$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa File: a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa (raw, json) Hash identifier: 5otojt85xP2sXNJjpFKfyl+WuRkRtSIJJSdGHIMvJlE= Subject key identifier: A6:CA:E9:88:73:C8:70:0A:30:89:91:E5:5C:B7:F2:FB:6F:1C:ED:E8 Certificate issuer: /CN=457522b0-cf44-4757-ac16-6215c2516e52 Certificate serial: 010D0C9F4328584B9B3D0CDE36F728A1B2C05E20 Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 401890 IP address blocks: 23.143.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:0c:de:36:f7:28:a1:b2:c0:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3f4a8414-580a-45fd-8ecc-b3f41793499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:c2:1a:16:2b:6c:fc:31:19:95:20:cf:11: d7:f2:d8:6a:ef:0f:d7:83:c9:17:b1:cd:3b:f8:63: 10:53:e2:15:64:95:42:6c:1f:85:af:30:9c:47:9f: 7e:8f:e8:ce:b6:41:60:4e:c6:27:17:d7:0b:84:e9: 6d:5f:da:81:0b:5e:b5:79:f0:70:5b:03:70:a2:0f: 72:df:e4:64:41:fa:3a:ff:93:23:ef:53:9a:c7:b9: 98:b8:5e:60:03:42:04:59:a8:40:ff:61:ff:07:39: d1:86:57:49:1f:78:8b:da:ec:de:75:fd:61:ec:9c: 7e:9f:3a:09:4c:b0:9d:46:5b:cc:4a:61:b2:7f:5c: 20:3f:e7:3c:35:55:21:df:7c:a0:b4:e2:d9:48:49: 8b:b0:b2:c0:66:b9:a7:2c:b7:fd:38:66:98:c0:14: 2e:6f:d1:8a:b5:1b:68:35:35:7b:46:17:2d:9a:a4: a9:18:3d:91:64:c5:ca:36:27:9a:f1:64:80:27:7b: 6a:8e:a4:7d:13:7d:30:91:ef:ea:a8:7a:53:17:4a: 53:2b:51:94:c9:e6:45:b9:b7:54:f1:15:9b:46:65: 06:9e:c1:e6:fb:30:20:01:1c:ee:94:af:c8:14:b5: 0a:78:8a:5c:b9:94:86:6e:5f:93:b7:5a:79:f3:30: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CA:E9:88:73:C8:70:0A:30:89:91:E5:5C:B7:F2:FB:6F:1C:ED:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/a5a492a9-c5ce-362e-8e20-fddbd87be4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl X509v3 Authority Key Identifier: keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer sbgp-ipAddrBlock: critical IPv4: 23.143.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8e:52:60:22:c7:5c:e7:ad:62:0c:db:b5:83:68:cc:f0:74: 57:f8:29:d4:5c:d3:29:fa:8c:e0:88:5e:04:10:c9:ef:2d:eb: 6e:a7:56:a5:f7:f5:9e:01:c2:8c:a3:3a:23:ea:45:40:99:96: cd:a1:51:dc:0b:cd:c1:41:6f:4c:4e:4f:a5:b7:10:d7:34:da: 1f:a0:c5:e9:ba:0f:d8:80:53:27:fa:94:7d:78:83:b7:55:50: 38:b8:2a:8d:c2:72:ec:85:0b:40:c5:ff:74:1b:dd:58:c8:67: d3:a9:2b:15:c3:31:b4:85:9e:ce:90:74:e9:25:9a:fb:92:70: b7:e4:c2:1b:08:f4:8e:95:11:ad:9b:50:fc:c5:71:12:17:d9: 88:10:48:62:8d:79:60:3e:da:3c:ae:30:ca:35:63:e2:a1:d9: ab:8c:82:55:31:73:e8:1f:25:33:d0:d1:8e:22:6b:cd:b8:3a: d4:a2:08:89:b5:92:77:7b:d6:f1:1c:cd:f3:07:2c:d4:21:ec: 4c:e5:2a:89:8b:66:9c:bc:c2:ed:81:94:77:20:54:b0:12:8a: e3:2d:b1:bc:f4:6c:32:c9:30:47:a8:8e:da:77:eb:e6:92:16: 7f:34:3c:ef:fe:8d:67:f2:12:ac:32:1c:4a:e0:b5:48:30:1b: 74:c2:c0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQzeNvcoobLAXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2 ZTUyMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2Y0YTg0MTQtNTgwYS00NWZkLThlY2MtYjNmNDE3OTM0OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1DCGhYrbPwxGZUgzxHX8thq7w/Xg8kXsc07 +GMQU+IVZJVCbB+FrzCcR59+j+jOtkFgTsYnF9cLhOltX9qBC161efBwWwNwog9y 3+RkQfo6/5Mj71Oax7mYuF5gA0IEWahA/2H/BznRhldJH3iL2uzedf1h7Jx+nzoJ TLCdRlvMSmGyf1wgP+c8NVUh33ygtOLZSEmLsLLAZrmnLLf9OGaYwBQub9GKtRto NTV7RhctmqSpGD2RZMXKNiea8WSAJ3tqjqR9E30wke/qqHpTF0pTK1GUyeZFubdU 8RWbRmUGnsHm+zAgARzulK/IFLUKeIpcuZSGbl+Tt1p58zB9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbK6YhzyHAKMImR5Vy38vtvHO3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1 MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvYTVhNDkyYTktYzVjZS0z NjJlLThlMjAtZmRkYmQ4N2JlNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1 YzI1MTZlNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWOUmAix1znrWIM27WDaMzwdFf4KdRc0yn6jOCIXgQQye8t626nVqX3 9Z4BwoyjOiPqRUCZls2hUdwLzcFBb0xOT6W3ENc02h+gxem6D9iAUyf6lH14g7dV UDi4Ko3CcuyFC0DF/3Qb3VjIZ9OpKxXDMbSFns6QdOklmvuScLfkwhsI9I6VEa2b UPzFcRIX2YgQSGKNeWA+2jyuMMo1Y+Kh2auMglUxc+gfJTPQ0Y4ia824OtSiCIm1 knd71vEczfMHLNQh7EzlKomLZpy8wu2BlHcgVLASiuMtsbz0bDLJMEeojtp36+aS Fn80PO/+jWfyEqwyHErgtUgwG3TCwHE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:04 2025 by rpki-client