$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa File: d91df06c-d7be-3991-8ca5-81afbc593f6b.roa (raw, json) Hash identifier: ISt+PrICGwVhvW0pnCVJz0iY7xC8X46+nus+yIUewTs= Subject key identifier: 49:AF:5A:E3:81:BA:A4:F9:E4:34:DD:95:1A:FF:10:A9:6F:9A:A5:23 Certificate issuer: /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Certificate serial: 010D0C9F4328584BB5D4ABFD19C23ED93115A480 Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa Signing time: Sat 01 Nov 2025 01:37:31 +0000 ROA not before: Sat 01 Nov 2025 01:37:31 +0000 ROA not after: Fri 30 Jan 2026 02:37:31 +0000 asID: 9304 IP address blocks: 23.148.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:d4:ab:fd:19:c2:3e:d9:31:15:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Validity Not Before: Nov 1 01:37:31 2025 GMT Not After : Jan 30 02:37:31 2026 GMT Subject: CN=68926b29-9fa9-40df-b653-8f0b26751339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:68:10:6e:77:b1:14:93:1f:fa:eb:ef:cd: b1:0b:01:6f:9c:ee:c6:44:12:41:ee:f2:94:40:ae: d8:a2:bd:bc:8d:86:54:37:7c:f0:d6:25:c7:8d:72: 71:db:de:2a:c4:fe:ff:55:0a:0b:b6:a7:98:3c:3f: ed:b9:7c:65:8f:28:12:7d:24:24:b6:32:12:6d:2a: 8e:8d:1a:99:01:8b:98:f4:09:ba:17:a5:6e:69:df: 31:88:52:04:e1:fb:e6:6f:05:71:e9:16:7b:30:be: c4:b0:ef:b5:b0:b9:a9:ad:5b:ef:61:87:73:f4:3e: 52:e9:ab:36:45:37:a9:89:44:27:e2:83:74:59:ce: ca:06:5a:b0:bc:a0:76:c5:19:6e:2f:f8:a6:92:32: 8e:89:e1:9e:1d:c1:d3:1a:b8:4d:94:66:49:c8:41: 52:86:d1:03:44:5b:66:94:b7:e4:62:a5:99:fa:b6: 49:9e:e3:12:33:72:2a:59:a5:4d:84:1e:3c:5e:13: 85:e4:24:d0:ec:47:ae:91:9d:22:fe:f5:a8:d6:aa: cf:cf:49:da:b1:c7:4b:9c:c5:84:13:2e:4f:3a:25: 1f:9e:ca:d3:cb:5d:57:75:48:27:44:c6:1a:e1:10: 4e:16:bc:fe:87:48:35:6b:76:cf:ee:35:a3:14:0c: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:5A:E3:81:BA:A4:F9:E4:34:DD:95:1A:FF:10:A9:6F:9A:A5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl X509v3 Authority Key Identifier: keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:42:dd:6d:3b:4e:5e:88:13:8f:73:7f:7f:78:82:cf:dd:b0: b4:05:04:76:87:42:4f:11:11:ae:11:b0:d7:da:ff:a6:f9:fc: 37:61:0f:e4:73:ca:a4:0c:57:d8:98:7a:15:d1:83:f7:6a:0c: 24:ee:b4:ab:a5:63:7b:27:73:13:3f:e6:3a:2e:87:b2:9c:06: 58:e5:97:f0:06:75:70:99:4e:91:82:9d:23:92:17:60:78:22: e0:fb:25:e3:14:7e:cb:eb:74:1d:5d:32:21:66:7c:82:55:1a: 83:e5:68:f2:4d:94:5b:7b:1c:78:4c:d5:24:24:83:a4:96:b6: d8:b3:5a:7b:25:3b:66:73:37:00:77:40:23:97:69:29:de:8e: c9:35:54:19:0c:90:62:cf:fd:ec:d5:9d:44:a1:bb:86:d1:1e: 4c:a5:0f:ba:ec:92:38:3b:46:32:58:a5:69:96:98:16:ed:82: 15:b6:3f:91:95:92:5d:ed:57:13:25:db:6c:ba:8f:f6:c4:15: ec:a8:29:49:12:9e:ab:d5:37:b0:55:50:56:ec:48:68:9f:38: 23:66:20:7a:49:8c:28:b3:36:67:74:c9:75:89:b1:72:12:90: de:c3:5c:f5:49:57:00:85:fc:bf:ac:c5:f1:5d:a4:8e:24:ac: 62:7c:7c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu11Kv9GcI+2TEVpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQw MzhkMB4XDTI1MTEwMTAxMzczMVoXDTI2MDEzMDAyMzczMVowLzEtMCsGA1UEAxMk Njg5MjZiMjktOWZhOS00MGRmLWI2NTMtOGYwYjI2NzUxMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizdoEG53sRSTH/rr782xCwFvnO7GRBJB7vKU QK7Yor28jYZUN3zw1iXHjXJx294qxP7/VQoLtqeYPD/tuXxljygSfSQktjISbSqO jRqZAYuY9Am6F6Vuad8xiFIE4fvmbwVx6RZ7ML7EsO+1sLmprVvvYYdz9D5S6as2 RTepiUQn4oN0Wc7KBlqwvKB2xRluL/imkjKOieGeHcHTGrhNlGZJyEFShtEDRFtm lLfkYqWZ+rZJnuMSM3IqWaVNhB48XhOF5CTQ7EeukZ0i/vWo1qrPz0nascdLnMWE Ey5POiUfnsrTy11XdUgnRMYa4RBOFrz+h0g1a3bP7jWjFAw4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmvWuOBuqT55DTdlRr/EKlvmqUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5 YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvZDkxZGYwNmMtZDdiZS0z OTkxLThjYTUtODFhZmJjNTkzZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRmOWM2YjgtMzk0NC00MjJiLThj OWMtMmNlNDVjOWQwMzhkL2E0ZjljNmI4LTM5NDQtNDIyYi04YzljLTJjZTQ1Yzlk MDM4ZC5jcmwwHwYDVR0jBBgwFoAUCUaKhUfu0AYz1kAC6ZppHboRUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0 NWM5ZDAzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtC3W07Tl6IE49zf394gs/dsLQFBHaHQk8REa4RsNfa/6b5/DdhD+Rz yqQMV9iYehXRg/dqDCTutKulY3sncxM/5jouh7KcBljll/AGdXCZTpGCnSOSF2B4 IuD7JeMUfsvrdB1dMiFmfIJVGoPlaPJNlFt7HHhM1SQkg6SWttizWnslO2ZzNwB3 QCOXaSnejsk1VBkMkGLP/ezVnUShu4bRHkylD7rskjg7RjJYpWmWmBbtghW2P5GV kl3tVxMl22y6j/bEFeyoKUkSnqvVN7BVUFbsSGifOCNmIHpJjCizNmd0yXWJsXIS kN7DXPVJVwCF/L+sxfFdpI4krGJ8fA0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:48 2025 by rpki-client