$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa File: 9ad5f257-d034-30d5-9781-af4a5f8619f4.roa (raw, json) Hash identifier: Z5u8QMzi6zc4c5NgGACSBV3W2VVeW6Kztspz1BBZ8i4= Subject key identifier: A9:94:78:7E:5B:B7:6F:81:A5:C3:27:24:D7:8C:D2:FC:25:84:D3:38 Certificate issuer: /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de Certificate serial: 010D0C9F4328584B1080BC0F9B78783B00283B30 Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa Signing time: Tue 02 Sep 2025 20:20:01 +0000 ROA not before: Tue 02 Sep 2025 20:20:01 +0000 ROA not after: Mon 01 Dec 2025 21:20:01 +0000 asID: 399272 IP address blocks: 23.144.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:80:bc:0f:9b:78:78:3b:00:28:3b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de Validity Not Before: Sep 2 20:20:01 2025 GMT Not After : Dec 1 21:20:01 2025 GMT Subject: CN=d14457fa-708a-484b-b489-c8032e492cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:8e:e1:a3:38:e6:28:c8:25:a5:b9:25:be: be:88:05:6a:19:79:83:44:01:a6:f2:a5:2e:38:e3: 78:3f:f9:52:ff:6e:17:28:30:cd:66:cc:a9:3d:8d: 47:e1:56:61:95:b4:9a:af:b5:bb:44:db:76:89:e2: be:36:7c:4a:54:ba:4f:b2:1f:18:9a:dd:81:c3:01: 7b:87:c5:7a:1f:c2:b6:40:6d:97:26:0d:86:4c:a4: 9f:68:d9:cb:3a:70:e6:04:70:a8:a6:3a:d8:c5:36: 0d:9a:bd:ca:04:db:1f:aa:84:4d:d2:26:82:95:15: 53:15:e7:2d:28:66:31:ab:18:6a:56:7a:4a:85:da: 6f:9e:38:da:2a:b3:ef:f2:07:1f:33:5d:bf:55:1f: 7a:a1:3c:70:53:12:a7:49:c5:13:c7:af:4a:94:52: bb:f2:c3:ca:01:bc:fd:8b:e5:73:d7:82:1d:68:41: f3:bd:12:53:7c:dc:e6:3c:d1:2e:e9:23:14:26:7e: 53:f6:82:65:c6:70:34:8b:ee:31:f3:3f:e0:ec:c0: 5e:a1:7d:6a:a3:d8:ed:5d:d1:e9:51:cd:ad:98:28: b3:8c:c0:d6:a9:1d:92:cf:de:0e:3a:e5:05:a6:c4: 5e:a6:11:a6:22:f5:b9:7d:bc:e5:d4:92:bf:1b:72: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:78:7E:5B:B7:6F:81:A5:C3:27:24:D7:8C:D2:FC:25:84:D3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/9ad5f257-d034-30d5-9781-af4a5f8619f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl X509v3 Authority Key Identifier: keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer sbgp-ipAddrBlock: critical IPv4: 23.144.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:14:3a:48:b2:bd:2f:9c:b0:7f:81:90:67:92:9f:c6:c3:1a: 18:87:3a:ad:69:89:12:0a:5d:69:4f:67:5b:ff:4d:c1:35:14: 0e:9e:9a:d5:ef:17:1c:83:fa:c3:ab:26:c3:42:7e:78:66:42: 7e:26:a5:19:b6:0d:fd:58:6c:49:12:70:3c:1f:44:92:0b:98: a6:17:5c:8c:66:c9:d9:8f:be:63:3b:1e:6e:25:95:6b:a8:7c: ef:97:ba:c9:28:ec:df:f2:3a:20:44:a2:6e:c5:97:f6:10:85: 7d:eb:1a:ba:4f:12:42:e4:0e:98:3a:ec:c5:46:e9:87:23:c1: a7:4a:af:e4:1e:0d:60:88:f0:e0:ca:a3:e7:d2:82:31:72:48: 4a:27:96:88:5b:76:33:6f:51:27:c4:41:ad:8c:3e:ff:4b:c6: cb:12:61:4a:81:90:3b:94:35:9e:2f:52:be:68:34:e5:f4:6f: 1c:0b:de:1c:eb:11:01:34:02:81:1f:04:6a:a3:04:16:ca:21: 0d:c4:9d:81:48:5a:d9:fd:57:b9:44:2d:cb:31:1c:ff:f9:54: ec:09:1d:78:f7:bc:7a:c8:fd:85:7c:e4:e5:3a:a1:3d:76:f7: f1:b0:ef:a5:48:e1:b8:b0:0c:84:6a:f7:5a:ee:50:29:e6:78: 54:81:26:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQgLwPm3h4OwAoOzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1YzE3ODktOTZlNC00YTYzLTliYTMtZjBlZjkwM2Ni MGRlMB4XDTI1MDkwMjIwMjAwMVoXDTI1MTIwMTIxMjAwMVowLzEtMCsGA1UEAxMk ZDE0NDU3ZmEtNzA4YS00ODRiLWI0ODktYzgwMzJlNDkyY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOGO4aM45ijIJaW5Jb6+iAVqGXmDRAGm8qUu OON4P/lS/24XKDDNZsypPY1H4VZhlbSar7W7RNt2ieK+NnxKVLpPsh8Ymt2BwwF7 h8V6H8K2QG2XJg2GTKSfaNnLOnDmBHCopjrYxTYNmr3KBNsfqoRN0iaClRVTFect KGYxqxhqVnpKhdpvnjjaKrPv8gcfM12/VR96oTxwUxKnScUTx69KlFK78sPKAbz9 i+Vz14IdaEHzvRJTfNzmPNEu6SMUJn5T9oJlxnA0i+4x8z/g7MBeoX1qo9jtXdHp Uc2tmCizjMDWqR2Sz94OOuUFpsRephGmIvW5fbzl1JK/G3IjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmUeH5bt2+BpcMnJNeM0vwlhNM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVj MTc4OS05NmU0LTRhNjMtOWJhMy1mMGVmOTAzY2IwZGUvOWFkNWYyNTctZDAzNC0z MGQ1LTk3ODEtYWY0YTVmODYxOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY1YzE3ODktOTZlNC00YTYzLTli YTMtZjBlZjkwM2NiMGRlL2VmNWMxNzg5LTk2ZTQtNGE2My05YmEzLWYwZWY5MDNj YjBkZS5jcmwwHwYDVR0jBBgwFoAUjpv9OVo10kqVNse7mDVs0+d6S2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVjMTc4OS05NmU0LTRhNjMtOWJhMy1mMGVm OTAzY2IwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMUOkiyvS+csH+BkGeSn8bDGhiHOq1piRIKXWlPZ1v/TcE1FA6emtXv FxyD+sOrJsNCfnhmQn4mpRm2Df1YbEkScDwfRJILmKYXXIxmydmPvmM7Hm4llWuo fO+Xusko7N/yOiBEom7Fl/YQhX3rGrpPEkLkDpg67MVG6YcjwadKr+QeDWCI8ODK o+fSgjFySEonlohbdjNvUSfEQa2MPv9LxssSYUqBkDuUNZ4vUr5oNOX0bxwL3hzr EQE0AoEfBGqjBBbKIQ3EnYFIWtn9V7lELcsxHP/5VOwJHXj3vHrI/YV85OU6oT12 9/Gw76VI4biwDIRq91ruUCnmeFSBJg8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:47 2025 by rpki-client