$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json) Hash identifier: Gj2xtjZXRIo2SWB6f+wfAzat/dL6DwtS4vIbWTvWxRc= Subject key identifier: C9:43:9D:C3:E0:1C:30:33:FA:FA:E3:73:6F:53:C9:CB:E1:5C:F3:2E Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584B821CCC7BC1EC751A2CC77500 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 35008 IP address blocks: 23.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cc:7b:c1:ec:75:1a:2c:c7:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0adda6ff-23c5-4c13-acc5-be2798565658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:87:70:25:68:49:a1:cc:35:9c:9b:f4:96:b9: 45:fb:f8:af:b3:75:ae:0a:f7:3e:ef:67:96:a8:65: 08:6a:d0:1f:14:b2:8f:12:6e:72:44:ff:fb:18:e9: 6a:f9:d0:e7:16:6b:de:49:71:40:c9:77:76:b3:95: 55:fd:09:1e:25:d8:ef:b0:6f:ee:c2:38:f9:fa:6a: 35:04:75:a5:82:31:90:e1:26:4f:c8:13:94:46:6b: c5:de:38:cc:fb:75:f7:51:46:3f:8e:7c:f0:4a:06: a8:44:8e:b3:71:58:0e:6a:7d:c7:fb:f1:7b:95:50: 51:ad:12:db:ad:57:ec:ac:2c:a7:ca:e1:1e:bf:f1: 89:48:8f:f7:c3:ce:07:8f:91:da:87:04:36:a1:60: af:be:72:b0:01:36:51:1a:c7:80:7b:38:3f:d7:9d: 5c:4a:2c:88:80:6a:21:f0:f7:b0:4b:08:aa:87:0a: 4e:19:04:1d:c0:7f:9b:6f:e5:1b:ed:1b:da:99:60: d8:e5:59:9a:e1:29:9b:6f:ae:33:51:59:dd:42:a2: e5:39:10:53:af:84:a0:10:59:77:a4:b8:a3:a8:bf: 9b:c8:8a:51:1e:57:6d:4a:b4:e5:b9:8b:e0:95:5e: c2:0a:7b:6c:ba:16:bc:65:42:75:7a:86:3f:ef:87: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:43:9D:C3:E0:1C:30:33:FA:FA:E3:73:6F:53:C9:CB:E1:5C:F3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv4: 23.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:77:7d:38:63:08:10:8b:9d:0f:df:75:d1:4b:0a:18:93:70: b5:ca:13:8f:a8:f2:ff:c4:7d:c8:c1:0b:02:bb:ef:f3:6d:87: 23:e9:d9:01:f8:6f:13:8d:57:45:e3:8c:51:b0:57:01:e1:98: 56:cf:3c:90:7d:27:4a:81:b0:4d:8a:1c:cb:4e:9e:61:f1:b5: 4f:f5:4d:8c:06:46:69:13:e7:78:1b:3b:06:29:4c:f4:5e:bb: 61:1e:bd:4d:e9:88:5f:21:ee:66:16:d8:94:25:bc:1e:79:67: f7:1d:de:76:f5:e6:24:31:92:63:e2:e8:5f:4f:69:12:1b:83: 9e:e6:21:1f:39:a6:a5:ac:46:01:84:18:9b:32:a6:8e:36:89: 9e:62:44:2c:e7:92:b4:e6:5d:07:82:23:36:cd:f5:b6:91:5d: 61:87:1c:92:30:79:ab:4d:9e:d3:cd:14:37:98:57:4f:67:95: 49:dc:e0:b5:b7:bd:ac:86:be:91:db:43:a5:da:5f:cb:a9:d5: df:c1:24:7d:88:9e:46:67:66:ad:9b:e5:cd:4f:b3:be:e5:7a: 31:98:9b:03:d9:9d:9b:95:07:47:fd:6c:4b:e7:4e:06:3b:3c: 19:b1:3f:2c:3a:92:50:69:e9:04:51:79:a0:4a:fc:64:04:16: 13:4d:e6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMx7wex1GizHdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGFkZGE2ZmYtMjNjNS00YzEzLWFjYzUtYmUyNzk4NTY1NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjodwJWhJocw1nJv0lrlF+/ivs3WuCvc+72eW qGUIatAfFLKPEm5yRP/7GOlq+dDnFmveSXFAyXd2s5VV/QkeJdjvsG/uwjj5+mo1 BHWlgjGQ4SZPyBOURmvF3jjM+3X3UUY/jnzwSgaoRI6zcVgOan3H+/F7lVBRrRLb rVfsrCynyuEev/GJSI/3w84Hj5HahwQ2oWCvvnKwATZRGseAezg/151cSiyIgGoh 8PewSwiqhwpOGQQdwH+bb+Ub7RvamWDY5Vma4Smbb64zUVndQqLlORBTr4SgEFl3 pLijqL+byIpRHldtSrTluYvglV7CCntsuha8ZUJ1eoY/74fPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlDncPgHDAz+vrjc29TycvhXPMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx3fThjCBCLnQ/fddFLChiTcLXKE4+o8v/EfcjBCwK77/NthyPp2QH4 bxONV0XjjFGwVwHhmFbPPJB9J0qBsE2KHMtOnmHxtU/1TYwGRmkT53gbOwYpTPRe u2EevU3piF8h7mYW2JQlvB55Z/cd3nb15iQxkmPi6F9PaRIbg57mIR85pqWsRgGE GJsypo42iZ5iRCznkrTmXQeCIzbN9baRXWGHHJIweatNntPNFDeYV09nlUnc4LW3 vayGvpHbQ6XaX8up1d/BJH2InkZnZq2b5c1Ps77lejGYmwPZnZuVB0f9bEvnTgY7 PBmxPyw6klBp6QRReaBK/GQEFhNN5o0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:47 2025 by rpki-client