$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5370d318-ff79-3160-88d0-fc2272824d2f.roa File: 5370d318-ff79-3160-88d0-fc2272824d2f.roa (raw, json) Hash identifier: aPWKdUmnJBgPsGrVaU5FiPBtVT7iElHARmjokZLsE7o= Subject key identifier: EC:9E:4C:79:94:1D:4F:C7:6B:69:C5:91:9B:55:A7:49:AB:A0:D0:5F Certificate issuer: /CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Certificate serial: 010D0C9F4328584BBA3A5730833E01E142390700 Authority key identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5370d318-ff79-3160-88d0-fc2272824d2f.roa Signing time: Sun 02 Nov 2025 15:25:36 +0000 ROA not before: Sun 02 Nov 2025 15:25:36 +0000 ROA not after: Sat 31 Jan 2026 15:25:36 +0000 asID: 174 IP address blocks: 23.146.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:3a:57:30:83:3e:01:e1:42:39:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Validity Not Before: Nov 2 15:25:36 2025 GMT Not After : Jan 31 15:25:36 2026 GMT Subject: CN=b492aa0e-92bc-4414-8e5e-68551dceb010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:e2:0c:16:e1:08:32:a8:7f:52:c7:e0:50: 4e:db:e2:b5:fa:73:6c:1b:dc:34:0b:72:b0:27:80: 41:62:2c:4e:c5:a2:80:38:9f:58:a0:d3:c2:f7:ca: 1e:42:a2:ff:ae:84:09:87:d9:00:7a:36:9a:7d:24: 15:0d:e8:84:70:1f:09:dd:62:dc:b1:ae:ea:ef:0e: 22:53:22:1d:5e:79:ee:c2:e6:76:48:50:fe:b3:11: b9:18:58:63:fd:d1:a1:08:d5:55:19:36:ad:93:8a: 15:81:ca:85:6c:57:0b:02:6a:8f:52:e9:ba:bc:b4: 18:68:f0:2c:03:55:85:cf:d8:a8:0d:92:60:e0:83: 48:7c:42:2b:7a:05:04:33:e6:40:18:3a:72:25:e0: 1a:aa:5e:20:6f:b2:a8:d0:c2:11:60:ee:11:b7:71: c1:0e:e9:b7:4a:54:1c:db:99:06:ed:e1:fd:c2:64: 0f:63:6c:6d:c6:28:e4:98:2d:f1:f4:57:f4:be:e5: 71:01:f8:04:83:e2:a9:c4:ce:28:92:59:25:12:d6: ee:02:d2:dc:6b:dc:c8:1a:7b:54:b6:b7:78:59:8e: 39:74:83:76:89:4d:a4:56:fa:a0:8f:3d:ca:fd:b0: 6d:09:f1:0e:2a:aa:2c:b2:07:13:6b:2c:c1:37:19: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9E:4C:79:94:1D:4F:C7:6B:69:C5:91:9B:55:A7:49:AB:A0:D0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5370d318-ff79-3160-88d0-fc2272824d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.crl X509v3 Authority Key Identifier: keyid:B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer sbgp-ipAddrBlock: critical IPv4: 23.146.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2f:54:50:40:a0:de:31:36:61:6c:0e:a8:c3:d7:ce:27:dd: 23:70:88:5d:ee:1a:8f:20:8e:37:47:c5:6c:16:5c:a9:e9:f2: 32:05:13:59:e7:c7:3d:6a:a1:61:0f:bb:ca:90:3f:a0:ec:9e: e1:29:86:4d:8c:43:5a:7c:d2:d6:69:bd:7b:fb:e7:6d:b1:13: ef:08:f1:6b:c3:17:b0:cf:fa:34:15:89:07:65:15:60:99:c1: db:b0:df:bf:65:7d:64:79:7a:8e:18:00:92:65:41:72:83:7d: 1b:1e:06:dc:e6:e5:bb:57:87:6f:78:b2:b0:60:41:42:d3:a4: 87:1e:09:33:b9:18:d7:46:db:b3:c0:c1:43:57:05:69:a7:01: ba:2b:33:85:8d:85:ab:bf:3c:20:6c:15:52:ed:eb:c4:6c:2f: a5:f5:79:e6:f1:bc:20:59:f1:53:b5:43:e4:de:78:36:d1:2e: 38:b1:e4:fa:d2:97:47:cf:13:bc:0f:e2:d2:9c:8e:1c:d1:da: f0:b1:b2:cd:4f:a8:b5:ac:9a:e0:d7:a2:f9:9e:4c:78:ec:4a: 00:01:3f:44:a7:4e:69:90:01:db:1e:36:f3:d1:f3:ab:f9:db: ed:53:b6:91:e1:f0:e4:c9:a6:e1:1f:1d:29:2c:f6:4d:03:59: 24:28:2d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6Olcwgz4B4UI5BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViMjViNmItOGZkZi00OWFhLThiODMtNTk1YTk0ZjQ0 ZjdlMB4XDTI1MTEwMjE1MjUzNloXDTI2MDEzMTE1MjUzNlowLzEtMCsGA1UEAxMk YjQ5MmFhMGUtOTJiYy00NDE0LThlNWUtNjg1NTFkY2ViMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkXiDBbhCDKof1LH4FBO2+K1+nNsG9w0C3Kw J4BBYixOxaKAOJ9YoNPC98oeQqL/roQJh9kAejaafSQVDeiEcB8J3WLcsa7q7w4i UyIdXnnuwuZ2SFD+sxG5GFhj/dGhCNVVGTatk4oVgcqFbFcLAmqPUum6vLQYaPAs A1WFz9ioDZJg4INIfEIregUEM+ZAGDpyJeAaql4gb7Ko0MIRYO4Rt3HBDum3SlQc 25kG7eH9wmQPY2xtxijkmC3x9Ff0vuVxAfgEg+KpxM4oklklEtbuAtLca9zIGntU trd4WY45dIN2iU2kVvqgjz3K/bBtCfEOKqossgcTayzBNxlM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyeTHmUHU/Ha2nFkZtVp0mroNBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIy NWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRmNDRmN2UvNTM3MGQzMTgtZmY3OS0z MTYwLTg4ZDAtZmMyMjcyODI0ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWViMjViNmItOGZkZi00OWFhLThi ODMtNTk1YTk0ZjQ0ZjdlLzVlYjI1YjZiLThmZGYtNDlhYS04YjgzLTU5NWE5NGY0 NGY3ZS5jcmwwHwYDVR0jBBgwFoAUs7NzOmM6yq38yGjeXShecKySNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVh OTRmNDRmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcvVFBAoN4xNmFsDqjD184n3SNwiF3uGo8gjjdHxWwWXKnp8jIFE1nn xz1qoWEPu8qQP6DsnuEphk2MQ1p80tZpvXv7522xE+8I8WvDF7DP+jQViQdlFWCZ wduw379lfWR5eo4YAJJlQXKDfRseBtzm5btXh294srBgQULTpIceCTO5GNdG27PA wUNXBWmnAborM4WNhau/PCBsFVLt68RsL6X1eebxvCBZ8VO1Q+TeeDbRLjix5PrS l0fPE7wP4tKcjhzR2vCxss1PqLWsmuDXovmeTHjsSgABP0SnTmmQAdseNvPR86v5 2+1TtpHh8OTJpuEfHSks9k0DWSQoLYE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:11 2025 by rpki-client