$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/44c389eb-4417-30cf-88b8-29537b859f68.roa File: 44c389eb-4417-30cf-88b8-29537b859f68.roa (raw, json) Hash identifier: kLvuwd0O6OGkNqWOffkpocw2Ssk2kzMJlRKxzl+23LA= Subject key identifier: E0:D1:8C:F3:F9:0B:73:F5:31:42:BE:CA:FA:67:DB:8B:6F:38:0E:9E Certificate issuer: /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Certificate serial: 010D0C9F4328584BAA97BCB7E1D7B2E266EF3DC0 Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/44c389eb-4417-30cf-88b8-29537b859f68.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 152179 IP address blocks: 23.142.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bc:b7:e1:d7:b2:e2:66:ef:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=df9d28aa-5999-4016-b205-4d214704640e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2c:10:29:64:a7:d6:cf:f5:13:a6:14:75:eb: 97:09:e1:54:fd:ab:70:46:e9:15:1c:3e:d8:de:9f: 33:09:a6:d5:74:58:d5:8f:a2:2b:65:27:a4:62:6c: f9:98:df:c0:b5:32:bf:d8:e6:bd:1b:c7:fe:d7:9c: e4:8a:7b:fa:eb:c5:86:4c:cc:e9:f2:4d:db:2f:f7: a2:59:31:4a:09:6b:d8:aa:cd:c4:8e:de:e1:ab:9e: 65:64:cd:6c:c1:50:c5:5b:37:78:db:0b:00:5a:9c: c3:08:94:50:61:42:82:b9:65:1f:72:72:02:46:17: 8b:bc:31:98:40:8b:e6:ef:78:65:5a:5f:43:6e:dd: af:c0:98:e4:4f:de:99:1b:30:08:72:fa:a2:fc:63: 22:04:b1:4c:b9:df:c5:fb:52:7d:56:af:74:80:fe: 9f:cf:a6:18:92:10:fa:db:84:37:5a:db:ff:3b:88: 9b:61:75:25:9d:ea:12:fe:bb:86:be:be:66:0c:44: 96:3b:cc:af:e5:b4:4c:93:4d:05:b4:15:1c:2a:0b: 70:44:8c:16:11:78:99:c6:50:78:4f:7f:37:e8:4a: 50:12:8c:cb:8c:07:10:4c:00:a4:79:d7:30:ab:56: d5:a2:a3:b6:50:e1:78:13:97:32:25:35:e6:83:db: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D1:8C:F3:F9:0B:73:F5:31:42:BE:CA:FA:67:DB:8B:6F:38:0E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/44c389eb-4417-30cf-88b8-29537b859f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl X509v3 Authority Key Identifier: keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer sbgp-ipAddrBlock: critical IPv4: 23.142.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e3:31:f5:0b:11:52:de:b2:15:8c:99:fd:72:b0:a5:07:2c: 41:ea:1a:43:95:15:c0:0f:78:96:f7:f1:4e:1c:a6:b8:57:84: c1:b8:52:e8:74:70:a4:fb:ad:81:70:63:b5:23:14:fb:b3:dc: 64:35:d6:03:c8:7f:79:a1:64:55:9c:0b:b9:f0:9b:78:b1:a3: 7e:09:c0:3c:bd:4c:7f:25:1e:c3:b3:48:4a:85:ae:e2:65:12: c0:e4:3e:5d:e2:c5:66:ef:1c:87:6c:6c:99:51:c7:c9:7f:ff: 00:b4:a6:0f:47:81:7b:1f:1c:df:3a:92:90:2a:97:46:21:ba: d5:34:e6:cb:45:7f:b2:13:0d:5c:e4:98:6b:9e:67:7c:92:90: d2:a9:3d:a6:b8:f5:d0:e3:5f:e3:22:d7:6b:cb:1b:55:a6:cc: ef:59:ee:46:6d:31:97:b0:cf:55:94:5e:a0:62:e0:ce:d9:be: e6:46:66:36:dd:8e:d7:df:31:ad:b3:e8:3a:39:a4:28:93:4a: dc:e6:28:fc:b7:3a:69:e6:92:36:d4:8c:ae:62:a8:74:59:d4: db:bf:52:0f:90:7c:5e:cd:ed:9b:8a:a1:17:56:ac:fb:09:6c: 24:be:cb:0a:76:50:06:b9:33:e7:cd:44:22:85:17:80:42:17: 99:d1:ae:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7y34dey4mbvPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmMmFmYTUtNWQ3YS00Zjc2LThhNTMtOTIyOWE3NWYx ZjQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGY5ZDI4YWEtNTk5OS00MDE2LWIyMDUtNGQyMTQ3MDQ2NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSwQKWSn1s/1E6YUdeuXCeFU/atwRukVHD7Y 3p8zCabVdFjVj6IrZSekYmz5mN/AtTK/2Oa9G8f+15zkinv668WGTMzp8k3bL/ei WTFKCWvYqs3Ejt7hq55lZM1swVDFWzd42wsAWpzDCJRQYUKCuWUfcnICRheLvDGY QIvm73hlWl9Dbt2vwJjkT96ZGzAIcvqi/GMiBLFMud/F+1J9Vq90gP6fz6YYkhD6 24Q3Wtv/O4ibYXUlneoS/ruGvr5mDESWO8yv5bRMk00FtBUcKgtwRIwWEXiZxlB4 T3836EpQEozLjAcQTACkedcwq1bVoqO2UOF4E5cyJTXmg9uJ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODRjPP5C3P1MUK+yvpn24tvOA6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81OGYy YWZhNS01ZDdhLTRmNzYtOGE1My05MjI5YTc1ZjFmNDUvNDRjMzg5ZWItNDQxNy0z MGNmLTg4YjgtMjk1MzdiODU5ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNThmMmFmYTUtNWQ3YS00Zjc2LThh NTMtOTIyOWE3NWYxZjQ1LzU4ZjJhZmE1LTVkN2EtNGY3Ni04YTUzLTkyMjlhNzVm MWY0NS5jcmwwHwYDVR0jBBgwFoAUVV0I4kt9HZpOckRH3hZ1glYHceIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81OGYyYWZhNS01ZDdhLTRmNzYtOGE1My05MjI5 YTc1ZjFmNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF440MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALjMfULEVLeshWMmf1ysKUHLEHqGkOVFcAPeJb38U4cprhXhMG4Uuh0 cKT7rYFwY7UjFPuz3GQ11gPIf3mhZFWcC7nwm3ixo34JwDy9TH8lHsOzSEqFruJl EsDkPl3ixWbvHIdsbJlRx8l//wC0pg9HgXsfHN86kpAql0YhutU05stFf7ITDVzk mGueZ3ySkNKpPaa49dDjX+Mi12vLG1WmzO9Z7kZtMZewz1WUXqBi4M7ZvuZGZjbd jtffMa2z6Do5pCiTStzmKPy3OmnmkjbUjK5iqHRZ1Nu/Ug+QfF7N7ZuKoRdWrPsJ bCS+ywp2UAa5M+fNRCKFF4BCF5nRrjE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:07 2025 by rpki-client