$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa File: ce00dd86-e265-3568-ab4e-161ec0685a22.roa (raw, json) Hash identifier: CkEm3ZgIUZFele7AP/ZpMff5L3Kzt5kWYF0eCkBok90= Subject key identifier: F4:A8:D1:21:80:B1:DA:89:0C:A7:72:A8:E1:A6:29:65:14:33:70:39 Certificate issuer: /CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d Certificate serial: 010D0C9F4328584BB427BFADF4BCF75AFD51A680 Authority key identifier: FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa Signing time: Fri 31 Oct 2025 11:13:17 +0000 ROA not before: Fri 31 Oct 2025 11:13:17 +0000 ROA not after: Thu 29 Jan 2026 12:13:17 +0000 asID: 152179 IP address blocks: 23.148.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:27:bf:ad:f4:bc:f7:5a:fd:51:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d Validity Not Before: Oct 31 11:13:17 2025 GMT Not After : Jan 29 12:13:17 2026 GMT Subject: CN=9e32950e-d7be-4670-8e0e-0b2d5b92d004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:21:ac:09:dd:0d:dd:e5:ee:0e:58:ca:7d: 9f:0c:f8:e5:9d:f8:e4:2a:7a:34:48:e9:6b:a2:3f: ce:39:35:88:7a:b6:04:47:97:43:f8:f7:09:80:f4: 45:94:e7:07:8b:1a:b2:6a:3a:41:8c:2a:bc:fd:2c: f6:e2:bf:5d:28:8b:60:ac:62:1e:84:34:6a:c1:d7: 4f:df:38:cf:31:42:37:3f:ad:91:d8:28:a4:fc:25: fd:14:bd:72:d7:cb:24:09:53:92:f8:29:06:35:a2: 99:21:7b:5f:5a:9c:cc:e2:3f:2a:8e:49:f1:c2:f0: 36:37:12:c3:e3:df:98:29:0a:21:3a:09:1c:46:64: e8:24:3c:fe:ca:78:e6:99:cb:3c:79:7f:c1:2b:3f: e6:6e:c3:a2:81:6a:a6:c7:3f:4a:49:70:f9:35:cc: 46:a5:0e:11:bf:61:36:ef:5d:42:47:78:a5:79:66: 4d:02:5c:67:9b:24:2f:ef:b2:f1:38:cf:16:bf:85: 83:64:e1:02:aa:98:9b:b4:96:46:bc:19:85:78:8c: fa:4e:c7:cf:e6:e9:a6:09:31:66:41:6d:d6:1b:6d: de:64:48:4b:be:5d:c6:1b:42:dc:d7:f4:a0:0c:45: 85:bc:e5:c5:ed:a7:88:27:e5:0f:ed:e9:ff:e0:a8: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A8:D1:21:80:B1:DA:89:0C:A7:72:A8:E1:A6:29:65:14:33:70:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl X509v3 Authority Key Identifier: keyid:FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4d:ca:3d:b6:c4:53:4b:09:24:f5:91:cc:77:a1:fa:b6:11: 35:52:a7:28:27:59:a9:24:93:69:66:49:c1:6a:9c:06:f1:3d: 1e:a6:85:71:b5:dd:58:f3:f4:9c:1e:24:c1:4b:29:b5:17:58: 37:a5:30:5f:d1:b1:2c:a4:73:d9:02:10:0a:a8:e5:be:db:09: 25:04:5a:8d:d9:50:3e:b8:00:85:42:96:12:81:cc:c6:a1:ce: 1b:37:13:0e:12:04:8b:5a:38:49:c3:c1:14:dd:5c:5c:ba:0d: 5d:34:02:15:1d:0f:7d:f0:45:31:c8:02:ea:60:87:23:e1:e7: bb:68:fe:32:bb:74:10:7c:58:e4:37:03:e6:c1:73:1a:41:02: 44:34:85:cc:97:6d:a9:ca:8d:ee:9f:71:a9:f4:06:5e:a8:ed: ca:c0:83:0d:e8:1f:75:aa:1a:77:ad:e3:01:02:d9:b7:1b:f7: 27:f3:77:a5:d5:68:5a:d9:01:fb:63:92:e8:aa:c3:cb:0b:7a: 95:c7:7b:5b:fa:a0:7a:19:ec:8e:bd:bd:85:42:22:27:1b:56: 61:96:59:aa:d5:b2:48:e1:cf:e6:24:14:c8:a2:47:2a:39:15: 53:93:47:e3:9b:bb:af:fe:b7:0b:1a:47:eb:83:c1:36:87:f7: c5:90:e1:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0J7+t9Lz3Wv1RpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YTE1YzktYmQ0Yi00YjQwLThiZDAtMjE0OTNiNTQx YzBkMB4XDTI1MTAzMTExMTMxN1oXDTI2MDEyOTEyMTMxN1owLzEtMCsGA1UEAxMk OWUzMjk1MGUtZDdiZS00NjcwLThlMGUtMGIyZDViOTJkMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QhrAndDd3l7g5Yyn2fDPjlnfjkKno0SOlr oj/OOTWIerYER5dD+PcJgPRFlOcHixqyajpBjCq8/Sz24r9dKItgrGIehDRqwddP 3zjPMUI3P62R2Cik/CX9FL1y18skCVOS+CkGNaKZIXtfWpzM4j8qjknxwvA2NxLD 49+YKQohOgkcRmToJDz+ynjmmcs8eX/BKz/mbsOigWqmxz9KSXD5NcxGpQ4Rv2E2 711CR3ileWZNAlxnmyQv77LxOM8Wv4WDZOECqpibtJZGvBmFeIz6TsfP5ummCTFm QW3WG23eZEhLvl3GG0Lc1/SgDEWFvOXF7aeIJ+UP7en/4KisDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSo0SGAsdqJDKdyqOGmKWUUM3A5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdh MTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5M2I1NDFjMGQvY2UwMGRkODYtZTI2NS0z NTY4LWFiNGUtMTYxZWMwNjg1YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3YTE1YzktYmQ0Yi00YjQwLThi ZDAtMjE0OTNiNTQxYzBkLzZkN2ExNWM5LWJkNGItNGI0MC04YmQwLTIxNDkzYjU0 MWMwZC5jcmwwHwYDVR0jBBgwFoAU/JnWxJeoSLKUHpuDiBn47gKWQoUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdhMTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5 M2I1NDFjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5RMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZNyj22xFNLCST1kcx3ofq2ETVSpygnWakkk2lmScFqnAbxPR6mhXG1 3Vjz9JweJMFLKbUXWDelMF/RsSykc9kCEAqo5b7bCSUEWo3ZUD64AIVClhKBzMah zhs3Ew4SBItaOEnDwRTdXFy6DV00AhUdD33wRTHIAupghyPh57to/jK7dBB8WOQ3 A+bBcxpBAkQ0hcyXbanKje6fcan0Bl6o7crAgw3oH3WqGnet4wEC2bcb9yfzd6XV aFrZAftjkuiqw8sLepXHe1v6oHoZ7I69vYVCIicbVmGWWarVskjhz+YkFMiiRyo5 FVOTR+Obu6/+twsaR+uDwTaH98WQ4aU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:50 2025 by rpki-client