$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa File: 5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa (raw, json) Hash identifier: +HMEDZZUe6e+xpJtq6bCo6eNroxLhxE4C5iBf9pMngM= Subject key identifier: D2:24:70:7D:8D:3C:6C:B2:06:B3:EC:0A:F0:00:68:60:E3:30:9B:1E Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584B713D710D2B4CE83247C35040 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa Signing time: Tue 07 Oct 2025 11:57:50 +0000 ROA not before: Tue 07 Oct 2025 11:57:50 +0000 ROA not after: Mon 05 Jan 2026 12:57:50 +0000 asID: 399870 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:3d:71:0d:2b:4c:e8:32:47:c3:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Oct 7 11:57:50 2025 GMT Not After : Jan 5 12:57:50 2026 GMT Subject: CN=d6d638ee-8ed4-492f-b8f8-b343e74d6579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:c6:47:9d:97:05:7e:49:61:03:fb:42:34: fc:77:a8:29:71:b4:9a:73:00:d4:78:2f:b2:8e:58: 7f:69:00:d9:23:8b:10:ec:ce:c7:fa:67:a0:c3:1c: cf:b3:b4:bc:ba:71:94:07:5a:30:0b:53:8c:49:02: 02:64:03:a3:03:92:0e:ed:09:92:54:df:bd:b1:f4: df:fa:af:dd:e0:e2:e1:63:60:fb:c7:7c:b9:ff:e4: bb:65:03:27:7e:a4:b8:b1:53:93:d5:47:b4:31:bf: e1:0e:ae:85:7f:52:dc:b3:10:c7:56:4d:7d:b8:19: b1:b1:5c:f1:36:3a:59:3b:5d:01:0a:54:7e:d0:f0: 25:96:11:bc:5b:42:4f:56:16:a8:a8:9a:54:24:8a: 32:19:f3:36:d8:83:7c:da:0a:27:db:e8:86:f6:05: f2:e9:1f:95:30:11:fa:11:ee:31:8a:ba:1c:f8:e7: 1e:28:d3:5f:c4:b1:06:f2:16:f6:28:47:e6:f2:e0: 2a:1d:46:1d:05:f8:dc:c9:a0:33:f7:23:50:a4:a5: 16:59:20:14:e6:7d:9f:1b:4a:d1:a4:71:3c:3c:4a: e2:ad:88:f3:4b:11:77:18:07:96:f2:d2:b0:58:d8: d2:07:e3:4c:ba:c5:91:1b:3a:1d:63:3a:9a:8c:ce: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:70:7D:8D:3C:6C:B2:06:B3:EC:0A:F0:00:68:60:E3:30:9B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8e:46:11:1d:82:bb:22:c6:c0:d3:4c:c8:c6:62:c9:0a:a2: 9c:68:74:28:7d:ce:c0:98:b4:83:6c:82:f2:ef:cf:ea:cf:0e: 57:5e:18:d8:c2:84:75:ef:22:e5:ee:6b:aa:5c:be:fe:b7:1f: 80:d2:8e:d0:09:59:db:cf:65:89:99:e3:47:0e:99:cd:5f:f3: 53:46:bc:ff:9e:ab:be:b0:ac:ab:f3:02:26:2e:8e:f9:ee:d2: 59:31:44:a3:62:7f:c6:a5:9b:1f:5b:c4:ba:3b:36:11:f1:84: 11:9a:46:19:95:9e:e1:69:c1:9a:39:0b:c4:b1:61:5e:2b:23: 2a:8a:e7:26:b3:33:fb:c8:fc:93:90:22:9d:7d:61:4b:5b:ed: 0c:22:84:3b:15:01:03:ff:72:35:19:79:c0:e9:96:09:b1:e0: 45:56:ef:9b:e8:79:53:ba:c5:08:54:56:36:7b:ce:73:82:1d: 37:a0:48:af:06:27:fa:fa:21:50:5f:12:28:23:3b:2d:a0:f9: d1:2d:0a:1f:69:63:53:e5:a9:10:ad:c8:b7:f7:3e:7b:8d:33: fb:28:e3:ad:ea:e8:c4:c3:16:21:81:a4:46:5a:f8:ae:38:b0: 21:af:f3:da:0d:e2:ee:2e:f4:12:cc:f1:fa:a2:d1:fb:f5:b8: 83:1b:c9:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxPXENK0zoMkfDUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI1MTAwNzExNTc1MFoXDTI2MDEwNTEyNTc1MFowLzEtMCsGA1UEAxMk ZDZkNjM4ZWUtOGVkNC00OTJmLWI4ZjgtYjM0M2U3NGQ2NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNrGR52XBX5JYQP7QjT8d6gpcbSacwDUeC+y jlh/aQDZI4sQ7M7H+megwxzPs7S8unGUB1owC1OMSQICZAOjA5IO7QmSVN+9sfTf +q/d4OLhY2D7x3y5/+S7ZQMnfqS4sVOT1Ue0Mb/hDq6Ff1LcsxDHVk19uBmxsVzx NjpZO10BClR+0PAllhG8W0JPVhaoqJpUJIoyGfM22IN82gon2+iG9gXy6R+VMBH6 Ee4xiroc+OceKNNfxLEG8hb2KEfm8uAqHUYdBfjcyaAz9yNQpKUWWSAU5n2fG0rR pHE8PErirYjzSxF3GAeW8tKwWNjSB+NMusWRGzodYzqajM6YFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIkcH2NPGyyBrPsCvAAaGDjMJseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvNWZiZGQxMWEtZjYwMi0z MmFlLWFkYTctNTU1ZDBlNjFkMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuORhEdgrsixsDTTMjGYskKopxodCh9zsCYtINsgvLvz+rPDldeGNjC hHXvIuXua6pcvv63H4DSjtAJWdvPZYmZ40cOmc1f81NGvP+eq76wrKvzAiYujvnu 0lkxRKNif8almx9bxLo7NhHxhBGaRhmVnuFpwZo5C8SxYV4rIyqK5yazM/vI/JOQ Ip19YUtb7QwihDsVAQP/cjUZecDplgmx4EVW75voeVO6xQhUVjZ7znOCHTegSK8G J/r6IVBfEigjOy2g+dEtCh9pY1PlqRCtyLf3PnuNM/so463q6MTDFiGBpEZa+K44 sCGv89oN4u4u9BLM8fqi0fv1uIMbyZw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:05 2025 by rpki-client