$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/308b63f9-4e70-375e-8f95-150ae53a7907.roa File: 308b63f9-4e70-375e-8f95-150ae53a7907.roa (raw, json) Hash identifier: 5o5xclq7GtKGcj9Pc3h95+zTee6WU/iWwHvm5wrREi8= Subject key identifier: E3:22:7A:F7:AE:65:3D:24:9F:D1:93:69:18:29:D5:CA:27:2D:C8:A3 Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584BB229C59D539966E896E81D40 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/308b63f9-4e70-375e-8f95-150ae53a7907.roa Signing time: Thu 30 Oct 2025 18:05:45 +0000 ROA not before: Thu 30 Oct 2025 18:05:45 +0000 ROA not after: Wed 28 Jan 2026 19:05:45 +0000 asID: 174 IP address blocks: 23.188.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:29:c5:9d:53:99:66:e8:96:e8:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Oct 30 18:05:45 2025 GMT Not After : Jan 28 19:05:45 2026 GMT Subject: CN=ea4a92c4-eded-4cca-aa98-40734ef86826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:1d:8d:bf:2c:94:43:3d:dd:7b:19:24:ef: 1f:78:b1:ad:13:75:d3:94:f6:8f:6d:4c:6c:19:e0: 6e:93:58:c3:d3:f9:b7:3c:35:99:dc:63:86:d1:40: ab:35:a4:cf:80:64:a6:34:5d:11:b4:a6:c6:68:7d: bc:1c:9a:5d:48:e7:a9:91:6e:69:f6:8c:69:a8:24: 8c:ad:37:3d:3f:db:12:77:91:da:67:cd:93:a0:ae: 4d:1b:f0:16:8a:e2:f1:97:bb:8c:48:84:2e:b5:a0: 00:65:80:e3:a7:fb:5c:95:0c:95:5c:91:f1:b5:61: 33:07:77:a4:b7:b0:cf:fe:76:ef:af:fb:a9:63:ae: 53:b0:80:e4:97:dc:ac:00:c4:0a:ba:d0:d9:ef:97: 14:27:ea:3b:87:06:92:00:f8:02:cf:7a:e6:d7:1e: 33:7e:cb:a2:cd:48:26:6e:28:d3:30:24:8d:da:6a: 88:52:87:2f:14:60:29:54:c7:05:45:64:b8:d8:4b: dc:3c:fc:67:98:df:58:8c:4e:52:ac:7b:e8:5f:aa: 4b:ee:3f:cc:96:eb:bb:6e:1b:51:c3:10:67:ca:fa: 8e:51:f7:9c:f6:fd:d8:a6:d2:16:71:2d:fa:48:e9: d5:24:ed:e1:73:62:23:a2:eb:7c:8e:e8:bc:85:d4: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:22:7A:F7:AE:65:3D:24:9F:D1:93:69:18:29:D5:CA:27:2D:C8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/308b63f9-4e70-375e-8f95-150ae53a7907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:dd:fb:65:2a:63:b6:1b:38:d1:27:a6:2c:8b:ed:7e:fc:ab: 38:ca:fc:51:1e:63:b1:d5:6e:5b:42:4b:4d:a9:49:f4:4d:1a: dd:69:07:1c:c9:08:ea:ee:ea:9d:b8:4a:3b:5a:44:93:fe:ae: ab:b5:f2:fa:d9:3d:fc:53:75:e1:93:70:e4:ef:8d:26:59:f0: 36:0e:29:de:8f:62:e7:9b:3d:db:49:ed:9a:fc:e2:04:5e:c4: 1b:fa:19:b4:cc:70:d6:ce:de:30:92:e0:1e:d3:42:c3:17:b9: 9a:a7:0d:0c:7b:53:38:a7:a0:5b:fc:77:93:e7:4b:c6:99:a7: 6d:53:03:47:af:09:33:f6:f8:d6:cc:12:f0:f1:cf:1d:34:52: 83:57:31:ae:11:3b:d2:07:6f:7d:6e:63:de:34:30:ba:66:f9: 6c:28:1b:b2:32:be:fc:b1:7f:ae:df:b1:15:5d:73:1f:22:4e: 4a:41:b6:f4:32:6e:3c:2d:97:75:74:30:75:a1:7d:ac:00:92: b9:8e:25:20:a6:0d:69:ce:18:ef:77:27:69:dd:fa:cf:11:57: ca:88:2e:3d:49:0c:9c:a5:23:e0:e7:72:35:e9:70:eb:44:fc: 8b:2e:29:32:7d:ea:01:aa:32:4f:e4:5c:d4:c3:c2:7f:65:bd: b0:41:29:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyKcWdU5lm6JboHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI1MTAzMDE4MDU0NVoXDTI2MDEyODE5MDU0NVowLzEtMCsGA1UEAxMk ZWE0YTkyYzQtZWRlZC00Y2NhLWFhOTgtNDA3MzRlZjg2ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniAdjb8slEM93XsZJO8feLGtE3XTlPaPbUxs GeBuk1jD0/m3PDWZ3GOG0UCrNaTPgGSmNF0RtKbGaH28HJpdSOepkW5p9oxpqCSM rTc9P9sSd5HaZ82ToK5NG/AWiuLxl7uMSIQutaAAZYDjp/tclQyVXJHxtWEzB3ek t7DP/nbvr/upY65TsIDkl9ysAMQKutDZ75cUJ+o7hwaSAPgCz3rm1x4zfsuizUgm bijTMCSN2mqIUocvFGApVMcFRWS42EvcPPxnmN9YjE5SrHvoX6pL7j/Mluu7bhtR wxBnyvqOUfec9v3YptIWcS36SOnVJO3hc2Ijout8jui8hdSQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMieveuZT0kn9GTaRgp1conLcijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvMzA4YjYzZjktNGU3MC0z NzVlLThmOTUtMTUwYWU1M2E3OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDd+2UqY7YbONEnpiyL7X78qzjK/FEeY7HVbltCS02pSfRNGt1pBxzJ COru6p24SjtaRJP+rqu18vrZPfxTdeGTcOTvjSZZ8DYOKd6PYuebPdtJ7Zr84gRe xBv6GbTMcNbO3jCS4B7TQsMXuZqnDQx7UzinoFv8d5PnS8aZp21TA0evCTP2+NbM EvDxzx00UoNXMa4RO9IHb31uY940MLpm+WwoG7Iyvvyxf67fsRVdcx8iTkpBtvQy bjwtl3V0MHWhfawAkrmOJSCmDWnOGO93J2nd+s8RV8qILj1JDJylI+DncjXpcOtE /IsuKTJ96gGqMk/kXNTDwn9lvbBBKdU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:18 2025 by rpki-client