f1:c7:46:bc:46:c6:7c:af:d4:4d:0b:a0:af:6f:59:19:6c:39: 67:2c:87:b4:90:b4:1a:e5:cd:b0:00:1c:e3:ca:2a:d7:75:8c: e1:0d:c7:db:0f:ef:63:f0:f1:47:2b:ab:8a:8d:25:1a:39:32: c8:87:3a:24:bb:3f:0d:ff:4f:f0:32:1b:82:68:48:aa:91:60: 8b:e2:c5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1+r/qKtTBEqs304AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViMjViNmItOGZkZi00OWFhLThiODMtNTk1YTk0ZjQ0 ZjdlMB4XDTI1MTAwOTA0NDIzMFoXDTI2MDEwNzA1NDIzMFowLzEtMCsGA1UEAxMk ZWFmOGYxNzgtMzkzNi00MzAyLWE1NjEtZWNhYjVlMDEzNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfvwx0GucBO+JbhCAzrNuM9GJNBDcgClFE7 mIYG9KtAwWfD5SkCFIZ3HQK5eHxx2khuVN4PDIqT+pihWDvfdLBQW3WO4uQd+IDI e28Js7NTmGKptn2BstR4Ul3Q/btPPn1PIeEiLTyR7Zoo9HiiOz9OI5iQkccHhBEL 7lUC74Hrx8aMh0yMPy1xCSMqDBtN0U5EKqdCi6B9WXpKj3edPF7rT4vdxhU61FqX dE0yoqYt+NUWwsH0g04ozTRMGNvfFoBPavzfld7WOv873KAp51YL3ysE32DV559A WqAoLvyx+ST1Xggucgjbsg2qFq8O+m2O2tFlVc4Bicl9Y3UVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCsgSxn/2KpRnZkOJjgTdLHyNGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIy NWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRmNDRmN2UvYzQxY2E5ZGItM2UxOC0z MDFjLTk0OTgtZTM3MTEzZDJlMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWViMjViNmItOGZkZi00OWFhLThi ODMtNTk1YTk0ZjQ0ZjdlLzVlYjI1YjZiLThmZGYtNDlhYS04YjgzLTU5NWE5NGY0 NGY3ZS5jcmwwHwYDVR0jBBgwFoAUs7NzOmM6yq38yGjeXShecKySNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVh OTRmNDRmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdCzFMU2R417OCxml/Jv6Q9Zipsi+Q7jMGCjxhBRn6IyObBIJeDeCRl g+lAVFl0/CHTIqiCQYjRyQDulBTc5azPzCDHiIoUtKSxXBGPhMbthGf1JbID7CZt M8N4vdp/c/RDIAafeQGXTkjT3QVv1feJmlwEEIwo95YnZcixj0THIyfAQPOANiev xMT+xMeGdtzamtZ9tfF2XR3EbU9pvB3XhglY5SrL0S/QL2nuI7ZYsglTuvHHRrxG xnyv1E0LoK9vWRlsOWcsh7SQtBrlzbAAHOPKKtd1jOENx9sP72Pw8Ucrq4qNJRo5 MsiHOiS7Pw3/T/AyG4JoSKqRYIvixTY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:58 2025 by rpki-client