$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa File: 14bd33ec-ec91-396b-b0e6-927ef8be3191.roa (raw, json) Hash identifier: nmO+vKDDt/nwqOF2LnsD3Ve17EIddXXSTEuiptzpTxs= Subject key identifier: 4E:46:DB:E7:F9:F5:F6:D7:52:F5:31:AA:26:DE:FE:C7:5C:53:D1:BF Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F4328584B715CA2DF25537917F8B94A60 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 203729 IP address blocks: 23.142.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a2:df:25:53:79:17:f8:b9:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=eaa5cd0b-2486-42a7-90ee-ebb6856a19eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:e0:1b:19:24:d8:7f:62:59:24:d6:2a:b9: 00:cb:9d:db:70:b1:ce:33:0c:13:82:11:ce:e6:ee: 98:92:d5:e1:95:6f:87:8f:f2:1b:eb:4d:fd:9b:fd: 2e:7d:c0:cd:60:a6:e9:38:f5:d7:b9:25:46:3a:9e: a0:ba:55:dd:d9:13:7b:f1:8f:d9:a2:7f:0e:aa:c3: 9f:d5:2c:fb:21:6d:52:21:a8:10:32:01:70:d8:bf: cd:93:eb:0f:b4:5c:0e:98:6e:40:60:dc:8a:08:1e: fe:09:e7:b7:bc:96:21:8b:92:d9:ee:bc:ac:db:c2: b2:b1:8d:4f:02:ed:45:60:f9:a6:ba:42:b5:b9:b4: 68:5c:34:7d:1a:e1:71:12:4e:43:0a:5b:93:2f:ee: 87:9d:2e:e8:97:1e:ba:6d:bf:d3:52:25:53:ce:96: 2e:91:d2:f8:0a:2d:89:f3:8b:0a:a5:e7:58:c7:d6: 7e:d9:69:17:65:32:77:78:30:29:c4:de:75:d1:c6: d7:07:7f:b2:44:75:80:3d:ad:48:a1:2c:4e:97:b2: 98:40:83:f8:3d:26:8e:f9:75:8d:54:2b:db:a5:15: 4d:5c:bf:09:cf:ef:a6:de:35:61:e8:32:e3:a7:e7: 9e:79:83:08:2b:01:32:a7:16:8a:94:d2:62:f8:1d: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:46:DB:E7:F9:F5:F6:D7:52:F5:31:AA:26:DE:FE:C7:5C:53:D1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c1:68:ee:bc:ef:5f:86:dc:18:7b:56:df:f7:61:32:91:17: af:56:c6:68:13:e6:84:16:9e:46:eb:c6:a2:81:51:24:fd:a8: 6e:25:a9:60:31:6e:e2:65:31:af:b4:89:d3:ba:a2:8a:78:c7: d7:1b:14:3d:19:bb:b2:6d:14:aa:19:0f:84:9e:5b:da:73:67: 64:2d:a8:3e:b8:ba:f2:47:ed:02:0a:d9:df:36:83:07:e1:be: b2:29:79:7b:3a:04:c9:dd:7d:42:80:fb:c5:92:83:34:47:18: ff:3e:4a:e8:a3:4f:5b:81:d9:aa:d0:39:72:af:ca:1a:5f:5a: 8c:87:57:d7:06:e6:50:ce:89:60:6e:eb:65:9c:e6:41:60:96: 44:9a:fe:13:1e:56:99:54:59:a7:26:19:82:e0:0a:f2:3d:9f: 9a:d9:ac:36:d2:6c:54:a8:5c:62:b6:f2:99:3a:bf:aa:8d:e7: e5:72:4a:cb:9c:92:e5:58:81:5b:de:4c:2d:06:fe:e8:71:01: ba:9d:c8:73:d5:14:11:a5:e3:c2:0c:97:04:63:ca:72:a9:f9: 35:c3:b5:a8:62:de:40:7e:a1:f1:08:59:f7:c4:9f:16:35:26: 69:23:6a:fd:8b:11:91:89:50:f4:6c:55:2d:f4:97:e0:2a:9b: 8f:b0:70:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKLfJVN5F/i5SmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWFhNWNkMGItMjQ4Ni00MmE3LTkwZWUtZWJiNjg1NmExOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt/gGxkk2H9iWSTWKrkAy53bcLHOMwwTghHO 5u6YktXhlW+Hj/Ib6039m/0ufcDNYKbpOPXXuSVGOp6gulXd2RN78Y/Zon8OqsOf 1Sz7IW1SIagQMgFw2L/Nk+sPtFwOmG5AYNyKCB7+Cee3vJYhi5LZ7rys28KysY1P Au1FYPmmukK1ubRoXDR9GuFxEk5DCluTL+6HnS7olx66bb/TUiVTzpYukdL4Ci2J 84sKpedYx9Z+2WkXZTJ3eDApxN510cbXB3+yRHWAPa1IoSxOl7KYQIP4PSaO+XWN VCvbpRVNXL8Jz++m3jVh6DLjp+eeeYMIKwEypxaKlNJi+B0HfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5G2+f59fbXUvUxqibe/sdcU9G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvMTRiZDMzZWMtZWM5MS0z OTZiLWIwZTYtOTI3ZWY4YmUzMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF45ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfBaO6871+G3Bh7Vt/3YTKRF69WxmgT5oQWnkbrxqKBUST9qG4lqWAx buJlMa+0idO6oop4x9cbFD0Zu7JtFKoZD4SeW9pzZ2QtqD64uvJH7QIK2d82gwfh vrIpeXs6BMndfUKA+8WSgzRHGP8+SuijT1uB2arQOXKvyhpfWoyHV9cG5lDOiWBu 62Wc5kFglkSa/hMeVplUWacmGYLgCvI9n5rZrDbSbFSoXGK28pk6v6qN5+VySsuc kuVYgVveTC0G/uhxAbqdyHPVFBGl48IMlwRjynKp+TXDtahi3kB+ofEIWffEnxY1 Jmkjav2LEZGJUPRsVS30l+Aqm4+wcMU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:25 2025 by rpki-client