$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa File: 69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa (raw, json) Hash identifier: 8HKIgnHPDh60h3zzh6s9Jim+Alsy1Yccwoprgsg3WN8= Subject key identifier: 30:72:7A:A5:C6:4F:E1:C5:91:F6:5A:59:BC:88:29:0D:00:D9:97:3B Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F4328584B33F1A4377E06D49D7AB5FF40 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 395261 IP address blocks: 23.155.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a4:37:7e:06:d4:9d:7a:b5:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=a69e0d3e-b4bc-4b0b-b80d-e4feb9e6fd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:15:61:88:29:83:e6:7c:1f:cf:19:2f:9d: 2f:d8:b3:59:20:f2:58:47:a8:66:8f:d6:df:4e:84: 50:f5:4d:47:20:33:29:b5:b7:15:4f:95:94:b2:b0: 80:67:1e:c9:6b:be:95:ce:83:d0:70:7c:89:13:6b: 46:67:8c:6e:71:77:47:58:6d:4b:03:6a:3f:21:a6: 6a:55:72:4b:e1:2a:f7:cb:ef:94:10:2c:85:52:b9: 28:73:e9:95:0a:94:f8:13:31:bd:b1:fd:bf:a2:6c: 4e:d5:52:ca:9f:e6:b1:7a:73:24:66:5c:28:32:da: 9b:b1:46:ef:cd:24:94:ee:b5:ad:c3:8a:71:2c:09: 26:e6:65:34:21:36:16:20:ef:cb:4e:ce:6b:35:1c: 74:14:f1:41:b9:b3:63:95:87:30:f6:bf:04:82:da: 4d:d2:87:bf:39:6e:4d:ee:04:8b:fa:d8:12:a3:4a: d0:e6:ad:1e:82:e5:0f:92:2a:bb:e9:8a:5a:07:92: b0:d6:61:c7:4b:bc:52:ac:70:44:f9:95:d5:ef:6c: 60:b0:02:91:13:8c:35:e6:b4:f9:e5:e2:d1:73:e7: 6c:e1:ba:bf:5a:e9:0d:18:ae:61:14:2f:b2:08:99: 9e:4f:60:f6:de:17:03:f3:17:f2:c3:fd:10:9a:20: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:7A:A5:C6:4F:E1:C5:91:F6:5A:59:BC:88:29:0D:00:D9:97:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e4:a1:b9:9c:a2:50:af:fc:7e:54:01:4a:3a:00:8c:5c:9a: 45:fe:ab:1e:0c:42:d0:fb:9f:53:fd:46:75:23:88:63:b3:34: b4:64:08:84:27:1c:f2:69:db:94:20:e2:8d:03:05:c8:4a:45: dd:bd:2a:ba:8e:83:99:c9:47:8e:e6:75:a7:cf:31:2d:54:1d: 6f:e4:73:ea:13:06:7f:6d:0f:f3:a5:26:2b:a2:24:78:d1:2e: 70:d2:76:22:00:b9:22:9c:c8:2e:9d:13:3d:cc:a8:f8:c7:41: 10:e8:21:2a:8c:6b:ae:14:83:e6:cd:7f:52:4d:9a:0e:f3:38: 16:7e:ec:5b:c4:d3:6e:f1:98:90:71:6b:f1:4d:7d:5e:3a:8c: 7a:2b:87:1e:e6:7b:36:60:8f:cc:b4:d7:10:a0:c4:8a:72:c1: 55:f4:6b:65:24:2a:85:b4:9f:62:34:d5:09:86:4c:35:c3:1c: c2:8c:fe:44:62:f4:bb:11:50:1d:f7:f3:0a:3b:f6:30:b6:5f: 69:92:30:b0:c7:e0:2c:be:af:db:17:0e:bf:77:42:84:f0:74: f9:6c:75:a0:20:22:8b:d8:3b:2e:be:41:e6:37:e1:16:69:17: c2:0c:2f:43:c4:72:fd:98:2d:13:85:81:90:c5:02:17:81:7c: 9d:e5:31:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aQ3fgbUnXq1/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YTY5ZTBkM2UtYjRiYy00YjBiLWI4MGQtZTRmZWI5ZTZmZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrMVYYgpg+Z8H88ZL50v2LNZIPJYR6hmj9bf ToRQ9U1HIDMptbcVT5WUsrCAZx7Ja76VzoPQcHyJE2tGZ4xucXdHWG1LA2o/IaZq VXJL4Sr3y++UECyFUrkoc+mVCpT4EzG9sf2/omxO1VLKn+axenMkZlwoMtqbsUbv zSSU7rWtw4pxLAkm5mU0ITYWIO/LTs5rNRx0FPFBubNjlYcw9r8EgtpN0oe/OW5N 7gSL+tgSo0rQ5q0eguUPkiq76YpaB5Kw1mHHS7xSrHBE+ZXV72xgsAKRE4w15rT5 5eLRc+ds4bq/WukNGK5hFC+yCJmeT2D23hcD8xfyw/0QmiDlvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDByeqXGT+HFkfZaWbyIKQ0A2Zc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvNjlkZTA4MWEtZGM1Ni0z MDY1LWFlODktZTFhOGE1YWJkYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7kobmcolCv/H5UAUo6AIxcmkX+qx4MQtD7n1P9RnUjiGOzNLRkCIQn HPJp25Qg4o0DBchKRd29KrqOg5nJR47mdafPMS1UHW/kc+oTBn9tD/OlJiuiJHjR LnDSdiIAuSKcyC6dEz3MqPjHQRDoISqMa64Ug+bNf1JNmg7zOBZ+7FvE027xmJBx a/FNfV46jHorhx7mezZgj8y01xCgxIpywVX0a2UkKoW0n2I01QmGTDXDHMKM/kRi 9LsRUB338wo79jC2X2mSMLDH4Cy+r9sXDr93QoTwdPlsdaAgIovYOy6+QeY34RZp F8IML0PEcv2YLROFgZDFAheBfJ3lMWg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:47 2025 by rpki-client