$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa File: 358c0fd2-f2dc-357c-8822-31ed52d1d684.roa (raw, json) Hash identifier: sF9IzMD1bnIvEnWpgoW84gChx32M+TMGtSwtnpDLjBc= Subject key identifier: 1F:34:5A:06:13:95:59:EF:B7:03:E7:DC:17:54:9E:FF:8E:A2:55:66 Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584B99D77C417645C571DED2E330 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398960 IP address blocks: 23.168.144.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7c:41:76:45:c5:71:de:d2:e3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a182942f-4a47-4719-b340-a038707ad307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:e2:05:c1:f6:df:22:b6:f1:a7:17:8d:06: 73:22:d9:22:11:d7:88:5b:fb:c4:25:3c:54:ae:86: c3:fb:e2:d9:a0:29:f2:92:b6:07:5e:b8:d9:80:f5: 08:67:fa:68:7c:0a:e5:98:62:36:cc:1f:03:28:2a: 27:2d:25:92:10:0d:96:a5:9a:ac:a5:5c:29:92:f4: 11:bc:b5:5f:38:a2:bc:63:4e:7a:72:96:b1:d8:b5: 74:80:d1:cd:1b:ff:6f:ad:8c:2c:30:b6:bb:6c:36: de:e1:b4:49:bc:d3:4b:65:ed:55:d0:39:cb:49:c8: a2:99:e8:20:9a:25:b2:5a:2e:b7:58:39:97:9e:20: 97:0b:08:c6:a6:97:aa:65:95:80:e7:c2:89:4a:c3: b1:a2:68:a5:88:ec:76:8a:97:cd:fb:21:0c:7b:35: 76:8b:84:27:22:80:29:58:f9:58:8a:17:03:26:2a: ca:e7:7d:01:b4:6d:b1:06:1c:cb:82:8d:ca:9b:80: 37:a2:b3:06:ce:67:45:3b:98:2e:d4:5d:68:15:f6: be:6e:3e:f2:6a:1f:ae:87:fc:16:e6:db:b5:ac:b9: b8:26:86:4a:25:ab:41:71:e5:67:04:77:1d:be:e8: 2f:19:96:d1:db:bf:c6:66:58:62:0e:76:c3:b7:56: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:34:5A:06:13:95:59:EF:B7:03:E7:DC:17:54:9E:FF:8E:A2:55:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv4: 23.168.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:56:37:e8:41:30:19:e0:85:4a:a2:17:5d:06:e2:85:51: 62:ef:48:d6:b7:8a:a8:29:9c:c1:83:b9:1e:da:1a:2d:c4:6b: 58:65:c7:81:fd:cc:01:b2:4e:17:31:e9:2f:f0:a5:d4:c3:9c: ac:5d:db:77:1a:f4:d7:f7:28:33:40:31:54:f0:2e:86:7c:b7: 84:45:a1:08:cd:d3:27:ed:8d:2c:43:5b:b1:ca:7b:12:8b:41: 78:2c:42:bb:7c:2c:bf:0a:28:7f:3e:89:bd:cd:cd:9d:1c:bd: ba:40:51:40:57:9d:82:bc:87:0a:74:22:ba:ff:3e:50:a0:aa: 4d:e9:89:47:53:57:b7:ab:3a:ea:9a:16:cc:dc:dd:18:0d:50: c9:79:f2:4a:75:b0:e9:fd:45:79:e2:2c:82:6e:32:f6:47:ef: 14:c9:e6:de:d9:af:ec:5c:08:fe:ca:0e:de:9d:93:16:f8:05: 0b:91:73:cc:94:b0:a0:9e:55:e7:9b:38:10:b1:b1:43:e4:4f: b9:f0:78:94:2d:3d:51:69:92:f2:b3:d5:79:97:16:a7:29:24: 0d:8e:0e:bd:9b:ea:91:52:ae:4f:59:93:4c:99:76:56:53:df: 5c:d9:44:f7:08:c8:f9:65:cf:f9:7e:3e:ec:55:cd:6e:26:83: aa:ed:c9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13xBdkXFcd7S4zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTE4Mjk0MmYtNGE0Ny00NzE5LWIzNDAtYTAzODcwN2FkMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGviBcH23yK28acXjQZzItkiEdeIW/vEJTxU robD++LZoCnykrYHXrjZgPUIZ/pofArlmGI2zB8DKConLSWSEA2WpZqspVwpkvQR vLVfOKK8Y056cpax2LV0gNHNG/9vrYwsMLa7bDbe4bRJvNNLZe1V0DnLSciimegg miWyWi63WDmXniCXCwjGppeqZZWA58KJSsOxomiliOx2ipfN+yEMezV2i4QnIoAp WPlYihcDJirK530BtG2xBhzLgo3Km4A3orMGzmdFO5gu1F1oFfa+bj7yah+uh/wW 5tu1rLm4JoZKJatBceVnBHcdvugvGZbR27/GZlhiDnbDt1Yt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB80WgYTlVnvtwPn3BdUnv+OolVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvMzU4YzBmZDItZjJkYy0z NTdjLTg4MjItMzFlZDUyZDFkNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvyVjfoQTAZ4IVKohddBuKFUWLvSNa3iqgpnMGDuR7aGi3Ea1hlx4H9 zAGyThcx6S/wpdTDnKxd23ca9Nf3KDNAMVTwLoZ8t4RFoQjN0yftjSxDW7HKexKL QXgsQrt8LL8KKH8+ib3NzZ0cvbpAUUBXnYK8hwp0Irr/PlCgqk3piUdTV7erOuqa Fszc3RgNUMl58kp1sOn9RXniLIJuMvZH7xTJ5t7Zr+xcCP7KDt6dkxb4BQuRc8yU sKCeVeebOBCxsUPkT7nweJQtPVFpkvKz1XmXFqcpJA2ODr2b6pFSrk9Zk0yZdlZT 31zZRPcIyPllz/l+PuxVzW4mg6rtyYE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:20 2025 by rpki-client