$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa File: d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json) Hash identifier: CnxLFimu+i5cu29/em/k+6Rhfe4BkkImg52CHHFIf2k= Subject key identifier: C0:25:BF:68:72:38:80:CC:34:CA:14:65:2A:F5:8E:0B:2A:C7:AC:3F Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Certificate serial: 010D0C9F4328584B2CF6E8DA96B2D04CE38E46C0 Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 23347 IP address blocks: 23.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e8:da:96:b2:d0:4c:e3:8e:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=76e06e1b-9efc-4182-9d5f-4295c2961451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:c9:1f:51:4e:7e:7e:7c:17:9e:e4:88:74: f1:ca:98:b5:d7:35:da:2f:87:48:e2:2c:a7:eb:61: c3:e8:d5:8e:80:24:55:dc:04:17:bd:b8:3d:5c:01: 92:83:85:a7:97:72:ed:35:43:cd:dc:a0:cf:ea:f5: bd:f9:a8:9a:13:8c:e9:7f:5d:40:ec:d9:68:f3:59: b7:94:6a:56:34:53:a7:2b:0d:4b:86:f5:2e:92:7f: e2:af:48:c0:ac:a9:90:86:5c:ce:ac:c0:11:76:23: cc:af:35:95:1b:2d:a0:d4:aa:ce:12:f6:66:52:0e: fc:21:cd:02:63:22:87:b2:dc:64:e7:e9:00:37:d7: 7f:1f:31:cb:95:9e:cf:8f:c6:53:9c:34:c6:eb:12: 61:ba:5a:b6:20:af:50:c4:08:83:6f:1f:80:e5:b0: d1:82:23:40:d9:8c:75:b2:40:f3:2c:6b:b3:d2:10: 62:88:96:81:79:0e:c9:37:5c:06:3e:3d:e1:81:4c: 85:42:84:53:92:78:9d:a8:47:b6:c8:59:02:6b:85: 8b:f6:9b:8f:7a:f5:2c:c9:06:7f:22:64:2b:19:5d: fc:53:1b:9f:29:2f:ab:55:93:86:f4:36:be:27:df: ad:59:99:72:9c:95:f5:1f:41:e9:d7:2d:06:86:b3: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:BF:68:72:38:80:CC:34:CA:14:65:2A:F5:8E:0B:2A:C7:AC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl X509v3 Authority Key Identifier: keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer sbgp-ipAddrBlock: critical IPv4: 23.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:38:23:30:ac:ef:b5:14:03:3d:58:4e:1e:29:39:e4:74:35: 9a:0b:f0:60:ba:39:d8:90:6c:30:a7:50:27:c2:cc:cd:0b:b7: 92:b1:1d:8f:7e:61:63:47:6d:3b:af:55:b3:96:d5:7d:df:de: ea:9c:83:e7:83:4b:e8:c6:9e:11:b1:6f:d8:b7:c3:ec:6e:d3: 1c:a1:69:31:7a:e9:41:37:0a:fc:7b:f3:cf:34:d8:7d:e0:e9: b6:b5:bf:7e:87:7c:f3:96:96:3b:7f:a0:31:87:b7:8f:73:de: 72:ae:ac:2d:0e:b5:8e:68:4d:db:c6:13:1d:27:60:80:d9:9d: 11:34:df:31:cb:ae:3d:60:b3:bb:8b:2d:a4:8b:f4:8c:00:f2: de:06:d8:7e:61:a4:10:4e:b8:af:b2:6d:70:35:dc:ff:59:62: 85:32:d4:3c:14:ba:6a:e1:ee:60:1f:f6:c6:01:02:1e:15:b7: 78:1d:63:a8:8d:ee:2e:c2:ea:89:b1:b1:ee:5d:4a:fe:f8:68: b6:05:cc:72:c1:25:ac:8c:c1:70:ba:ef:f9:42:70:46:94:15: a1:8d:dc:c0:37:60:8b:06:30:59:d7:22:c5:80:07:bf:47:64: 99:b6:ab:ec:65:ac:8f:6a:82:f2:8c:6e:84:2c:bc:7a:40:0e: 6f:2c:87:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9ujalrLQTOOORsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm Yjg0MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NzZlMDZlMWItOWVmYy00MTgyLTlkNWYtNDI5NWMyOTYxNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY/JH1FOfn58F57kiHTxypi11zXaL4dI4iyn 62HD6NWOgCRV3AQXvbg9XAGSg4Wnl3LtNUPN3KDP6vW9+aiaE4zpf11A7Nlo81m3 lGpWNFOnKw1LhvUukn/ir0jArKmQhlzOrMARdiPMrzWVGy2g1KrOEvZmUg78Ic0C YyKHstxk5+kAN9d/HzHLlZ7Pj8ZTnDTG6xJhulq2IK9QxAiDbx+A5bDRgiNA2Yx1 skDzLGuz0hBiiJaBeQ7JN1wGPj3hgUyFQoRTknidqEe2yFkCa4WL9puPevUsyQZ/ ImQrGV38UxufKS+rVZOG9Da+J9+tWZlynJX1H0Hp1y0GhrNz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAlv2hyOIDMNMoUZSr1jgsqx6w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvZDE2MDU1Y2EtZGM3Zi0z MzUyLTgzM2ItZWU5YTEzNmUxOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0 NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB04IzCs77UUAz1YTh4pOeR0NZoL8GC6OdiQbDCnUCfCzM0Lt5KxHY9+ YWNHbTuvVbOW1X3f3uqcg+eDS+jGnhGxb9i3w+xu0xyhaTF66UE3Cvx788802H3g 6ba1v36HfPOWljt/oDGHt49z3nKurC0OtY5oTdvGEx0nYIDZnRE03zHLrj1gs7uL LaSL9IwA8t4G2H5hpBBOuK+ybXA13P9ZYoUy1DwUumrh7mAf9sYBAh4Vt3gdY6iN 7i7C6omxse5dSv74aLYFzHLBJayMwXC67/lCcEaUFaGN3MA3YIsGMFnXIsWAB79H ZJm2q+xlrI9qgvKMboQsvHpADm8sh94= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:34 2025 by rpki-client