$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa File: fd59d408-b434-36e3-98fa-713677d3b3db.roa (raw, json) Hash identifier: zlEj9gfUSQgwhXdYawDt+iLSUIksF/AKJ8LKFbFjBVE= Subject key identifier: 24:C3:96:15:67:BE:A0:CA:6E:08:18:4F:02:A6:BD:0B:FE:B9:65:4F Certificate issuer: /CN=1f024790-b55d-4e1d-a912-a48862656284 Certificate serial: 010D0C9F4328584BBA3D7557159E4B7F6F3D1800 Authority key identifier: F4:04:60:35:3D:D9:1F:6B:C7:F6:5A:21:B1:10:13:78:00:5B:09:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa Signing time: Sun 02 Nov 2025 15:31:53 +0000 ROA not before: Sun 02 Nov 2025 15:31:53 +0000 ROA not after: Sat 31 Jan 2026 15:31:53 +0000 asID: 174 IP address blocks: 23.148.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:3d:75:57:15:9e:4b:7f:6f:3d:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f024790-b55d-4e1d-a912-a48862656284 Validity Not Before: Nov 2 15:31:53 2025 GMT Not After : Jan 31 15:31:53 2026 GMT Subject: CN=0021ef3a-d6a7-4088-b603-c044a54a7b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:b6:24:1f:76:19:33:c2:01:db:25:b0:34: 8a:38:07:f8:41:94:1f:71:fe:d0:ec:de:a6:0a:88: f2:e0:89:1e:18:d3:52:67:a7:27:a8:ca:bf:43:88: 21:66:0d:51:87:c7:8e:b8:ca:b0:18:46:01:16:91: 9b:2a:a6:92:f3:63:81:86:a5:66:d8:b3:4b:27:56: 47:fd:fa:78:1a:15:c5:52:88:98:fd:58:34:7a:ed: d2:b1:39:94:3f:56:2a:2e:f1:6e:3f:0d:31:35:73: 56:af:af:26:0a:f0:48:69:53:78:98:84:14:1f:e7: 9d:6c:d1:20:ba:eb:12:69:db:07:8f:cc:8f:46:77: 4b:6c:84:18:7a:b3:0e:db:16:85:39:86:51:7b:e9: c4:56:59:1b:24:89:47:88:ff:0b:83:6d:3f:96:ad: eb:2a:ec:8d:c0:82:f0:ad:5a:d6:25:71:77:d4:32: bb:c5:c2:11:32:b9:76:c6:b6:eb:89:da:f6:f5:a7: 0c:12:5e:bc:b5:56:26:55:e1:2d:b5:a2:32:e6:85: 0e:9e:ed:33:e5:79:07:86:d8:65:45:d0:d4:94:73: c6:f3:0f:30:4e:ac:6d:5a:12:ea:9a:74:75:19:94: a7:04:a9:83:4a:83:09:f8:92:34:ca:e1:bf:6d:61: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C3:96:15:67:BE:A0:CA:6E:08:18:4F:02:A6:BD:0B:FE:B9:65:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/fd59d408-b434-36e3-98fa-713677d3b3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284/1f024790-b55d-4e1d-a912-a48862656284.crl X509v3 Authority Key Identifier: keyid:F4:04:60:35:3D:D9:1F:6B:C7:F6:5A:21:B1:10:13:78:00:5B:09:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f024790-b55d-4e1d-a912-a48862656284.cer sbgp-ipAddrBlock: critical IPv4: 23.148.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:53:82:a4:7a:20:4c:fb:90:0f:df:24:69:84:78:75:e8:ab: 31:ba:aa:fa:9a:d6:92:6e:bb:97:a9:83:5f:7a:28:41:77:ab: 64:c9:e2:90:38:93:1b:63:ac:da:bb:7b:34:88:5c:9a:d9:9c: ce:39:77:30:65:54:55:87:4d:84:81:13:58:0c:97:a5:e3:48: 35:8f:2b:e2:e0:58:30:f4:ba:b0:23:f1:b5:25:52:ad:55:7e: 3a:1d:af:35:8a:da:68:75:c7:04:ae:ef:99:34:bc:b2:34:f3: f2:2c:0d:6d:bc:7d:a4:1a:4d:58:0f:62:d7:dc:5f:fb:2a:ee: ab:77:bd:f3:ed:aa:35:7d:9a:b0:89:1a:05:e0:bd:cd:7b:f0: 41:03:26:80:81:2d:75:87:f5:85:47:02:3c:17:44:18:90:b0: 3f:82:4a:63:c4:0e:df:ec:5b:fd:65:f8:89:c4:4d:e1:42:ce: 02:94:f4:fb:44:22:78:02:c6:7b:b0:4d:99:ec:d7:e6:4f:19: 7a:41:6e:bb:fa:d5:70:df:56:01:34:d8:33:87:21:d2:42:d5: ba:90:58:17:43:4b:48:48:33:cc:c9:ec:e0:0c:8d:00:fb:c6: 2f:44:cc:f4:f6:59:6d:62:62:8a:50:7a:11:f1:5f:a3:c9:be: 28:cd:a2:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6PXVXFZ5Lf289GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwMjQ3OTAtYjU1ZC00ZTFkLWE5MTItYTQ4ODYyNjU2 Mjg0MB4XDTI1MTEwMjE1MzE1M1oXDTI2MDEzMTE1MzE1M1owLzEtMCsGA1UEAxMk MDAyMWVmM2EtZDZhNy00MDg4LWI2MDMtYzA0NGE1NGE3YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApme2JB92GTPCAdslsDSKOAf4QZQfcf7Q7N6m Cojy4IkeGNNSZ6cnqMq/Q4ghZg1Rh8eOuMqwGEYBFpGbKqaS82OBhqVm2LNLJ1ZH /fp4GhXFUoiY/Vg0eu3SsTmUP1YqLvFuPw0xNXNWr68mCvBIaVN4mIQUH+edbNEg uusSadsHj8yPRndLbIQYerMO2xaFOYZRe+nEVlkbJIlHiP8Lg20/lq3rKuyNwILw rVrWJXF31DK7xcIRMrl2xrbridr29acMEl68tVYmVeEttaIy5oUOnu0z5XkHhthl RdDUlHPG8w8wTqxtWhLqmnR1GZSnBKmDSoMJ+JI0yuG/bWEbFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTDlhVnvqDKbggYTwKmvQv+uWVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjAy NDc5MC1iNTVkLTRlMWQtYTkxMi1hNDg4NjI2NTYyODQvZmQ1OWQ0MDgtYjQzNC0z NmUzLTk4ZmEtNzEzNjc3ZDNiM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWYwMjQ3OTAtYjU1ZC00ZTFkLWE5 MTItYTQ4ODYyNjU2Mjg0LzFmMDI0NzkwLWI1NWQtNGUxZC1hOTEyLWE0ODg2MjY1 NjI4NC5jcmwwHwYDVR0jBBgwFoAU9ARgNT3ZH2vH9lohsRATeABbCaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjAyNDc5MC1iNTVkLTRlMWQtYTkxMi1hNDg4 NjI2NTYyODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5R8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdTgqR6IEz7kA/fJGmEeHXoqzG6qvqa1pJuu5epg196KEF3q2TJ4pA4 kxtjrNq7ezSIXJrZnM45dzBlVFWHTYSBE1gMl6XjSDWPK+LgWDD0urAj8bUlUq1V fjodrzWK2mh1xwSu75k0vLI08/IsDW28faQaTVgPYtfcX/sq7qt3vfPtqjV9mrCJ GgXgvc178EEDJoCBLXWH9YVHAjwXRBiQsD+CSmPEDt/sW/1l+InETeFCzgKU9PtE IngCxnuwTZns1+ZPGXpBbrv61XDfVgE02DOHIdJC1bqQWBdDS0hIM8zJ7OAMjQD7 xi9EzPT2WW1iYopQehHxX6PJvijNog8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:01:43 2025 by rpki-client