$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa File: 25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa (raw, json) Hash identifier: f+Vc/dwWlnmcTZqn91vdwMd95fkmKC8lyUL3sq1Desw= Subject key identifier: 1E:8A:D6:8C:B4:3E:AE:8D:A7:79:F3:8A:AF:69:D7:53:1F:86:4C:38 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584BABFD0D8F4875589EAF03BE00 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 21738 IP address blocks: 23.150.40.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0d:8f:48:75:58:9e:af:03:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=e381925e-5b3a-4e72-ad60-473be2ce6d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:dd:9b:60:86:3b:39:40:f0:ff:22:7f:20: db:de:23:80:a5:af:a7:69:a2:77:be:91:5f:0d:3d: 2e:4c:17:fb:fb:71:c4:45:a7:f5:73:25:9b:2a:96: aa:82:50:a0:9b:ed:3e:74:5b:cb:3d:df:3c:41:ca: 40:50:09:3e:49:3c:48:04:e8:35:df:02:06:78:31: c7:b5:27:d2:42:6f:1b:5c:b8:d9:97:4e:f2:d5:27: 78:61:01:3b:3d:f3:83:46:b9:2b:2f:ef:de:77:aa: c4:23:65:b3:6c:cb:8d:7e:05:d0:3c:1a:a8:66:4f: ab:73:ef:a4:e7:a9:d7:dd:0f:82:64:05:e6:06:82: ab:08:09:5c:d7:6d:09:04:60:c4:eb:a5:23:75:3d: ad:4f:ac:92:2d:06:ef:ff:dc:d8:7e:2b:94:12:5c: 76:7c:f1:b6:8d:e8:ed:6c:c7:b5:63:d3:8b:cd:2a: 54:96:cc:3d:78:3f:5f:9a:38:f3:79:1d:70:ef:93: 96:b2:2a:7e:07:d6:de:4f:22:ac:e7:f0:0c:c2:55: 8c:4f:39:74:89:fe:c2:a7:79:b3:93:ee:b3:23:f4: 18:32:5d:26:ac:09:d1:95:43:17:de:b9:7d:3b:97: eb:ec:53:d7:6f:db:d5:35:9e:17:fe:1b:a9:95:3f: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8A:D6:8C:B4:3E:AE:8D:A7:79:F3:8A:AF:69:D7:53:1F:86:4C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 23.150.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b5:a3:91:a8:e7:5e:ff:dd:b1:f5:eb:58:c8:93:7f:62:b2: ea:ba:15:70:4c:a3:fd:d3:35:3a:61:e2:d6:3a:2d:4b:20:ee: 0b:f3:51:1a:a3:cd:70:b2:b8:ca:c5:1a:55:78:0d:52:bc:fe: b4:90:79:a2:87:e3:62:f7:af:86:06:ab:8d:4d:a8:18:b6:51: 97:8e:2d:8b:a3:57:88:30:b5:9a:59:56:42:a3:3c:0f:60:75: 6d:07:9c:63:5b:35:1a:24:fc:37:32:38:8b:fc:71:d1:10:cc: 17:99:70:66:56:28:0c:ad:28:18:5c:94:66:65:70:0b:20:dd: 2a:28:08:fa:87:11:08:f4:d2:21:46:52:44:84:6b:8c:2d:af: 8a:4d:7d:f5:3f:66:34:e6:9b:03:b5:ca:79:49:24:58:35:57: 0c:89:46:f1:b2:41:3b:fe:71:72:14:51:d3:0b:ae:e4:f4:68: f8:0f:82:ed:dd:21:3d:6a:1f:de:f1:77:04:4a:40:90:e1:62: 7c:77:fb:40:d6:5e:83:85:ae:3e:74:9e:d8:f9:73:39:46:11: f4:cb:d9:0d:ab:df:8e:bf:0e:cb:20:6c:da:0f:db:08:23:7c: 08:86:a6:6a:31:d4:1e:97:a1:9e:5f:5f:0e:d8:d5:cb:ea:e1: e8:48:e5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Q2PSHVYnq8DvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZTM4MTkyNWUtNWIzYS00ZTcyLWFkNjAtNDczYmUyY2U2ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB7dm2CGOzlA8P8ifyDb3iOApa+naaJ3vpFf DT0uTBf7+3HERaf1cyWbKpaqglCgm+0+dFvLPd88QcpAUAk+STxIBOg13wIGeDHH tSfSQm8bXLjZl07y1Sd4YQE7PfODRrkrL+/ed6rEI2WzbMuNfgXQPBqoZk+rc++k 56nX3Q+CZAXmBoKrCAlc120JBGDE66UjdT2tT6ySLQbv/9zYfiuUElx2fPG2jejt bMe1Y9OLzSpUlsw9eD9fmjjzeR1w75OWsip+B9beTyKs5/AMwlWMTzl0if7Cp3mz k+6zI/QYMl0mrAnRlUMX3rl9O5fr7FPXb9vVNZ4X/huplT/kSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6K1oy0Pq6Np3nziq9p11Mfhkw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvMjVkYWIwMjctY2FhOS0z YzJiLWIzMDctZDJlYmMwODhkZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS1o5Go517/3bH161jIk39isuq6FXBMo/3TNTph4tY6LUsg7gvzURqj zXCyuMrFGlV4DVK8/rSQeaKH42L3r4YGq41NqBi2UZeOLYujV4gwtZpZVkKjPA9g dW0HnGNbNRok/DcyOIv8cdEQzBeZcGZWKAytKBhclGZlcAsg3SooCPqHEQj00iFG UkSEa4wtr4pNffU/ZjTmmwO1ynlJJFg1VwyJRvGyQTv+cXIUUdMLruT0aPgPgu3d IT1qH97xdwRKQJDhYnx3+0DWXoOFrj50ntj5czlGEfTL2Q2r346/DssgbNoP2wgj fAiGpmox1B6XoZ5fXw7Y1cvq4ehI5a4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:22 2025 by rpki-client