$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa File: c88482ce-5336-3c12-a513-f86f7726f25a.roa (raw, json) Hash identifier: fn9mNE5apqO7DgOSGJtNI3VwW63mJwfbzpbAKuu7OSA= Subject key identifier: A8:EB:3D:41:B6:69:86:2D:70:6F:84:B1:9F:52:5A:46:0D:18:11:06 Certificate issuer: /CN=3572e9fa-d098-46d4-a528-9373b3585402 Certificate serial: 010D0C9F4328584BBFA59808A20150438DDE11E0 Authority key identifier: B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 40139 IP address blocks: 23.186.144.0/24 maxlen: 24 23.186.145.0/24 maxlen: 24 23.186.146.0/24 maxlen: 24 23.186.147.0/24 maxlen: 24 23.186.148.0/24 maxlen: 24 23.186.149.0/24 maxlen: 24 23.186.150.0/24 maxlen: 24 23.186.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:98:08:a2:01:50:43:8d:de:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3572e9fa-d098-46d4-a528-9373b3585402 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=44e7cd73-b2a4-4f4e-8fd2-83216642a95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:e5:37:b6:07:61:97:54:f5:66:78:8f:d6: a8:cd:e9:99:8c:61:61:f1:a5:9a:c3:3c:92:b7:c1: d2:85:be:72:43:81:34:ad:9e:4f:99:87:3c:9d:ea: 78:a7:76:0d:10:0b:d1:ca:76:43:e8:c4:14:7f:54: ce:cf:45:e2:d9:6d:a5:d2:7a:31:35:b0:e1:e5:c2: 30:ec:93:cd:ad:f2:6d:ca:12:6e:5f:e6:40:c1:18: e4:7a:02:d3:dd:59:59:b6:2c:94:d0:28:b7:e3:8e: 71:f0:3c:24:74:c9:ea:68:46:05:2c:4d:70:82:bd: 3d:d9:14:76:3d:f4:b4:c3:39:ed:3c:79:3e:33:f7: b7:0c:3e:d6:a3:8a:74:4f:32:b5:da:1a:6a:0d:8e: d1:64:93:a0:25:f3:35:07:68:42:4a:55:77:0c:7a: 18:6f:7c:32:6e:f9:ae:32:6b:cf:f7:20:42:f5:0f: e6:7f:83:bf:19:15:c8:90:b6:21:c0:29:95:3a:e9: 83:da:b2:0b:9c:ab:df:fc:68:e3:54:c4:5c:51:89: 4d:58:28:ba:f3:ac:17:06:6b:a9:2d:fe:85:2e:71: b2:79:67:90:43:10:e5:5e:00:ef:7a:0e:44:c4:29: bc:0a:a2:b8:6f:26:8a:43:b9:4f:4b:57:8d:9b:65: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:3D:41:B6:69:86:2D:70:6F:84:B1:9F:52:5A:46:0D:18:11:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl X509v3 Authority Key Identifier: keyid:B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer sbgp-ipAddrBlock: critical IPv4: 23.186.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:97:ff:f1:2a:22:1a:39:19:c3:cc:02:c9:de:dc:b2:e1:c9: aa:20:7c:50:9d:71:53:99:e5:1b:30:53:81:e3:70:c9:f9:74: 24:c6:a2:db:12:89:b9:cb:60:d4:c0:15:c4:b7:bb:d7:e5:f7: b6:0d:99:1b:d3:bf:c5:c0:0a:cf:34:11:3a:07:08:cb:49:52: f0:19:6f:0f:c9:11:f5:96:47:9a:19:a3:8e:7e:a7:e8:ce:1f: de:2c:25:9a:25:51:d9:36:90:fd:42:f0:9e:4f:26:f7:53:73: cf:67:01:8c:36:3b:20:ad:fe:23:d6:bb:ff:d1:f4:8c:69:46: 5e:60:f6:4f:e7:ca:8b:21:9b:f8:55:56:82:fe:b7:7e:89:21: 02:00:fb:84:71:0d:24:ef:c8:4a:eb:b0:83:72:06:bb:35:40: a8:6b:e5:b5:78:de:89:89:34:01:69:df:09:31:ab:2e:b8:d2: f0:6e:4d:d7:33:35:c8:9e:50:a7:9a:28:e6:b3:b2:a7:ba:c2: ad:e2:ca:3e:b0:01:85:9e:18:ef:3f:a0:7a:5e:bc:0f:0f:be: 99:ee:6e:bc:92:e6:bb:61:d0:49:56:d0:85:5f:83:7c:36:35: fb:19:eb:85:4c:7f:c4:9b:07:7f:cf:89:b7:ba:b9:4d:09:38: 84:ab:be:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZgIogFQQ43eEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU3MmU5ZmEtZDA5OC00NmQ0LWE1MjgtOTM3M2IzNTg1 NDAyMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NDRlN2NkNzMtYjJhNC00ZjRlLThmZDItODMyMTY2NDJhOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVnlN7YHYZdU9WZ4j9aozemZjGFh8aWawzyS t8HShb5yQ4E0rZ5PmYc8nep4p3YNEAvRynZD6MQUf1TOz0Xi2W2l0noxNbDh5cIw 7JPNrfJtyhJuX+ZAwRjkegLT3VlZtiyU0Ci3445x8DwkdMnqaEYFLE1wgr092RR2 PfS0wzntPHk+M/e3DD7Wo4p0TzK12hpqDY7RZJOgJfM1B2hCSlV3DHoYb3wybvmu MmvP9yBC9Q/mf4O/GRXIkLYhwCmVOumD2rILnKvf/GjjVMRcUYlNWCi686wXBmup Lf6FLnGyeWeQQxDlXgDveg5ExCm8CqK4byaKQ7lPS1eNm2UhdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjrPUG2aYYtcG+EsZ9SWkYNGBEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNTcy ZTlmYS1kMDk4LTQ2ZDQtYTUyOC05MzczYjM1ODU0MDIvYzg4NDgyY2UtNTMzNi0z YzEyLWE1MTMtZjg2Zjc3MjZmMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzU3MmU5ZmEtZDA5OC00NmQ0LWE1 MjgtOTM3M2IzNTg1NDAyLzM1NzJlOWZhLWQwOTgtNDZkNC1hNTI4LTkzNzNiMzU4 NTQwMi5jcmwwHwYDVR0jBBgwFoAUtyfl3zG3cOj0HtqKbjQL8wiLMMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNTcyZTlmYS1kMDk4LTQ2ZDQtYTUyOC05Mzcz YjM1ODU0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF7qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKX//EqIho5GcPMAsne3LLhyaogfFCdcVOZ5RswU4HjcMn5dCTGotsS ibnLYNTAFcS3u9fl97YNmRvTv8XACs80EToHCMtJUvAZbw/JEfWWR5oZo45+p+jO H94sJZolUdk2kP1C8J5PJvdTc89nAYw2OyCt/iPWu//R9IxpRl5g9k/nyoshm/hV VoL+t36JIQIA+4RxDSTvyErrsINyBrs1QKhr5bV43omJNAFp3wkxqy640vBuTdcz NcieUKeaKOazsqe6wq3iyj6wAYWeGO8/oHpevA8PvpnubryS5rth0ElW0IVfg3w2 NfsZ64VMf8SbB3/Pibe6uU0JOISrvno= -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:51 2025 by rpki-client