$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa File: 2f5c6178-be65-33b2-b1a2-5f0214904d11.roa (raw, json) Hash identifier: mn2F+h7rkVqw/M4w3fCxXZDrJEYfMdi0792eB64FxvI= Subject key identifier: D9:B9:9E:38:F7:D7:1B:A2:C1:5B:A1:63:90:59:66:81:EF:7F:39:7A Certificate issuer: /CN=ea152a71-38ff-47de-9174-fc40dc152c36 Certificate serial: 010D0C9F4328584B99D794057A11DBD1F4BF83C0 Authority key identifier: E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400741 IP address blocks: 23.143.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:94:05:7a:11:db:d1:f4:bf:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea152a71-38ff-47de-9174-fc40dc152c36 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a63d7b88-e777-42e1-a0b0-cf02ff41a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:e8:6d:77:6d:81:e1:26:00:a4:97:a5:ed: be:93:56:d0:c9:2f:45:c3:91:46:48:18:9d:a1:57: ad:65:07:01:58:a5:3f:4b:e0:dc:c5:dd:f2:9a:ba: 71:ab:f0:6f:d0:ae:da:91:1e:16:e5:df:c8:1d:4e: d6:a9:8f:7e:7c:9b:ca:11:09:b8:f6:fc:70:07:96: c8:da:f2:e4:fb:e3:19:44:e6:9a:d4:f2:22:8a:b6: 44:72:15:1c:d2:a1:c1:63:36:aa:9a:64:84:29:4d: c8:58:17:d2:63:83:1d:d0:01:c0:11:05:94:1d:78: e4:29:8d:a7:33:82:e2:ac:c7:a9:05:3c:54:46:e9: e0:2f:c9:0c:dd:e8:bd:12:5b:89:93:5a:7e:8c:9c: 35:00:b9:6d:29:61:ba:a4:c1:33:6a:a1:0a:8f:d6: 26:3e:e4:e1:04:ac:5f:21:92:d2:b6:28:84:44:5b: c5:71:ce:a7:13:68:a6:55:72:af:e8:6c:fc:bd:3e: 78:12:dc:38:1d:4b:54:6a:f5:06:fb:c3:17:f3:90: 91:be:5b:c3:13:ea:f7:2d:4f:0b:1b:c0:94:22:c1: 4f:a1:a1:af:25:e5:35:4f:a1:be:1a:8e:ff:ea:2c: 05:f0:80:f7:ef:bb:d6:f5:d3:ef:83:2b:61:82:c8: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B9:9E:38:F7:D7:1B:A2:C1:5B:A1:63:90:59:66:81:EF:7F:39:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl X509v3 Authority Key Identifier: keyid:E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer sbgp-ipAddrBlock: critical IPv4: 23.143.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b9:cf:91:36:61:5d:87:d0:c8:9d:9b:b1:c4:87:91:38:c1: ef:c9:c6:b7:16:29:87:a7:bb:9b:0e:70:8e:48:91:e3:9c:3b: 01:e6:76:ac:50:a1:02:1f:aa:55:cc:be:15:f9:ff:2d:11:11: 81:04:a0:83:6f:30:e8:4a:fb:6d:bc:0a:62:80:e6:6f:de:3b: b8:ca:27:c6:bf:0a:9d:a6:cc:95:dd:83:4f:aa:dd:98:56:cc: 16:47:ec:c1:f0:6d:0f:61:e1:c9:30:99:4c:f6:60:0a:f5:be: e0:f1:c4:4d:b7:9f:0a:2b:62:bd:2b:00:17:cc:dd:f6:e8:da: 3f:00:6a:da:9f:ea:e3:e8:2b:d1:1e:71:95:da:40:8b:5f:47: 9f:b9:88:19:5d:d6:73:0f:cd:50:ed:b6:b0:c9:56:9e:b2:68: 66:4d:32:d5:a7:bc:54:ff:b6:d0:f5:0c:78:94:cb:46:bb:bf: d0:14:a4:37:9c:c5:1c:44:b3:dc:40:2a:a0:cf:bf:45:42:ee: 40:d1:8f:02:04:a8:3b:12:e9:e3:ce:dc:fd:ef:c9:b5:30:e1: d5:c5:24:c1:fe:af:77:55:d1:6f:95:d4:a2:d2:3b:37:87:e4: 94:a5:b0:33:fd:05:dc:2a:b9:05:b1:00:90:ea:08:c6:2c:70: 53:6e:fa:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15QFehHb0fS/g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWExNTJhNzEtMzhmZi00N2RlLTkxNzQtZmM0MGRjMTUy YzM2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTYzZDdiODgtZTc3Ny00MmUxLWEwYjAtY2YwMmZmNDFhNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisHobXdtgeEmAKSXpe2+k1bQyS9Fw5FGSBid oVetZQcBWKU/S+Dcxd3ymrpxq/Bv0K7akR4W5d/IHU7WqY9+fJvKEQm49vxwB5bI 2vLk++MZROaa1PIiirZEchUc0qHBYzaqmmSEKU3IWBfSY4Md0AHAEQWUHXjkKY2n M4LirMepBTxURungL8kM3ei9EluJk1p+jJw1ALltKWG6pMEzaqEKj9YmPuThBKxf IZLStiiERFvFcc6nE2imVXKv6Gz8vT54Etw4HUtUavUG+8MX85CRvlvDE+r3LU8L G8CUIsFPoaGvJeU1T6G+Go7/6iwF8ID377vW9dPvgythgsjanQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm5njj31xuiwVuhY5BZZoHvfzl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYTE1 MmE3MS0zOGZmLTQ3ZGUtOTE3NC1mYzQwZGMxNTJjMzYvMmY1YzYxNzgtYmU2NS0z M2IyLWIxYTItNWYwMjE0OTA0ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWExNTJhNzEtMzhmZi00N2RlLTkx NzQtZmM0MGRjMTUyYzM2L2VhMTUyYTcxLTM4ZmYtNDdkZS05MTc0LWZjNDBkYzE1 MmMzNi5jcmwwHwYDVR0jBBgwFoAU4hDwpEMGzeMqrQ2bTMtMTrgksNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYTE1MmE3MS0zOGZmLTQ3ZGUtOTE3NC1mYzQw ZGMxNTJjMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF494MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC5z5E2YV2H0Midm7HEh5E4we/JxrcWKYenu5sOcI5IkeOcOwHmdqxQ oQIfqlXMvhX5/y0REYEEoINvMOhK+228CmKA5m/eO7jKJ8a/Cp2mzJXdg0+q3ZhW zBZH7MHwbQ9h4ckwmUz2YAr1vuDxxE23nworYr0rABfM3fbo2j8Aatqf6uPoK9Ee cZXaQItfR5+5iBld1nMPzVDttrDJVp6yaGZNMtWnvFT/ttD1DHiUy0a7v9AUpDec xRxEs9xAKqDPv0VC7kDRjwIEqDsS6ePO3P3vybUw4dXFJMH+r3dV0W+V1KLSOzeH 5JSlsDP9BdwquQWxAJDqCMYscFNu+oA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:33 2025 by rpki-client