$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa File: 856f6f8b-6115-3749-b368-928efb2b3cdb.roa (raw, json) Hash identifier: /Fo8IvPFn+B2w27la1LuVC2RxwZPaVqFE2bJQasnewY= Subject key identifier: FF:AC:54:69:61:ED:32:8A:4C:0D:85:AE:66:79:F1:E3:A3:B6:83:33 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584BABFD0D9EFEFCCE4816A20E00 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 21738 IP address blocks: 23.150.41.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0d:9e:fe:fc:ce:48:16:a2:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f48dea42-75f0-4e44-89a7-7385d4fdd63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:2e:c2:1c:64:08:d2:8c:5d:f8:3f:7c:90: 16:33:98:3b:52:31:3a:38:72:33:c1:74:c1:a7:19: 06:6d:74:84:b9:29:b2:69:c9:16:d4:0e:d6:42:be: 3d:2a:f8:67:2f:ca:12:8b:bd:79:b9:e9:91:53:63: 84:00:b3:34:04:c0:1b:72:10:3c:2d:67:c6:91:13: 20:a5:da:73:fa:9b:a5:89:6a:06:b5:b3:dd:03:b1: 3a:32:44:25:76:c8:31:ae:b6:17:70:e4:e5:94:ed: 0f:46:5b:46:14:d7:df:73:2b:df:8b:7a:c3:90:93: 5b:38:3f:e6:75:3b:0f:02:69:47:b6:ac:a5:9c:1e: 81:8a:82:60:3a:24:da:23:29:5c:1a:26:de:82:eb: 8d:2e:fd:d4:a6:3d:ae:ce:bd:a9:03:29:27:4a:ff: 39:f5:d9:0a:a0:48:75:18:e6:9a:8d:ad:ba:b2:58: f7:45:ca:fb:b4:7d:d8:29:1f:9e:5d:5e:55:ab:32: de:85:0e:e5:12:82:f2:1f:c9:ba:b5:b1:0a:d4:8d: 58:db:c7:93:48:ea:f9:c2:78:e0:da:10:6d:27:6a: 53:f2:c6:51:62:aa:fa:a0:78:84:a7:ad:20:d3:fb: b9:df:31:d6:f2:06:d3:4e:01:2b:d8:2d:8c:27:01: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AC:54:69:61:ED:32:8A:4C:0D:85:AE:66:79:F1:E3:A3:B6:83:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 23.150.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a4:d6:30:ca:75:e3:70:d9:67:66:87:0b:2f:4e:58:06:99: e6:33:76:1b:c6:b5:a5:05:36:b2:a3:d7:6c:24:ef:3a:3d:8f: a4:b8:3c:c5:8e:12:a8:15:90:bd:0e:d0:eb:57:f3:50:1f:db: ba:ee:73:6f:95:3d:6a:a1:73:d8:1c:2d:89:d9:d1:8a:fb:17: ae:88:7b:b6:02:aa:07:2f:e3:62:2c:40:cf:71:a4:cb:26:d3: e4:e3:f1:c1:42:a2:28:c5:79:b3:f7:63:54:7b:9f:d8:04:96: c6:6e:e9:0f:7e:0e:2d:a8:49:f3:52:c5:99:bf:cb:4c:04:78: 14:32:5a:7b:a0:0b:50:dd:04:74:08:8b:3b:86:c9:da:fb:5f: 7c:61:e4:68:a1:82:52:fb:4c:59:dc:bd:8d:01:7a:1b:06:97: a5:86:26:32:f2:b1:34:ca:ef:ad:2e:c7:e1:5a:b8:91:ab:ae: fb:d3:f4:9a:a1:fe:4b:81:64:57:5c:2c:c2:67:b1:ee:97:50: e0:5d:5b:7a:2d:8a:19:4c:53:da:b2:6b:30:59:68:ee:3b:9b: 11:20:ce:dc:27:73:6f:00:db:59:db:36:57:94:1c:f9:29:9a: db:56:ef:37:9c:ce:a7:34:b7:cf:3a:56:de:6f:fa:4e:9f:1f: 79:46:36:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Q2e/vzOSBaiDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjQ4ZGVhNDItNzVmMC00ZTQ0LTg5YTctNzM4NWQ0ZmRkNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl38uwhxkCNKMXfg/fJAWM5g7UjE6OHIzwXTB pxkGbXSEuSmyackW1A7WQr49KvhnL8oSi715uemRU2OEALM0BMAbchA8LWfGkRMg pdpz+puliWoGtbPdA7E6MkQldsgxrrYXcOTllO0PRltGFNffcyvfi3rDkJNbOD/m dTsPAmlHtqylnB6BioJgOiTaIylcGibeguuNLv3Upj2uzr2pAyknSv859dkKoEh1 GOaaja26slj3Rcr7tH3YKR+eXV5VqzLehQ7lEoLyH8m6tbEK1I1Y28eTSOr5wnjg 2hBtJ2pT8sZRYqr6oHiEp60g0/u53zHW8gbTTgEr2C2MJwEffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+sVGlh7TKKTA2FrmZ58eOjtoMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvODU2ZjZmOGItNjExNS0z NzQ5LWIzNjgtOTI4ZWZiMmIzY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuk1jDKdeNw2WdmhwsvTlgGmeYzdhvGtaUFNrKj12wk7zo9j6S4PMWO EqgVkL0O0OtX81Af27ruc2+VPWqhc9gcLYnZ0Yr7F66Ie7YCqgcv42IsQM9xpMsm 0+Tj8cFCoijFebP3Y1R7n9gElsZu6Q9+Di2oSfNSxZm/y0wEeBQyWnugC1DdBHQI izuGydr7X3xh5GihglL7TFncvY0BehsGl6WGJjLysTTK760ux+FauJGrrvvT9Jqh /kuBZFdcLMJnse6XUOBdW3otihlMU9qyazBZaO47mxEgztwnc28A21nbNleUHPkp mttW7zeczqc0t886Vt5v+k6fH3lGNuI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:29 2025 by rpki-client