$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/762ffc70-2a11-3bcc-9010-3ee57c4e47bc.roa File: 762ffc70-2a11-3bcc-9010-3ee57c4e47bc.roa (raw, json) Hash identifier: 0WaRA6zSGByumhOeuzC3EAweFgMrFJ2fJey+fYC9v8Y= Subject key identifier: E7:27:5C:A7:3E:C7:55:52:C8:C5:F8:CB:1A:29:40:71:ED:C0:AD:B7 Certificate issuer: /CN=4efaeb05-1401-42f1-a988-9bf084c6cbbd Certificate serial: 010D0C9F4328584BABFD3C24EFB8D62957BF6600 Authority key identifier: D5:42:FF:CA:A5:41:02:DB:04:7E:C1:04:CE:4D:F9:6D:98:B0:60:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/762ffc70-2a11-3bcc-9010-3ee57c4e47bc.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.143.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/4efaeb05-1401-42f1-a988-9bf084c6cbbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/4efaeb05-1401-42f1-a988-9bf084c6cbbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:3c:24:ef:b8:d6:29:57:bf:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4efaeb05-1401-42f1-a988-9bf084c6cbbd Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=5001e181-0d3c-44ca-b728-6800c2559f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:d3:4b:41:5e:45:d0:36:14:55:85:38:90: 2d:09:07:80:7c:63:b0:a2:50:2b:ae:e0:5c:68:1c: 01:92:d6:7e:71:7c:c0:63:1d:d6:6f:d2:fa:77:ec: 72:45:5b:c0:2a:ac:37:2a:99:07:9f:22:70:43:4c: 0d:53:c5:63:17:9c:b1:cc:f4:33:e3:4c:87:3c:e8: c6:33:0e:86:4d:45:72:f0:d1:12:64:f6:f2:52:e5: b7:46:74:a9:64:c4:8a:9f:8a:37:b7:85:50:b2:4b: 65:b5:22:b4:99:99:8d:34:8c:6d:bb:33:3f:18:71: dd:14:36:dc:7d:82:11:d2:33:97:5c:68:ef:64:3b: 05:dc:29:46:ed:29:ad:5f:f4:1f:cf:10:f5:ca:1c: 6c:12:45:8c:72:99:9e:46:fb:5b:ee:5f:90:4e:a0: a8:e6:c3:2a:4a:78:d6:e5:fa:5b:9f:fb:63:85:3f: 15:35:48:9d:92:51:fb:4d:e4:e5:1e:b2:25:c9:33: 8d:16:68:ae:2e:8d:69:d1:24:07:f6:33:78:6b:47: e0:16:4f:6d:08:18:3a:01:07:56:9d:6d:3b:27:10: ea:30:c1:4a:23:fc:69:86:23:bd:46:2f:1c:cc:2c: 50:63:fa:74:21:5d:84:a1:59:15:da:ce:b0:72:7e: 35:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:5C:A7:3E:C7:55:52:C8:C5:F8:CB:1A:29:40:71:ED:C0:AD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/762ffc70-2a11-3bcc-9010-3ee57c4e47bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd/4efaeb05-1401-42f1-a988-9bf084c6cbbd.crl X509v3 Authority Key Identifier: keyid:D5:42:FF:CA:A5:41:02:DB:04:7E:C1:04:CE:4D:F9:6D:98:B0:60:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4efaeb05-1401-42f1-a988-9bf084c6cbbd.cer sbgp-ipAddrBlock: critical IPv4: 23.143.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:5f:70:a0:e5:1a:ff:74:34:fc:c4:92:92:5b:99:90:07: d6:2d:b7:1c:79:e5:46:f7:3f:3e:56:21:70:4e:a5:51:34:2c: 74:79:82:95:7f:94:22:46:4b:73:1e:5d:b6:26:f4:b6:65:01: 0e:a2:84:8b:99:26:c8:9a:0b:d1:67:06:c4:0b:d2:d1:6b:60: 0f:44:e0:06:c0:f3:63:a0:06:16:e3:16:a0:ec:38:56:4c:e8: f3:92:36:a1:53:d9:0d:a6:5f:9c:c0:d4:2c:c3:13:30:64:87: 07:7f:ea:73:09:79:2b:22:09:e3:4c:75:c8:c8:87:aa:c6:c3: 99:30:b6:e5:85:16:ee:ec:3e:0a:de:9e:37:cb:68:78:58:11: e5:94:8a:27:dc:44:c0:7d:48:da:15:6b:de:75:d6:e4:79:7b: 04:38:bd:e8:62:c6:47:f2:bc:f6:df:09:ec:93:72:74:59:9f: 62:9b:91:76:f9:1d:2c:71:a6:7b:71:42:f6:04:a8:eb:63:8b: 3c:45:f9:0d:1d:01:b9:ed:c2:bf:ae:95:4b:34:a5:7e:21:bb: 96:6f:f8:58:43:9b:9a:88:70:9b:19:4d:af:02:bd:6c:47:e7: fd:0f:37:70:98:30:0a:cd:30:8f:18:70:bf:4a:57:09:4d:73: ad:e9:32:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Twk77jWKVe/ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVmYWViMDUtMTQwMS00MmYxLWE5ODgtOWJmMDg0YzZj YmJkMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTAwMWUxODEtMGQzYy00NGNhLWI3MjgtNjgwMGMyNTU5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGbTS0FeRdA2FFWFOJAtCQeAfGOwolArruBc aBwBktZ+cXzAYx3Wb9L6d+xyRVvAKqw3KpkHnyJwQ0wNU8VjF5yxzPQz40yHPOjG Mw6GTUVy8NESZPbyUuW3RnSpZMSKn4o3t4VQsktltSK0mZmNNIxtuzM/GHHdFDbc fYIR0jOXXGjvZDsF3ClG7SmtX/QfzxD1yhxsEkWMcpmeRvtb7l+QTqCo5sMqSnjW 5fpbn/tjhT8VNUidklH7TeTlHrIlyTONFmiuLo1p0SQH9jN4a0fgFk9tCBg6AQdW nW07JxDqMMFKI/xphiO9Ri8czCxQY/p0IV2EoVkV2s6wcn41uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcnXKc+x1VSyMX4yxopQHHtwK23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZWZh ZWIwNS0xNDAxLTQyZjEtYTk4OC05YmYwODRjNmNiYmQvNzYyZmZjNzAtMmExMS0z YmNjLTkwMTAtM2VlNTdjNGU0N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGVmYWViMDUtMTQwMS00MmYxLWE5 ODgtOWJmMDg0YzZjYmJkLzRlZmFlYjA1LTE0MDEtNDJmMS1hOTg4LTliZjA4NGM2 Y2JiZC5jcmwwHwYDVR0jBBgwFoAU1UL/yqVBAtsEfsEEzk35bZiwYJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZWZhZWIwNS0xNDAxLTQyZjEtYTk4OC05YmYw ODRjNmNiYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSX3Cg5Rr/dDT8xJKSW5mQB9Yttxx55Ub3Pz5WIXBOpVE0LHR5gpV/ lCJGS3MeXbYm9LZlAQ6ihIuZJsiaC9FnBsQL0tFrYA9E4AbA82OgBhbjFqDsOFZM 6POSNqFT2Q2mX5zA1CzDEzBkhwd/6nMJeSsiCeNMdcjIh6rGw5kwtuWFFu7sPgre njfLaHhYEeWUiifcRMB9SNoVa9511uR5ewQ4vehixkfyvPbfCeyTcnRZn2KbkXb5 HSxxpntxQvYEqOtjizxF+Q0dAbntwr+ulUs0pX4hu5Zv+FhDm5qIcJsZTa8CvWxH 5/0PN3CYMArNMI8YcL9KVwlNc63pMgs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:04 2025 by rpki-client