$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/3f2e26a7-4475-3436-8528-8473dc4f5640.roa File: 3f2e26a7-4475-3436-8528-8473dc4f5640.roa (raw, json) Hash identifier: UvCMzJwOq7cChVf/8eK6eE7dhS2mQlK3uS69g+NxsZ0= Subject key identifier: DF:08:FD:E2:08:FD:92:62:17:9D:02:6F:97:E5:74:BA:E2:10:32:52 Certificate issuer: /CN=97926870-ed22-4ae9-9904-c04da4aa3ce6 Certificate serial: 010D0C9F4328584BAA97BC8F3CDE9A9FD3D9B600 Authority key identifier: 1E:E9:D5:DD:67:15:8C:BD:65:25:7B:61:E4:0B:B4:5A:03:17:CC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/3f2e26a7-4475-3436-8528-8473dc4f5640.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 152179 IP address blocks: 23.141.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/97926870-ed22-4ae9-9904-c04da4aa3ce6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/97926870-ed22-4ae9-9904-c04da4aa3ce6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bc:8f:3c:de:9a:9f:d3:d9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97926870-ed22-4ae9-9904-c04da4aa3ce6 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=01a7db87-0fe2-43a8-be82-0c72d04b5972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:cc:cc:5d:32:7f:4b:93:45:1a:5d:83:70: 9c:21:82:8f:85:ba:f9:2a:e5:52:63:c0:f8:68:d2: 22:ac:5c:66:38:c1:46:27:62:2f:70:de:ef:a9:14: 5d:ad:4b:12:9d:03:92:b9:74:28:98:97:d4:b1:06: 49:3c:d0:d4:7c:c8:db:f4:b1:37:bb:96:09:ba:7d: 6c:7b:7d:ba:94:59:a1:13:ea:ba:5e:22:3b:e7:c6: fa:e3:2c:85:1c:1d:70:b8:2c:b3:1e:8d:20:f3:6f: f3:5b:9f:e5:10:45:28:f6:a6:16:8b:d9:1d:ce:a0: 15:48:9e:2f:0e:2a:d6:f9:06:ad:c3:d0:5e:1e:2f: ad:d7:5e:e0:ec:9c:44:e4:4a:ea:ab:c6:1b:20:56: 80:e3:c1:35:9f:67:2d:44:98:e4:58:a8:b5:5e:c7: 27:02:93:51:11:ce:08:db:c8:56:fc:5c:72:b7:f5: 43:37:ea:22:b5:49:9f:0d:91:86:5d:a0:e5:ee:8a: 5d:1d:bf:4a:70:8d:f2:92:32:3c:d7:45:4c:aa:b5: c2:bb:f0:9f:60:11:54:3c:ed:ec:71:81:b6:37:f6: a7:2f:2f:78:19:15:a7:5b:92:49:cb:66:59:e0:c4: 17:de:bf:30:91:a2:da:89:28:49:b2:a0:97:d2:3c: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:FD:E2:08:FD:92:62:17:9D:02:6F:97:E5:74:BA:E2:10:32:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/3f2e26a7-4475-3436-8528-8473dc4f5640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6/97926870-ed22-4ae9-9904-c04da4aa3ce6.crl X509v3 Authority Key Identifier: keyid:1E:E9:D5:DD:67:15:8C:BD:65:25:7B:61:E4:0B:B4:5A:03:17:CC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97926870-ed22-4ae9-9904-c04da4aa3ce6.cer sbgp-ipAddrBlock: critical IPv4: 23.141.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:10:90:21:29:f4:78:0b:31:44:6e:07:95:5d:f3:28:aa:30: 03:3c:d2:5f:ad:83:a0:32:30:21:27:a1:19:5e:34:70:5f:25: ac:09:04:d3:61:f2:8a:9a:92:0f:d9:79:ac:5d:22:0a:4e:a2: d0:90:eb:3d:0e:05:c6:63:f6:8e:07:09:24:c9:76:2b:75:1f: 3d:2c:4c:3b:95:98:34:52:5b:ec:9f:d7:58:8b:49:77:0a:bb: 23:27:7b:c1:25:8b:40:2d:d0:d0:ef:8b:ff:12:92:87:69:2a: 27:88:93:4b:46:63:98:a0:97:60:71:71:67:06:7c:34:29:a8: 7d:73:a4:b6:ae:63:49:41:2d:78:d3:a5:73:63:0b:24:fb:4c: aa:62:0c:27:7b:d6:a4:2e:75:0d:02:3b:32:61:b1:03:77:52: d2:53:70:a1:09:71:98:81:ed:02:16:4b:f5:e9:05:4c:1d:d2: e5:c7:6c:80:00:f9:6f:c9:81:35:1a:b9:a5:b0:98:52:4b:f9: b7:69:70:88:bf:5b:8c:13:da:36:57:20:1f:bf:46:5c:c2:9f: 73:a6:04:fa:dc:f6:74:dc:a9:f1:d6:9c:97:90:65:8e:16:29: f2:81:8c:14:07:7b:fd:b7:81:83:d8:fc:64:1d:4d:26:22:c8: 0f:e0:56:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7yPPN6an9PZtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc5MjY4NzAtZWQyMi00YWU5LTk5MDQtYzA0ZGE0YWEz Y2U2MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDFhN2RiODctMGZlMi00M2E4LWJlODItMGM3MmQwNGI1OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rnMzF0yf0uTRRpdg3CcIYKPhbr5KuVSY8D4 aNIirFxmOMFGJ2IvcN7vqRRdrUsSnQOSuXQomJfUsQZJPNDUfMjb9LE3u5YJun1s e326lFmhE+q6XiI758b64yyFHB1wuCyzHo0g82/zW5/lEEUo9qYWi9kdzqAVSJ4v DirW+Qatw9BeHi+t117g7JxE5Erqq8YbIFaA48E1n2ctRJjkWKi1XscnApNREc4I 28hW/Fxyt/VDN+oitUmfDZGGXaDl7opdHb9KcI3ykjI810VMqrXCu/CfYBFUPO3s cYG2N/anLy94GRWnW5JJy2ZZ4MQX3r8wkaLaiShJsqCX0jzbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8I/eII/ZJiF50Cb5fldLriEDJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Nzky Njg3MC1lZDIyLTRhZTktOTkwNC1jMDRkYTRhYTNjZTYvM2YyZTI2YTctNDQ3NS0z NDM2LTg1MjgtODQ3M2RjNGY1NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTc5MjY4NzAtZWQyMi00YWU5LTk5 MDQtYzA0ZGE0YWEzY2U2Lzk3OTI2ODcwLWVkMjItNGFlOS05OTA0LWMwNGRhNGFh M2NlNi5jcmwwHwYDVR0jBBgwFoAUHunV3WcVjL1lJXth5Au0WgMXzK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NzkyNjg3MC1lZDIyLTRhZTktOTkwNC1jMDRk YTRhYTNjZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsQkCEp9HgLMURuB5Vd8yiqMAM80l+tg6AyMCEnoRleNHBfJawJBNNh 8oqakg/ZeaxdIgpOotCQ6z0OBcZj9o4HCSTJdit1Hz0sTDuVmDRSW+yf11iLSXcK uyMne8Eli0At0NDvi/8SkodpKieIk0tGY5igl2BxcWcGfDQpqH1zpLauY0lBLXjT pXNjCyT7TKpiDCd71qQudQ0COzJhsQN3UtJTcKEJcZiB7QIWS/XpBUwd0uXHbIAA +W/JgTUauaWwmFJL+bdpcIi/W4wT2jZXIB+/RlzCn3OmBPrc9nTcqfHWnJeQZY4W KfKBjBQHe/23gYPY/GQdTSYiyA/gVqM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:00 2025 by rpki-client