$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b1e75a0f-d486-3a5c-b144-0c8a9a108a82.roa File: b1e75a0f-d486-3a5c-b144-0c8a9a108a82.roa (raw, json) Hash identifier: hOaNaLtjgZ51cmQIsjVePwIYkDByroG2PbWqzRDGjKQ= Subject key identifier: AF:70:E3:2D:73:C7:53:91:7B:A4:8C:1E:8C:85:78:80:A1:2B:DE:55 Certificate issuer: /CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c Certificate serial: 010D0C9F4328584B917784A5B2158B2CD9B5A000 Authority key identifier: B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b1e75a0f-d486-3a5c-b144-0c8a9a108a82.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 401866 IP address blocks: 23.143.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:84:a5:b2:15:8b:2c:d9:b5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=e18137e2-bd80-4f83-8c91-bd140576a22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:35:fd:3e:f2:4c:9c:e8:ce:71:0e:1d:53: 5b:c2:72:61:1c:8a:91:4c:a0:72:a5:cd:23:b5:eb: 60:fa:7f:22:ce:5b:a0:7b:f7:d6:9a:d9:c5:28:dd: a3:ea:a6:47:87:ad:5f:05:88:c4:a8:fb:4d:18:ba: fd:6d:62:52:24:3e:05:07:00:22:2b:8d:0c:4a:83: 00:32:33:9d:e3:1a:2f:a7:af:d5:70:76:86:4c:35: 21:85:21:70:80:ac:f4:1f:93:95:75:5e:7a:85:a7: 48:37:6c:64:db:f8:35:b3:3b:b7:9e:b2:f0:de:ec: 66:ef:50:a3:01:f0:47:41:de:52:85:a9:7b:69:d4: 03:c4:4b:ee:a9:3d:42:01:2c:30:cb:1a:02:4a:f5: 9e:01:1e:68:2a:72:78:1a:15:b4:59:56:ca:3b:81: 13:cc:8d:ac:4c:99:6b:61:53:45:4f:fa:f0:cb:d2: f4:2e:89:1e:60:f2:61:d3:67:6f:55:75:01:68:1f: 33:bd:a7:b1:1f:ff:c3:da:10:68:c9:25:f5:7a:d8: 24:09:8a:e3:01:ba:2b:92:77:13:fe:f8:80:5e:b9: 86:ec:ba:4d:a1:9c:65:37:56:ce:15:8c:f2:ee:f9: 47:d0:b5:57:d7:3d:05:8e:bb:87:a5:59:6c:42:64: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:70:E3:2D:73:C7:53:91:7B:A4:8C:1E:8C:85:78:80:A1:2B:DE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b1e75a0f-d486-3a5c-b144-0c8a9a108a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl X509v3 Authority Key Identifier: keyid:B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:96:9a:18:6e:77:bb:a7:c6:2b:5e:02:52:b4:2b:de:1f:30: 07:08:97:c0:b9:2a:69:f3:ff:63:58:b1:de:2b:64:d5:a1:c9: 48:b2:ba:3f:4b:4d:25:76:c3:ce:7b:5e:c0:2e:37:ec:8a:42: 49:1a:cf:e8:35:96:25:b4:00:d6:ee:ae:cc:ba:6b:51:c3:8f: 13:5c:8e:ff:ea:fd:e7:01:df:30:b4:8e:f8:1d:1b:a0:eb:ee: eb:af:7c:01:f2:7a:d6:f7:b6:6c:24:87:53:4e:25:5c:4a:b4: ca:bc:08:62:18:87:3b:87:cb:c6:5f:46:b4:67:b4:d1:2b:13: 1d:3a:41:24:e8:1b:47:40:c6:6a:6a:62:e1:d8:e8:98:8c:5d: f6:51:fb:3e:55:81:5e:6f:e6:84:6e:db:5d:00:76:fa:eb:d5: 7e:63:c8:45:94:60:29:7a:fc:37:6e:b9:57:eb:fb:1d:cb:36: b6:69:6a:df:c1:7b:b7:51:46:8d:3a:26:14:56:68:c3:d1:06: 21:f4:e6:13:21:13:b8:d9:e1:e5:d7:20:14:ed:2a:97:0e:b6: a7:b9:a4:43:e9:be:5d:63:0b:5d:31:1b:76:85:60:0c:1a:11: c4:73:0d:63:b0:29:b2:df:5c:5f:3d:33:32:1a:be:4c:d2:30: 4f:a5:65:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd4SlshWLLNm1oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA4YTI5NzUtYzZkOS00OWE0LTgxOGYtYzdiY2Q4YzRl MTFjMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk ZTE4MTM3ZTItYmQ4MC00ZjgzLThjOTEtYmQxNDA1NzZhMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSw1/T7yTJzoznEOHVNbwnJhHIqRTKBypc0j tetg+n8izluge/fWmtnFKN2j6qZHh61fBYjEqPtNGLr9bWJSJD4FBwAiK40MSoMA MjOd4xovp6/VcHaGTDUhhSFwgKz0H5OVdV56hadIN2xk2/g1szu3nrLw3uxm71Cj AfBHQd5Shal7adQDxEvuqT1CASwwyxoCSvWeAR5oKnJ4GhW0WVbKO4ETzI2sTJlr YVNFT/rwy9L0LokeYPJh02dvVXUBaB8zvaexH//D2hBoySX1etgkCYrjAborkncT /viAXrmG7LpNoZxlN1bOFYzy7vlH0LVX1z0FjruHpVlsQmTzzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9w4y1zx1ORe6SMHoyFeIChK95VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhh Mjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2JjZDhjNGUxMWMvYjFlNzVhMGYtZDQ4Ni0z YTVjLWIxNDQtMGM4YTlhMTA4YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA4YTI5NzUtYzZkOS00OWE0LTgx OGYtYzdiY2Q4YzRlMTFjL2QwOGEyOTc1LWM2ZDktNDlhNC04MThmLWM3YmNkOGM0 ZTExYy5jcmwwHwYDVR0jBBgwFoAUuIn1lGQEtV+dsKw8Ur9phmK3zxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhhMjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2Jj ZDhjNGUxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Wmhhud7unxiteAlK0K94fMAcIl8C5Kmnz/2NYsd4rZNWhyUiyuj9L TSV2w857XsAuN+yKQkkaz+g1liW0ANbursy6a1HDjxNcjv/q/ecB3zC0jvgdG6Dr 7uuvfAHyetb3tmwkh1NOJVxKtMq8CGIYhzuHy8ZfRrRntNErEx06QSToG0dAxmpq YuHY6JiMXfZR+z5VgV5v5oRu210Advrr1X5jyEWUYCl6/DduuVfr+x3LNrZpat/B e7dRRo06JhRWaMPRBiH05hMhE7jZ4eXXIBTtKpcOtqe5pEPpvl1jC10xG3aFYAwa EcRzDWOwKbLfXF89MzIavkzSME+lZV8= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:21 2025 by rpki-client