$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa File: 65c07aa6-3363-3bfe-90ce-1f77843ec006.roa (raw, json) Hash identifier: YVbbEwMYF+z00WYNg85bee9Hz2Ta0tvt2xG+7t3HzWs= Subject key identifier: 86:67:EB:AB:54:AC:51:3D:49:20:D2:44:5D:FF:00:2A:FB:43:CE:0B Certificate issuer: /CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35 Certificate serial: 010D0C9F4328584BA667CA81F914030DB9ED8400 Authority key identifier: 81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 152179 IP address blocks: 23.141.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ca:81:f9:14:03:0d:b9:ed:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d588201b-a914-4b7f-9b40-7801331ca008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:ba:e6:8a:cb:0e:c9:0e:bc:d7:ef:12:00: 82:1f:9f:8d:5e:ac:f1:72:67:83:b4:5c:be:ae:3d: 2b:03:c2:6d:14:57:83:73:75:5c:27:85:c3:58:c2: 1f:b7:45:1e:31:89:c7:78:47:e1:f3:88:46:d2:46: 42:22:0b:99:f3:a9:19:63:e8:fc:60:fd:e0:bc:f5: 44:e2:cf:c9:0f:13:11:98:56:3f:ed:c5:8b:cc:16: 7c:30:f8:17:62:a8:c8:bf:b3:9d:c2:5c:b9:ad:db: 80:fe:c3:0d:76:56:10:c4:65:ca:94:43:aa:81:1c: fc:93:c5:dc:bf:38:05:d7:49:22:72:fd:c1:54:86: 01:91:63:b8:01:0a:6f:15:14:55:6d:77:09:4f:4a: 00:f4:e7:5a:44:50:6c:ee:6d:87:98:0a:70:6c:e8: c2:d1:84:c1:66:81:1f:d1:51:b1:a5:69:0e:1a:b1: 3a:12:b0:d6:70:10:b9:89:64:8e:15:da:e9:4e:9a: fb:31:61:7c:03:a7:cc:56:97:b3:34:e0:b8:f7:bd: a6:53:ec:2f:c2:60:ce:b4:d2:4b:49:85:98:b1:0b: 5b:52:70:7f:c3:2f:52:0b:5c:7d:b9:a0:77:ce:5e: 1b:e5:a7:e5:16:43:67:67:eb:14:d1:40:59:61:fd: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:67:EB:AB:54:AC:51:3D:49:20:D2:44:5D:FF:00:2A:FB:43:CE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl X509v3 Authority Key Identifier: keyid:81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer sbgp-ipAddrBlock: critical IPv4: 23.141.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:21:de:03:71:ba:eb:82:22:d2:b4:41:82:8f:4d:c3:68:46: 4f:f6:02:d1:51:4f:35:99:f6:84:63:b9:36:c3:5f:9c:91:95: 1f:50:e6:7a:3c:20:c1:ab:5a:35:1f:c6:7b:e1:ae:7b:62:fb: 70:72:44:38:d8:d8:32:c5:bd:fb:13:b3:47:a7:16:ee:05:77: 51:96:30:2b:eb:be:c6:07:b8:b2:a8:4d:09:bd:7a:3d:f9:0d: d5:41:1c:6e:e6:cb:be:17:78:eb:2b:33:e3:73:9e:18:76:1a: ff:2e:60:06:42:c6:97:b7:92:95:c7:e7:63:f4:0f:91:ac:74: a8:3e:72:4f:8e:e2:a1:6e:52:72:5f:27:9e:f6:2a:e1:b4:d8: 79:e4:56:1a:49:51:30:93:8d:47:be:1d:e6:ea:81:4e:bf:98: 0a:15:3a:09:d4:80:8d:64:19:e6:ca:6d:bf:6c:fe:fe:b2:0d: fc:d0:b6:99:e0:0e:c6:91:3c:9c:94:08:6b:ab:ea:f3:68:47: be:e7:a1:84:e5:e6:1b:73:c2:e2:9f:c7:ff:ea:4b:ce:c8:ae: 0b:35:ed:24:d9:77:49:27:c2:7a:f5:bb:0b:50:cf:ed:8d:55: d5:3d:3a:4d:c0:0c:33:70:a5:25:89:0c:6d:de:a5:43:06:f1: 62:2e:6d:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8qB+RQDDbnthAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRiZGJmMjUtMWMzYS00NTMwLTkzNjQtNWZkYmYyYTZh YTM1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDU4ODIwMWItYTkxNC00YjdmLTliNDAtNzgwMTMzMWNhMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyK65orLDskOvNfvEgCCH5+NXqzxcmeDtFy+ rj0rA8JtFFeDc3VcJ4XDWMIft0UeMYnHeEfh84hG0kZCIguZ86kZY+j8YP3gvPVE 4s/JDxMRmFY/7cWLzBZ8MPgXYqjIv7Odwly5rduA/sMNdlYQxGXKlEOqgRz8k8Xc vzgF10kicv3BVIYBkWO4AQpvFRRVbXcJT0oA9OdaRFBs7m2HmApwbOjC0YTBZoEf 0VGxpWkOGrE6ErDWcBC5iWSOFdrpTpr7MWF8A6fMVpezNOC4972mU+wvwmDOtNJL SYWYsQtbUnB/wy9SC1x9uaB3zl4b5aflFkNnZ+sU0UBZYf1yhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZn66tUrFE9SSDSRF3/ACr7Q84LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJk YmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRiZjJhNmFhMzUvNjVjMDdhYTYtMzM2My0z YmZlLTkwY2UtMWY3Nzg0M2VjMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDRiZGJmMjUtMWMzYS00NTMwLTkz NjQtNWZkYmYyYTZhYTM1LzA0YmRiZjI1LTFjM2EtNDUzMC05MzY0LTVmZGJmMmE2 YWEzNS5jcmwwHwYDVR0jBBgwFoAUgYsivkJykLWNl3btL9K1ghugsZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJkYmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRi ZjJhNmFhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0h3gNxuuuCItK0QYKPTcNoRk/2AtFRTzWZ9oRjuTbDX5yRlR9Q5no8 IMGrWjUfxnvhrnti+3ByRDjY2DLFvfsTs0enFu4Fd1GWMCvrvsYHuLKoTQm9ej35 DdVBHG7my74XeOsrM+Nznhh2Gv8uYAZCxpe3kpXH52P0D5GsdKg+ck+O4qFuUnJf J572KuG02HnkVhpJUTCTjUe+HebqgU6/mAoVOgnUgI1kGebKbb9s/v6yDfzQtpng DsaRPJyUCGur6vNoR77noYTl5htzwuKfx//qS87Irgs17STZd0knwnr1uwtQz+2N VdU9Ok3ADDNwpSWJDG3epUMG8WIubS4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:24 2025 by rpki-client