$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa File: db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa (raw, json) Hash identifier: IoiBGG2WeUpYTFl8+X33AUxOamjBJCX7o12Uf+DWnOo= Subject key identifier: 6E:9E:60:A0:B5:FB:92:CE:F3:52:41:9F:9C:0D:B0:F3:CD:EB:29:BB Certificate issuer: /CN=b25db122-9955-42d2-8413-be2d15a44347 Certificate serial: 010D0C9F4328584B80B780DD372719E69867A500 Authority key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 401859 IP address blocks: 23.142.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:80:dd:37:27:19:e6:98:67:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25db122-9955-42d2-8413-be2d15a44347 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=6bae21fb-0b67-4c06-9120-8831a5c5abc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:1a:83:40:38:6b:1e:c0:e4:02:21:74:a8: e1:93:a6:8a:7b:86:0a:42:25:f6:d8:cf:77:ea:3d: 27:e9:e3:57:d3:c3:37:bc:e6:43:78:40:05:25:79: a4:a7:f7:ac:51:57:bb:3b:90:e6:36:75:80:2e:75: 07:5d:47:1a:4d:09:fd:3c:f0:e1:1b:44:18:f7:6e: b5:ec:17:db:1f:c3:5b:f3:f6:6e:71:c7:2d:8e:b6: 22:f7:ed:6a:6b:52:7b:a3:62:7b:b3:4c:92:30:dd: a2:d4:f1:be:37:c6:1d:cf:ee:45:e9:71:de:fe:a1: ad:74:6b:10:a0:4f:be:e1:62:00:db:a8:66:54:07: 9f:d5:1e:38:c8:98:e1:1e:1d:e8:02:ee:f1:ee:4f: 13:4e:ce:68:cd:9c:a0:55:a8:22:34:c1:ca:b8:62: 07:64:6a:c3:46:fa:b1:75:a6:df:8e:59:51:e3:1e: 78:82:9d:04:ea:43:cc:93:72:6b:62:22:67:94:8a: 1e:09:63:d3:04:42:6d:03:32:fe:5f:0c:dd:f3:bf: 2f:6e:51:fc:95:9e:90:56:97:92:78:d8:71:74:a3: 46:63:63:ab:89:2d:f6:92:78:dc:f1:ae:5d:76:65: ee:54:12:37:09:f1:bd:3e:c0:1b:6c:58:cb:5b:f3: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:60:A0:B5:FB:92:CE:F3:52:41:9F:9C:0D:B0:F3:CD:EB:29:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/db1c5ced-133b-3fa2-85a3-ec9c6ede35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl X509v3 Authority Key Identifier: keyid:6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer sbgp-ipAddrBlock: critical IPv4: 23.142.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e8:3d:44:2b:17:42:d8:a8:5b:a4:28:e7:9a:c4:d5:21:2b: ba:ab:03:fa:f5:1e:d0:25:0c:78:6e:3c:68:60:55:96:13:25: 19:44:4d:db:c7:28:55:ea:66:05:a5:3b:18:ef:09:33:74:fc: 06:a7:fe:8c:83:31:d7:74:6d:3e:6c:b4:3b:e3:48:4f:77:71: cd:20:28:b8:f1:42:4d:2d:1e:3a:f7:e3:47:a1:fa:6b:5e:8d: 9b:0c:c0:ec:55:72:97:eb:16:0d:cc:f0:b3:f1:74:04:1b:c1: 0b:49:7a:38:10:35:7d:96:c3:3a:1c:15:38:76:b5:cc:e4:e7: 37:29:54:c4:e9:51:68:e5:9f:84:aa:a4:53:12:6e:1d:9c:57: 7b:dc:9c:fe:04:17:b1:d7:d3:04:84:ff:55:c9:f1:55:82:96: a1:69:df:4f:b9:84:fb:b7:5b:1f:b4:6d:b5:de:a1:33:57:45: 9c:ec:f1:00:42:af:2d:28:74:39:19:b0:22:cc:c8:a0:0e:8d: 39:cf:69:b0:2d:2e:20:8d:08:9c:c9:38:ef:30:57:81:23:a9: 0a:d7:a5:cc:17:c1:07:f9:30:27:0f:36:72:3e:73:b2:de:41: aa:15:c6:eb:92:e7:0b:9e:2f:0d:59:ec:3b:0b:83:ee:c3:e4: 96:9f:b7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4DdNycZ5phnpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI1ZGIxMjItOTk1NS00MmQyLTg0MTMtYmUyZDE1YTQ0 MzQ3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NmJhZTIxZmItMGI2Ny00YzA2LTkxMjAtODgzMWE1YzVhYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjcag0A4ax7A5AIhdKjhk6aKe4YKQiX22M93 6j0n6eNX08M3vOZDeEAFJXmkp/esUVe7O5DmNnWALnUHXUcaTQn9PPDhG0QY9261 7BfbH8Nb8/ZuccctjrYi9+1qa1J7o2J7s0ySMN2i1PG+N8Ydz+5F6XHe/qGtdGsQ oE++4WIA26hmVAef1R44yJjhHh3oAu7x7k8TTs5ozZygVagiNMHKuGIHZGrDRvqx dabfjllR4x54gp0E6kPMk3JrYiJnlIoeCWPTBEJtAzL+Xwzd878vblH8lZ6QVpeS eNhxdKNGY2OriS32knjc8a5ddmXuVBI3CfG9PsAbbFjLW/PrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6eYKC1+5LO81JBn5wNsPPN6ym7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVk YjEyMi05OTU1LTQyZDItODQxMy1iZTJkMTVhNDQzNDcvZGIxYzVjZWQtMTMzYi0z ZmEyLTg1YTMtZWM5YzZlZGUzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjI1ZGIxMjItOTk1NS00MmQyLTg0 MTMtYmUyZDE1YTQ0MzQ3L2IyNWRiMTIyLTk5NTUtNDJkMi04NDEzLWJlMmQxNWE0 NDM0Ny5jcmwwHwYDVR0jBBgwFoAUbkxIbDvmoOzVeLpKwpeL2BeQr+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVkYjEyMi05OTU1LTQyZDItODQxMy1iZTJk MTVhNDQzNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF46cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPoPUQrF0LYqFukKOeaxNUhK7qrA/r1HtAlDHhuPGhgVZYTJRlETdvH KFXqZgWlOxjvCTN0/Aan/oyDMdd0bT5stDvjSE93cc0gKLjxQk0tHjr340eh+mte jZsMwOxVcpfrFg3M8LPxdAQbwQtJejgQNX2WwzocFTh2tczk5zcpVMTpUWjln4Sq pFMSbh2cV3vcnP4EF7HX0wSE/1XJ8VWClqFp30+5hPu3Wx+0bbXeoTNXRZzs8QBC ry0odDkZsCLMyKAOjTnPabAtLiCNCJzJOO8wV4EjqQrXpcwXwQf5MCcPNnI+c7Le QaoVxuuS5wueLw1Z7DsLg+7D5Jaft6o= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:15 2025 by rpki-client