$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa File: 7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa (raw, json) Hash identifier: JsJq58GVBqUgEX8e10ejiic2UmVoCLLwztjnL6Y4O/4= Subject key identifier: 57:39:4A:4A:24:6C:15:90:FF:18:99:83:49:E4:D1:32:99:07:8F:01 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584BBB757CF908F2476EC8641884 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 8075 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:7c:f9:08:f2:47:6e:c8:64:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=709ba425-8f81-4692-a72f-3e02508847dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:48:de:73:b2:0c:02:51:65:fd:88:cd:0c: d9:90:ec:61:37:bd:68:a1:b0:c8:45:67:21:60:51: 19:9a:a3:9e:40:46:7f:58:a7:4e:59:80:43:54:70: 89:77:ae:b7:03:33:7d:ca:3a:0c:b3:88:5e:7e:28: 6f:56:7c:c4:28:c9:35:cf:4d:79:ee:de:2a:45:8c: 8f:c6:5e:02:11:15:76:69:a0:ce:2f:4b:a9:92:1f: d9:90:fc:ae:98:bd:09:61:ac:fb:f2:98:46:96:70: 4f:ee:dd:f0:18:1a:d3:82:86:24:ae:2e:d8:63:ca: ef:46:99:de:b2:87:57:a2:62:73:c8:45:78:d6:c7: 8f:55:3c:3f:19:c6:17:e9:5c:b2:87:83:a8:4f:e1: 28:fc:71:12:71:27:0b:92:4b:4c:05:62:aa:2b:64: bc:f0:ec:40:57:23:66:f8:09:ac:ab:d8:1a:67:c2: b4:66:97:9f:20:cc:11:47:87:ea:7a:08:27:3d:6d: 17:67:c6:fc:62:2e:bb:c1:eb:d5:3d:5e:e5:11:ac: 40:69:9c:b6:88:39:0e:fe:9f:cd:bb:97:6c:b7:a1: b8:32:27:1e:4e:59:cf:fc:bd:a3:df:87:13:25:59: 85:93:21:b9:b6:2b:0c:d1:ff:b7:04:ec:83:51:70: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:39:4A:4A:24:6C:15:90:FF:18:99:83:49:E4:D1:32:99:07:8F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7747a7f1-cd97-33b3-b649-65d49a2ed4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fa:e9:88:c7:63:14:b1:5e:f7:93:36:61:a1:14:bb:38:05: 3f:ae:6e:f1:4d:b2:d3:ec:48:09:5c:3e:64:46:3c:db:c2:80: 42:3c:96:0b:b7:f6:77:61:cb:02:dd:0c:c7:27:83:1a:12:f2: 1c:cd:20:76:bc:c5:b8:89:8b:50:4b:c4:59:11:6a:7e:9c:56: 5e:70:e8:bc:0f:73:be:a1:b1:3b:10:a3:d8:31:d2:70:b2:16: b4:c1:0f:10:4f:f7:a9:d9:9c:a7:b3:74:8e:a6:d8:10:65:fb: c3:d0:30:3f:09:9f:6b:a7:46:c0:5c:96:c6:da:3c:94:38:c7: 6e:b0:96:61:49:11:84:85:c6:46:1b:9b:9a:63:b3:42:b7:8d: f3:05:21:f4:e3:ba:80:14:69:ed:cc:47:70:59:1c:9f:59:0c: 17:83:74:23:37:fc:df:cf:a1:ab:21:c5:8b:40:8e:76:12:53: 0c:ae:d6:e2:24:29:6b:d5:e7:86:c1:21:0b:c7:7b:76:c2:6b: 79:cd:b1:11:88:c4:e2:17:19:3d:3a:77:fc:87:c0:d8:64:f2: 9a:0f:16:c4:51:41:aa:42:91:2f:d1:2b:12:6d:84:01:76:94: b7:c2:36:8f:5e:80:2f:a7:83:fe:06:8f:76:d7:b2:4d:dc:1e: 42:2b:55:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dXz5CPJHbshkGIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NzA5YmE0MjUtOGY4MS00NjkyLWE3MmYtM2UwMjUwODg0N2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5hI3nOyDAJRZf2IzQzZkOxhN71oobDIRWch YFEZmqOeQEZ/WKdOWYBDVHCJd663AzN9yjoMs4hefihvVnzEKMk1z0157t4qRYyP xl4CERV2aaDOL0upkh/ZkPyumL0JYaz78phGlnBP7t3wGBrTgoYkri7YY8rvRpne sodXomJzyEV41sePVTw/GcYX6Vyyh4OoT+Eo/HEScScLkktMBWKqK2S88OxAVyNm +Amsq9gaZ8K0ZpefIMwRR4fqeggnPW0XZ8b8Yi67wevVPV7lEaxAaZy2iDkO/p/N u5dst6G4MiceTlnP/L2j34cTJVmFkyG5tisM0f+3BOyDUXCh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc5SkokbBWQ/xiZg0nk0TKZB48BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvNzc0N2E3ZjEtY2Q5Ny0z M2IzLWI2NDktNjVkNDlhMmVkNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/66YjHYxSxXveTNmGhFLs4BT+ubvFNstPsSAlcPmRGPNvCgEI8lgu3 9ndhywLdDMcngxoS8hzNIHa8xbiJi1BLxFkRan6cVl5w6LwPc76hsTsQo9gx0nCy FrTBDxBP96nZnKezdI6m2BBl+8PQMD8Jn2unRsBclsbaPJQ4x26wlmFJEYSFxkYb m5pjs0K3jfMFIfTjuoAUae3MR3BZHJ9ZDBeDdCM3/N/PoashxYtAjnYSUwyu1uIk KWvV54bBIQvHe3bCa3nNsRGIxOIXGT06d/yHwNhk8poPFsRRQapCkS/RKxJthAF2 lLfCNo9egC+ng/4Gj3bXsk3cHkIrVQI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:16 2025 by rpki-client