$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa File: c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa (raw, json) Hash identifier: ik6+XOWgBU3kFLlICvu+idqZOl/iY+12E0eXSNNg3mo= Subject key identifier: E2:AD:70:C6:DB:A2:BA:28:71:2C:66:26:5C:8A:7F:26:33:48:A9:0A Certificate issuer: /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0 Certificate serial: 010D0C9F4328584B9E07B04E60E02CE612468990 Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 26042 IP address blocks: 23.145.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b0:4e:60:e0:2c:e6:12:46:89:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=72b1d2d7-fe73-44b3-a05b-9b842249504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:48:5f:a4:6e:85:81:59:42:19:7b:3b:1b: 48:7f:69:a0:6d:76:32:74:1e:6c:42:46:cb:87:04: d6:02:b3:88:45:2e:46:cd:04:b8:d2:d3:d9:0a:6a: a1:a9:c0:a3:a3:8c:33:b9:ff:15:cb:c4:35:15:57: 1d:fd:97:d7:34:44:4c:4f:ca:ff:d3:44:b2:8e:a5: 6d:bf:56:ef:bf:d4:41:d0:fd:c7:e0:72:36:37:5b: b6:c3:bb:9b:b3:b6:3e:8d:1f:7d:0a:17:ad:f9:8d: 8d:af:64:6c:20:d4:f1:3b:59:f0:1f:ad:8d:58:97: 1f:41:d3:1e:5c:9e:a4:ef:b6:29:a4:59:06:3e:b3: 5d:8b:59:2e:e1:55:36:73:0b:26:65:b1:b5:5a:3d: 9e:7d:86:95:22:e2:97:d9:66:11:d6:59:40:f4:08: ef:45:0d:63:7c:67:13:8e:c6:9f:87:27:8a:1a:73: 2b:7c:fc:08:a8:99:17:01:32:04:74:05:90:5d:19: 58:05:1c:7e:e6:45:65:9c:84:0c:54:ad:de:0e:07: ac:3b:69:31:ff:c8:d1:df:71:01:56:d7:06:25:5a: c3:7c:4e:e3:c2:73:7a:6f:a2:80:db:29:ed:87:de: 03:05:26:06:ba:2a:b1:b2:cc:5b:cd:e2:54:ec:e1: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:70:C6:DB:A2:BA:28:71:2C:66:26:5C:8A:7F:26:33:48:A9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl X509v3 Authority Key Identifier: keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer sbgp-ipAddrBlock: critical IPv4: 23.145.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a8:90:05:72:98:a5:03:74:db:3a:41:cb:7f:c2:13:5d:c1: ac:fe:65:08:c3:60:e4:69:e2:cc:99:c6:e3:42:7a:76:d2:a5: 8a:53:04:44:09:de:87:7d:ed:6c:b3:6b:a2:07:d8:ce:62:36: 2c:bf:55:63:42:af:fd:51:cb:29:03:11:eb:45:49:35:fe:8d: f1:ae:2e:56:94:49:10:52:ae:f5:fa:7c:3f:e8:00:c5:52:4f: 9f:6a:f0:d8:6e:07:a4:11:4a:aa:63:46:e4:9d:20:71:40:09: 59:42:05:ca:c4:8f:d1:05:52:cd:5a:84:36:43:9c:6d:1f:85: b3:e5:10:5b:5d:09:ab:8c:a2:67:0c:c7:e9:38:47:9b:d8:00: 9b:e4:0f:2c:f4:a9:f5:37:a8:1c:ea:4a:10:99:d0:ce:f6:4b: 6d:7a:5f:ab:06:c6:2c:7e:e8:e1:35:e8:6c:97:c4:36:2d:20: 74:cd:f6:28:ca:05:f7:bc:3d:0c:29:92:eb:13:8b:cb:7f:31: 3b:b0:8a:93:ba:7f:56:53:5d:72:5b:93:39:d1:2f:fd:8b:46: b8:f7:06:72:b3:67:cf:e6:30:7b:90:85:68:91:4d:08:3c:3b: a4:3f:1c:8f:f2:e8:da:1a:34:1b:e9:34:e7:fd:a2:7b:79:36: 03:6a:49:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7BOYOAs5hJGiZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlOGU5OTAtNTBmNC00Mjg0LWJmYzAtMTg3OGE1ZmJj MGYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzJiMWQyZDctZmU3My00NGIzLWEwNWItOWI4NDIyNDk1MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk95IX6RuhYFZQhl7OxtIf2mgbXYydB5sQkbL hwTWArOIRS5GzQS40tPZCmqhqcCjo4wzuf8Vy8Q1FVcd/ZfXNERMT8r/00SyjqVt v1bvv9RB0P3H4HI2N1u2w7ubs7Y+jR99Chet+Y2Nr2RsINTxO1nwH62NWJcfQdMe XJ6k77YppFkGPrNdi1ku4VU2cwsmZbG1Wj2efYaVIuKX2WYR1llA9AjvRQ1jfGcT jsafhyeKGnMrfPwIqJkXATIEdAWQXRlYBRx+5kVlnIQMVK3eDgesO2kx/8jR33EB VtcGJVrDfE7jwnN6b6KA2ynth94DBSYGuiqxssxbzeJU7OE2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKtcMbboroocSxmJlyKfyYzSKkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4 ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4YTVmYmMwZjAvYzNmZTgzZjgtZDI3Zi0z YjI0LTk3NWUtZDVhYjMwMDBjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRlOGU5OTAtNTBmNC00Mjg0LWJm YzAtMTg3OGE1ZmJjMGYwL2I0ZThlOTkwLTUwZjQtNDI4NC1iZmMwLTE4NzhhNWZi YzBmMC5jcmwwHwYDVR0jBBgwFoAUUFQz1YZtPDtRR5pSFKYsowMULhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4 YTVmYmMwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESokAVymKUDdNs6Qct/whNdwaz+ZQjDYORp4syZxuNCenbSpYpTBEQJ 3od97Wyza6IH2M5iNiy/VWNCr/1RyykDEetFSTX+jfGuLlaUSRBSrvX6fD/oAMVS T59q8NhuB6QRSqpjRuSdIHFACVlCBcrEj9EFUs1ahDZDnG0fhbPlEFtdCauMomcM x+k4R5vYAJvkDyz0qfU3qBzqShCZ0M72S216X6sGxix+6OE16GyXxDYtIHTN9ijK Bfe8PQwpkusTi8t/MTuwipO6f1ZTXXJbkznRL/2LRrj3BnKzZ8/mMHuQhWiRTQg8 O6Q/HI/y6NoaNBvpNOf9ont5NgNqSc0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:06 2025 by rpki-client