$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/8131fc4c-3791-36a2-8b18-eca9328f03b9.roa File: 8131fc4c-3791-36a2-8b18-eca9328f03b9.roa (raw, json) Hash identifier: 2QC4eNu56eyQyRVdL+yvQKC4ERxb3kFPhjIe0oLJXM0= Subject key identifier: 57:16:EE:A1:D8:8F:C5:73:A8:04:63:72:84:1A:68:C8:0F:D9:6B:B1 Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584BB228699E0CD8A09CE853F020 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/8131fc4c-3791-36a2-8b18-eca9328f03b9.roa Signing time: Thu 30 Oct 2025 18:03:01 +0000 ROA not before: Thu 30 Oct 2025 18:03:01 +0000 ROA not after: Wed 28 Jan 2026 19:03:01 +0000 asID: 3356 IP address blocks: 23.188.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:28:69:9e:0c:d8:a0:9c:e8:53:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Oct 30 18:03:01 2025 GMT Not After : Jan 28 19:03:01 2026 GMT Subject: CN=b4a7cd8a-1c1c-4306-aca1-7f5b7b444e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:2b:f4:89:04:c6:b8:dc:e0:fc:b3:b3:ce: 24:a8:9d:33:3c:ad:a9:85:5a:c0:a6:dc:7f:4c:b5: 10:0f:e5:ad:ee:c2:54:93:0e:82:75:24:77:0f:5c: 8b:01:1b:cc:2c:fd:54:15:f1:3e:04:10:6b:90:35: 3d:93:80:7c:09:95:ce:6e:6e:e4:ca:f9:1c:8b:f3: 73:7d:7f:ea:91:0b:68:6d:63:ca:ed:27:81:9d:a1: 40:56:ec:1a:58:ca:86:5a:42:54:5f:ef:83:8e:14: af:57:a7:3c:29:15:fd:49:d6:cf:af:8a:a1:c4:4c: 0a:44:62:37:80:c9:3c:e1:68:a9:4a:8e:ec:68:a3: ed:df:47:a8:c6:8b:b2:64:4b:54:17:45:35:a7:20: 92:4c:4e:fc:3e:2f:58:99:1f:bc:05:dc:7f:3f:d6: 88:a3:1d:5c:16:b7:88:c3:9a:74:60:0b:61:c1:8b: ce:aa:4b:e2:ad:42:28:05:e8:4f:44:de:d1:0f:82: c8:f3:00:74:93:cf:89:82:33:a2:94:45:b2:83:95: cb:79:8f:57:7f:a2:80:0c:4a:7a:5c:50:18:4a:ea: d6:a8:b1:78:8c:01:52:cf:94:8a:47:2f:ee:19:c8: 78:19:d4:6f:81:30:a4:0c:88:a8:59:90:b5:d3:69: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:EE:A1:D8:8F:C5:73:A8:04:63:72:84:1A:68:C8:0F:D9:6B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/8131fc4c-3791-36a2-8b18-eca9328f03b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:64:ea:98:c7:ad:94:a2:cf:77:d0:59:95:c3:98:0a:2a:55: ec:4a:78:9a:b5:92:34:be:ff:24:68:04:27:25:f7:9c:1e:89: 49:24:b9:43:8b:da:f0:3e:ce:80:2b:83:a2:ad:fc:a4:15:30: 2f:59:eb:cc:3b:a8:8e:77:f9:28:4b:61:41:78:ee:0c:86:d4: 13:50:fc:19:79:fd:d8:1a:3c:17:7e:0d:b9:44:42:e9:80:9c: 9b:7a:d4:17:fb:21:db:a6:ae:24:a6:f5:0a:e1:e3:82:f9:66: 18:12:c8:b2:94:fe:2a:da:46:4f:4d:1f:25:12:8f:a8:2d:b3: a8:d4:c0:26:3e:a9:76:c6:ed:6e:e5:ee:2d:93:fb:bd:74:b5: 26:bd:03:74:57:d7:0e:28:97:06:9c:22:54:d6:fc:6a:a6:49: e0:b9:d9:8c:3e:4b:b2:04:ec:7e:0e:b0:f5:ef:24:a3:b8:9e: 6a:45:72:49:a9:6c:59:33:24:4f:de:19:30:a1:2a:c5:ec:a1: 61:3e:85:2d:4c:97:99:fe:31:72:da:bc:26:d9:05:c0:5a:de: a9:71:2f:fa:91:dd:15:bb:a4:7f:bf:cf:f3:2d:c9:0f:53:09: a8:15:ce:51:8f:5d:99:77:7e:16:77:6b:71:6b:eb:49:30:4c: c6:c5:df:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyKGmeDNignOhT8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI1MTAzMDE4MDMwMVoXDTI2MDEyODE5MDMwMVowLzEtMCsGA1UEAxMk YjRhN2NkOGEtMWMxYy00MzA2LWFjYTEtN2Y1YjdiNDQ0ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijcr9IkExrjc4Pyzs84kqJ0zPK2phVrAptx/ TLUQD+Wt7sJUkw6CdSR3D1yLARvMLP1UFfE+BBBrkDU9k4B8CZXObm7kyvkci/Nz fX/qkQtobWPK7SeBnaFAVuwaWMqGWkJUX++DjhSvV6c8KRX9SdbPr4qhxEwKRGI3 gMk84WipSo7saKPt30eoxouyZEtUF0U1pyCSTE78Pi9YmR+8Bdx/P9aIox1cFreI w5p0YAthwYvOqkvirUIoBehPRN7RD4LI8wB0k8+JgjOilEWyg5XLeY9Xf6KADEp6 XFAYSurWqLF4jAFSz5SKRy/uGch4GdRvgTCkDIioWZC102k7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcW7qHYj8VzqARjcoQaaMgP2WuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvODEzMWZjNGMtMzc5MS0z NmEyLThiMTgtZWNhOTMyOGYwM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9k6pjHrZSiz3fQWZXDmAoqVexKeJq1kjS+/yRoBCcl95weiUkkuUOL 2vA+zoArg6Kt/KQVMC9Z68w7qI53+ShLYUF47gyG1BNQ/Bl5/dgaPBd+DblEQumA nJt61Bf7IdumriSm9Qrh44L5ZhgSyLKU/iraRk9NHyUSj6gts6jUwCY+qXbG7W7l 7i2T+710tSa9A3RX1w4olwacIlTW/GqmSeC52Yw+S7IE7H4OsPXvJKO4nmpFckmp bFkzJE/eGTChKsXsoWE+hS1Ml5n+MXLavCbZBcBa3qlxL/qR3RW7pH+/z/MtyQ9T CagVzlGPXZl3fhZ3a3Fr60kwTMbF3xs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:38 2025 by rpki-client