$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json) Hash identifier: nxQVG4QLlxqd1QiE9GvLybMW0p8W4QWiE777FYgCE98= Subject key identifier: 17:16:F9:5F:13:BE:92:54:8A:96:4B:6D:37:0A:CF:E7:DA:A8:C7:05 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F4328584B95A79850CEEBA656E8A8A480 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 32159 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:98:50:ce:eb:a6:56:e8:a8:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f0e39804-3754-4715-9b6a-26204a330418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:b3:cc:d0:bc:55:53:d0:4b:2f:f2:c4:28: 7a:3c:e8:aa:a4:e8:7f:bd:84:a9:35:d6:47:6a:20: 36:ad:24:29:a4:a0:c5:a4:b2:1d:e8:9b:c3:9c:93: f3:a4:36:d0:58:85:8c:64:c0:ba:3d:4b:98:4f:bd: c9:d5:7b:c6:75:d8:b6:e8:dc:f0:47:4a:0c:c8:d1: 8c:86:a6:8f:52:10:25:a6:b1:cb:9a:d3:13:01:67: fe:cb:cd:71:e1:ef:2b:f9:ba:a0:9f:8a:5f:1b:eb: 46:3f:4e:57:70:18:96:6c:17:52:b3:8a:9f:1f:e9: a6:d9:4b:86:78:75:bd:20:04:56:bf:d1:de:29:73: 0e:77:e4:50:04:64:56:0f:d2:b9:c7:94:a8:ab:ea: 93:d5:ca:b1:ae:bd:2b:4a:a1:44:23:a4:d0:ec:fa: dd:ca:bb:d5:5b:89:f7:98:98:ec:4d:72:6f:9e:46: 7e:27:a8:5d:07:37:d8:63:81:61:60:55:b2:ec:07: 18:ad:9b:5d:a8:16:f8:64:01:47:ff:d2:20:b7:7c: 37:f6:4c:51:89:7d:f3:02:51:86:43:5a:c2:43:aa: 28:25:85:1e:c1:0f:7c:e7:1b:5c:76:38:a2:15:00: 23:7b:3a:d8:67:97:b4:3e:4f:31:11:59:03:ec:e6: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:F9:5F:13:BE:92:54:8A:96:4B:6D:37:0A:CF:E7:DA:A8:C7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e2:3b:48:dc:7e:05:41:b5:e9:0f:32:bc:ee:f4:6e:6c:1d: 5e:1a:46:59:3f:58:3f:ed:23:f6:c7:9b:37:9d:3e:d0:ef:80: 70:36:19:3b:b2:b6:09:c2:97:a8:0f:af:dc:cc:14:99:29:da: 99:67:df:0a:b6:f3:2d:c5:03:4e:dd:a5:31:46:50:59:fc:f8: 0c:2b:18:04:25:b0:24:13:3d:f7:8d:fe:95:56:d5:56:10:26: a8:d8:ee:a0:24:d4:57:6a:58:8d:79:5f:d7:fe:2d:22:31:4e: 1e:9a:4b:cc:f1:ce:8b:4a:a2:db:2a:1c:81:e3:10:b7:44:b0: 92:c4:3a:9e:eb:a2:60:b6:8b:39:5a:db:b9:68:66:d3:74:ce: c7:6d:7f:30:a7:af:c3:94:d6:0b:9d:78:c9:24:85:68:db:3c: 4b:23:29:5f:9e:bd:58:ab:98:64:0f:11:d1:8c:c0:26:a1:9c: fb:1f:db:06:3b:a9:38:e0:d6:f5:53:ab:41:08:87:0c:8b:20: 61:46:1c:98:92:f1:a5:43:da:15:8a:a7:ff:2d:49:b8:35:85: 07:0a:57:c2:89:45:5c:96:b9:ae:41:8a:5f:70:5d:ea:8b:55: 04:94:e8:ba:f8:b6:01:12:da:14:1c:d8:ff:d9:44:8c:d7:bc: 19:95:c3:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5hQzuumVuiopIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjBlMzk4MDQtMzc1NC00NzE1LTliNmEtMjYyMDRhMzMwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPOzzNC8VVPQSy/yxCh6POiqpOh/vYSpNdZH aiA2rSQppKDFpLId6JvDnJPzpDbQWIWMZMC6PUuYT73J1XvGddi26NzwR0oMyNGM hqaPUhAlprHLmtMTAWf+y81x4e8r+bqgn4pfG+tGP05XcBiWbBdSs4qfH+mm2UuG eHW9IARWv9HeKXMOd+RQBGRWD9K5x5Soq+qT1cqxrr0rSqFEI6TQ7PrdyrvVW4n3 mJjsTXJvnkZ+J6hdBzfYY4FhYFWy7AcYrZtdqBb4ZAFH/9Igt3w39kxRiX3zAlGG Q1rCQ6ooJYUewQ985xtcdjiiFQAjezrYZ5e0Pk8xEVkD7OYXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcW+V8TvpJUipZLbTcKz+faqMcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvYmE3MTFiYTEtM2UwYS0z NzRjLWEzOTctZDM2ZWMyNjUyNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKziO0jcfgVBtekPMrzu9G5sHV4aRlk/WD/tI/bHmzedPtDvgHA2GTuy tgnCl6gPr9zMFJkp2pln3wq28y3FA07dpTFGUFn8+AwrGAQlsCQTPfeN/pVW1VYQ JqjY7qAk1FdqWI15X9f+LSIxTh6aS8zxzotKotsqHIHjELdEsJLEOp7romC2izla 27loZtN0zsdtfzCnr8OU1gudeMkkhWjbPEsjKV+evVirmGQPEdGMwCahnPsf2wY7 qTjg1vVTq0EIhwyLIGFGHJiS8aVD2hWKp/8tSbg1hQcKV8KJRVyWua5Bil9wXeqL VQSU6Lr4tgES2hQc2P/ZRIzXvBmVw7c= -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:29 2025 by rpki-client