$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa File: f282509f-6fe8-3695-bbb8-a22242c776bb.roa (raw, json) Hash identifier: Y1+NPx9ZxwUtfQkSYIMSx4NwegYFUwRmgi5AYBPuua8= Subject key identifier: EE:72:70:78:EA:7F:19:71:CE:59:D9:87:F8:5F:63:AD:8D:C9:AC:24 Certificate issuer: /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f Certificate serial: 010D0C9F4328584B4D11CEDCC05B58A50C662FA8 Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 54429 IP address blocks: 23.146.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ce:dc:c0:5b:58:a5:0c:66:2f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=58748b62-a681-427d-8fcd-25020912db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:cd:e5:63:66:ac:ed:cf:53:23:9b:dd:43: 4d:8e:5e:3a:b5:6b:93:59:5f:09:22:9d:ab:21:8a: 7c:f0:14:a9:0a:ec:bd:7c:da:d0:53:ad:d7:73:88: ea:30:2e:9a:d9:96:07:5b:b1:f3:2b:f4:fb:5d:3d: a6:63:6e:6d:3f:30:cb:e6:af:87:3c:92:1c:11:70: 7a:55:9b:0c:b9:ae:b6:04:fe:45:8f:08:48:08:de: 36:c8:15:e2:6e:42:02:93:88:b7:c8:34:63:f2:4e: b7:a3:18:af:13:f3:b6:b2:98:5f:95:c2:6f:1e:fe: 7d:50:06:1a:33:12:73:90:5c:44:9f:57:6a:7b:57: 04:49:26:82:9f:b8:b3:86:3a:87:0f:33:8a:9e:e5: cf:0b:2e:aa:fb:6e:9d:ab:be:89:df:77:ea:90:29: 8b:7e:57:c5:d4:40:23:42:3d:b9:e9:b2:4b:f9:d9: 82:b8:82:7b:41:06:6d:cd:d1:f3:30:b2:e7:f5:4e: 4a:76:12:ce:5a:9e:6b:3b:73:af:43:2e:18:a8:b9: 7c:7e:a4:b6:5c:65:21:6a:5c:ac:cf:5c:3d:0c:d9: dc:9f:73:b2:01:aa:b1:9e:f2:c7:c7:e1:4d:ef:fa: 32:97:0e:63:16:b8:1a:f7:4c:e5:90:9e:26:4f:88: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:70:78:EA:7F:19:71:CE:59:D9:87:F8:5F:63:AD:8D:C9:AC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl X509v3 Authority Key Identifier: keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer sbgp-ipAddrBlock: critical IPv4: 23.146.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:43:60:23:ee:0a:fe:b3:9c:ab:19:e4:7f:a4:55:4c:43:0a: a6:dc:0a:40:7f:e0:43:62:8f:09:26:6d:32:37:65:b9:be:3d: 4a:42:ce:00:07:be:07:b3:69:9e:86:d1:40:4a:30:30:0d:74: f5:82:15:b5:24:14:3f:5f:f9:56:2b:7b:2a:c0:5f:6e:c6:b1: bb:0d:a8:0e:22:61:8e:ab:ef:3a:fa:c7:db:74:b8:7b:52:c5: 15:0f:7e:a7:91:64:c6:0e:e5:89:2a:1d:c2:35:4a:2b:30:02: 10:85:95:32:4a:bf:56:f5:2f:e5:a9:9d:da:09:e4:da:4c:55: 21:79:85:56:05:8e:88:ae:65:73:2f:3d:29:93:46:09:99:ba: a0:72:7e:72:e6:bc:76:2c:49:ab:ba:db:03:3b:e3:77:d7:f1: ea:bf:8b:4e:98:8a:70:24:5a:82:43:38:8f:81:c3:b3:46:eb: c8:1e:6c:9d:49:e8:46:ff:a3:dd:8e:3c:6f:81:82:4f:7d:a8: 29:eb:5a:3b:54:05:89:2a:d5:04:88:11:85:5c:a7:ab:ff:5f: ff:6c:99:8f:a3:1b:49:57:39:5a:3c:e2:e6:2a:8f:ab:64:03: 5e:a5:95:7b:93:17:bd:ee:a8:f8:fe:16:87:3c:8b:0b:1c:fb: 90:4d:8c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEc7cwFtYpQxmL6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEwMjI1MTQtZWE5ZS00Y2ViLTlkMWItOTc2OGJlZTM2 YTRmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NTg3NDhiNjItYTY4MS00MjdkLThmY2QtMjUwMjA5MTJkYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzN5WNmrO3PUyOb3UNNjl46tWuTWV8JIp2r IYp88BSpCuy9fNrQU63Xc4jqMC6a2ZYHW7HzK/T7XT2mY25tPzDL5q+HPJIcEXB6 VZsMua62BP5FjwhICN42yBXibkICk4i3yDRj8k63oxivE/O2sphflcJvHv59UAYa MxJzkFxEn1dqe1cESSaCn7izhjqHDzOKnuXPCy6q+26dq76J33fqkCmLflfF1EAj Qj256bJL+dmCuIJ7QQZtzdHzMLLn9U5KdhLOWp5rO3OvQy4YqLl8fqS2XGUhalys z1w9DNncn3OyAaqxnvLHx+FN7/oylw5jFrga90zlkJ4mT4j/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5ycHjqfxlxzlnZh/hfY62NyawkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYTAy MjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVlMzZhNGYvZjI4MjUwOWYtNmZlOC0z Njk1LWJiYjgtYTIyMjQyYzc3NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWEwMjI1MTQtZWE5ZS00Y2ViLTlk MWItOTc2OGJlZTM2YTRmL2VhMDIyNTE0LWVhOWUtNGNlYi05ZDFiLTk3NjhiZWUz NmE0Zi5jcmwwHwYDVR0jBBgwFoAUKEDCAdB25eH59zQrMjdY49x72H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lYTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4 YmVlMzZhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5KoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZDYCPuCv6znKsZ5H+kVUxDCqbcCkB/4ENijwkmbTI3Zbm+PUpCzgAH vgezaZ6G0UBKMDANdPWCFbUkFD9f+VYreyrAX27GsbsNqA4iYY6r7zr6x9t0uHtS xRUPfqeRZMYO5YkqHcI1SiswAhCFlTJKv1b1L+WpndoJ5NpMVSF5hVYFjoiuZXMv PSmTRgmZuqByfnLmvHYsSau62wM743fX8eq/i06YinAkWoJDOI+Bw7NG68gebJ1J 6Eb/o92OPG+Bgk99qCnrWjtUBYkq1QSIEYVcp6v/X/9smY+jG0lXOVo84uYqj6tk A16llXuTF73uqPj+Foc8iwsc+5BNjOE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:52 2025 by rpki-client