$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa File: fffa2d48-0064-31ba-9b29-d239d610482f.roa (raw, json) Hash identifier: 4Ix6IptLiZdQDIRBvreoBIQALZvh6cbyebDOHi6Ypsk= Subject key identifier: 32:48:B9:3B:D4:DA:1A:4C:DB:A8:3B:23:B9:2E:CE:B8:74:03:93:2D Certificate issuer: /CN=be15a26b-f84c-4a26-80bf-412c1bc133a1 Certificate serial: 010D0C9F4328584B9BB666834EE19BA75E1EBCC0 Authority key identifier: E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa Signing time: Wed 22 Oct 2025 17:05:30 +0000 ROA not before: Wed 22 Oct 2025 17:05:30 +0000 ROA not after: Tue 20 Jan 2026 18:05:30 +0000 asID: 152918 IP address blocks: 23.147.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:b6:66:83:4e:e1:9b:a7:5e:1e:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be15a26b-f84c-4a26-80bf-412c1bc133a1 Validity Not Before: Oct 22 17:05:30 2025 GMT Not After : Jan 20 18:05:30 2026 GMT Subject: CN=ba63d6de-d59d-4b9e-8e94-7880d922c9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:3e:89:af:6d:eb:72:23:01:1b:de:6b:a1: f1:bc:19:18:a9:02:e1:77:45:7c:f7:19:92:19:81: e6:ea:fa:4e:b4:a9:7d:1a:89:f6:de:36:75:34:b8: 62:92:17:31:04:16:29:1c:68:dc:8a:94:70:15:28: d3:2d:26:d2:c3:b1:d8:4e:a7:84:f8:2c:0a:59:56: a2:2f:e7:7a:f6:26:e2:44:5d:4c:a5:9c:97:33:3e: 4d:08:5b:0c:9b:44:55:a0:95:1e:31:11:cd:9f:d0: a6:42:06:c9:c7:e5:41:93:6f:f3:c9:c7:fa:ec:78: c8:3e:21:bf:2d:96:52:81:93:89:11:0d:ae:57:c2: 33:b8:cf:6b:ad:f3:5f:05:b7:00:f3:81:f1:24:aa: 2f:77:fb:89:ac:56:e3:24:a8:d8:fa:ea:b3:3c:8a: 02:2a:71:01:35:97:75:e8:c8:67:3a:1d:94:64:c9: 7e:b0:ef:e7:d9:f0:7d:07:ee:f1:9d:8e:67:bb:df: 7e:5a:bf:b8:e3:62:27:c3:83:34:23:79:4a:df:0d: 33:25:2b:4b:24:a5:c6:05:23:d8:ed:cf:2c:dc:0e: ad:cc:30:70:62:54:fb:39:d3:3b:b2:84:79:f8:6f: e2:69:6b:6e:1e:70:19:ab:72:0d:34:89:b8:f0:d6: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:48:B9:3B:D4:DA:1A:4C:DB:A8:3B:23:B9:2E:CE:B8:74:03:93:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl X509v3 Authority Key Identifier: keyid:E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer sbgp-ipAddrBlock: critical IPv4: 23.147.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:05:03:2b:a3:3e:d9:96:8e:3e:51:a9:09:06:0b:fd:9a:a0: 55:94:b4:3a:31:86:3f:06:76:12:44:06:c4:63:ca:32:a5:f7: fa:f4:60:96:c2:7e:02:d6:1e:c5:6a:45:e9:7d:f2:95:6b:2d: 0c:f6:c4:21:1e:42:12:6d:11:7f:fd:28:f0:52:b0:1f:85:dc: f7:16:86:e1:65:0a:d2:fb:6f:be:a0:ad:30:8d:95:f4:bc:49: 07:50:0d:40:f5:a8:98:6a:2e:03:23:cc:ce:e4:e8:6d:ce:09: 9a:47:1e:30:5b:37:af:1b:2b:68:b5:ae:a3:51:ab:dd:7f:39: 44:76:47:08:93:90:d3:b1:41:e7:4a:da:6d:66:a3:63:8f:74: 4d:87:e0:fd:78:c6:72:76:4e:e8:99:79:18:1c:48:c4:b6:74: 14:44:cb:41:eb:21:7e:91:61:78:2d:50:60:0f:4a:11:2a:45: 48:57:1a:21:2f:9a:ba:3f:57:ec:ba:5a:9c:08:83:a5:3e:cb: ef:40:67:db:ab:d5:7e:ae:c9:88:8d:e2:f6:df:05:a6:b2:4c: c0:1d:88:f5:0b:77:06:f7:52:4c:01:a9:12:7e:29:01:0b:60: 0c:39:4b:9b:3d:d5:86:32:d4:7b:01:19:67:a2:5c:01:98:dc: 99:d7:b4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubtmaDTuGbp14evMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUxNWEyNmItZjg0Yy00YTI2LTgwYmYtNDEyYzFiYzEz M2ExMB4XDTI1MTAyMjE3MDUzMFoXDTI2MDEyMDE4MDUzMFowLzEtMCsGA1UEAxMk YmE2M2Q2ZGUtZDU5ZC00YjllLThlOTQtNzg4MGQ5MjJjOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHc+ia9t63IjARvea6HxvBkYqQLhd0V89xmS GYHm6vpOtKl9Gon23jZ1NLhikhcxBBYpHGjcipRwFSjTLSbSw7HYTqeE+CwKWVai L+d69ibiRF1MpZyXMz5NCFsMm0RVoJUeMRHNn9CmQgbJx+VBk2/zycf67HjIPiG/ LZZSgZOJEQ2uV8IzuM9rrfNfBbcA84HxJKovd/uJrFbjJKjY+uqzPIoCKnEBNZd1 6MhnOh2UZMl+sO/n2fB9B+7xnY5nu99+Wr+442Inw4M0I3lK3w0zJStLJKXGBSPY 7c8s3A6tzDBwYlT7OdM7soR5+G/iaWtuHnAZq3INNIm48NZo9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJIuTvU2hpM26g7I7kuzrh0A5MtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTE1 YTI2Yi1mODRjLTRhMjYtODBiZi00MTJjMWJjMTMzYTEvZmZmYTJkNDgtMDA2NC0z MWJhLTliMjktZDIzOWQ2MTA0ODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmUxNWEyNmItZjg0Yy00YTI2LTgw YmYtNDEyYzFiYzEzM2ExL2JlMTVhMjZiLWY4NGMtNGEyNi04MGJmLTQxMmMxYmMx MzNhMS5jcmwwHwYDVR0jBBgwFoAU6Po1enDFazFMWCureVvBK9SlRlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTE1YTI2Yi1mODRjLTRhMjYtODBiZi00MTJj MWJjMTMzYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgFAyujPtmWjj5RqQkGC/2aoFWUtDoxhj8GdhJEBsRjyjKl9/r0YJbC fgLWHsVqRel98pVrLQz2xCEeQhJtEX/9KPBSsB+F3PcWhuFlCtL7b76grTCNlfS8 SQdQDUD1qJhqLgMjzM7k6G3OCZpHHjBbN68bK2i1rqNRq91/OUR2RwiTkNOxQedK 2m1mo2OPdE2H4P14xnJ2TuiZeRgcSMS2dBREy0HrIX6RYXgtUGAPShEqRUhXGiEv mro/V+y6WpwIg6U+y+9AZ9ur1X6uyYiN4vbfBaayTMAdiPULdwb3UkwBqRJ+KQEL YAw5S5s91YYy1HsBGWeiXAGY3JnXtL4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:23 2025 by rpki-client