$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa File: aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa (raw, json) Hash identifier: A+xIFvu1BdRKUP+JtPhRdPS3goeaMW4z7cwFheu/NP4= Subject key identifier: 6C:8F:03:FE:1C:75:CD:EE:C1:7B:5B:8C:32:58:D6:34:5E:96:DC:68 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE40406FF2ED6C8F3925C8E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 40934 IP address blocks: 140.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:40:6f:f2:ed:6c:8f:39:25:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=983e8635-3635-48f1-aea1-5f369cc05fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:40:2f:a5:b4:20:e4:04:f1:ad:ee:5f:06: f9:7a:34:90:86:3f:5a:c9:04:b4:99:f3:37:35:c9: 21:66:81:14:a1:31:13:b2:05:38:e5:de:68:e4:4e: 68:8e:5c:6a:b6:ca:ce:64:01:f7:33:66:9c:ab:86: ac:d2:25:38:23:da:e4:92:a9:0b:ab:2a:92:e4:56: 57:a1:d2:fd:76:2a:d3:90:38:24:6d:27:96:c1:78: 79:4a:58:d4:1c:86:46:4c:9f:a1:2a:9c:45:6e:7f: 11:72:40:a5:52:48:6e:71:08:20:5e:25:52:0f:0e: 33:8b:7e:2e:65:aa:04:2b:d4:07:dd:64:58:59:7b: 6e:36:c7:8f:6a:ba:90:01:e9:b3:f2:17:c8:b3:cf: e8:85:da:6b:d0:68:f7:a0:90:b5:a6:52:d9:f3:fd: f8:49:63:de:4a:fe:59:72:17:15:28:28:89:5b:c4: 8d:9b:fc:b6:0c:54:64:03:fe:8b:47:26:ba:07:a2: be:bf:3b:bd:42:23:17:55:6c:77:5c:ff:59:2e:95: 1f:d1:98:d5:2c:4c:07:4d:80:ac:1a:e9:42:4c:f3: 32:39:d0:96:8c:4b:78:6d:0c:6e:24:4e:71:d3:f2: 38:9e:0d:e1:e2:a6:b2:25:c6:1b:b2:93:fd:e9:5e: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8F:03:FE:1C:75:CD:EE:C1:7B:5B:8C:32:58:D6:34:5E:96:DC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:74:c9:db:b6:37:b9:4a:81:21:e6:35:19:bb:9d:8c:6d:48: 46:45:20:9f:da:a1:4b:14:3f:6e:54:f0:8d:9a:4a:6e:10:7c: 14:43:5a:6a:bd:1e:77:1c:ae:fa:9e:9e:9d:93:2d:91:b8:06: e7:19:e9:9f:36:5f:98:1d:82:5a:a5:e7:02:4c:87:35:a1:de: 6c:69:4a:f7:85:a3:e6:f0:f5:5d:0f:c9:2e:11:c2:04:dc:0f: f6:84:1a:4e:ea:16:85:66:b9:08:60:07:2b:3e:3c:2a:d6:f4: 0c:8e:3a:b8:2f:ac:d1:36:c3:20:2e:95:7d:5a:ee:24:8f:ec: 0d:70:4b:6e:f8:3d:b2:41:66:c1:be:ca:b4:21:7c:f0:a9:50: 5b:e7:34:a7:e1:be:80:c2:2b:2a:81:a1:d7:a4:94:f3:cf:a8: 2d:96:c1:0e:4f:a8:b2:64:24:6f:45:ff:1f:ad:a9:66:5b:14: ff:75:55:09:76:77:d4:8b:70:d7:ee:ef:47:cb:d3:e5:86:6c: d9:2f:69:f7:4c:d2:44:36:57:a4:6e:56:51:b8:42:e8:84:6b: 9e:42:c7:6a:65:e1:f6:11:53:36:0c:1b:c2:a0:2c:24:34:7b: fa:ca:4b:0e:19:d6:87:03:39:17:51:e7:af:38:a3:f0:f5:23: e4:70:d9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEBv8u1sjzklyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OTgzZTg2MzUtMzYzNS00OGYxLWFlYTEtNWYzNjljYzA1ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMpAL6W0IOQE8a3uXwb5ejSQhj9ayQS0mfM3 NckhZoEUoTETsgU45d5o5E5ojlxqtsrOZAH3M2acq4as0iU4I9rkkqkLqyqS5FZX odL9dirTkDgkbSeWwXh5SljUHIZGTJ+hKpxFbn8RckClUkhucQggXiVSDw4zi34u ZaoEK9QH3WRYWXtuNseParqQAemz8hfIs8/ohdpr0Gj3oJC1plLZ8/34SWPeSv5Z chcVKCiJW8SNm/y2DFRkA/6LRya6B6K+vzu9QiMXVWx3XP9ZLpUf0ZjVLEwHTYCs GulCTPMyOdCWjEt4bQxuJE5x0/I4ng3h4qayJcYbspP96V6vnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyPA/4cdc3uwXtbjDJY1jReltxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWEyM2YyOGMtNWRkZC0z YWU3LTg3MGItMWJkMzgwMjFjODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH10ydu2N7lKgSHmNRm7nYxtSEZFIJ/aoUsUP25U8I2aSm4QfBRDWmq9 Hnccrvqenp2TLZG4BucZ6Z82X5gdglql5wJMhzWh3mxpSveFo+bw9V0PyS4RwgTc D/aEGk7qFoVmuQhgBys+PCrW9AyOOrgvrNE2wyAulX1a7iSP7A1wS274PbJBZsG+ yrQhfPCpUFvnNKfhvoDCKyqBodeklPPPqC2WwQ5PqLJkJG9F/x+tqWZbFP91VQl2 d9SLcNfu70fL0+WGbNkvafdM0kQ2V6RuVlG4QuiEa55Cx2pl4fYRUzYMG8KgLCQ0 e/rKSw4Z1ocDORdR5684o/D1I+Rw2Xo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:32 2025 by rpki-client