$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa File: aed05680-7f44-3f44-8086-236e2e2c39d6.roa (raw, json) Hash identifier: YJhxqropJQlQgRO39h3AzzKOSMvdqhYOnk1s0iRjW5k= Subject key identifier: 65:6C:AC:87:FC:C0:F0:93:79:C7:54:BC:80:86:47:C3:67:7F:41:6E Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584BAA97BCA2BEFD920DF8031480 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 152179 IP address blocks: 23.142.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bc:a2:be:fd:92:0d:f8:03:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=31795f62-1c4d-4d94-8ead-47f6438483d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:4b:ca:ac:12:83:b4:68:29:5c:34:5e:a5: 2a:4c:d3:78:34:b1:97:4e:9f:cc:b2:36:e9:67:0c: 18:da:f0:8f:7f:51:a3:3a:35:be:1a:fe:6f:2c:96: fb:56:1a:02:2c:2d:32:c3:be:6a:57:3b:6d:d2:5e: dd:35:bf:87:3b:58:d5:1d:4e:8e:e0:c5:1e:0b:ec: ee:77:75:54:8d:9c:74:45:9c:95:d1:f6:1c:57:af: b7:0e:db:5e:aa:e8:17:33:ad:c5:2a:aa:49:f9:82: c3:6d:f8:0a:94:e0:5c:5e:a5:fe:09:2b:c6:43:53: 71:d2:be:3b:f9:37:46:d9:f8:70:20:1d:5b:8c:70: a5:75:2c:2d:96:2c:88:60:dd:cc:04:33:3c:de:76: bf:42:8f:2d:af:7a:b0:ed:b1:e7:4b:d5:ae:97:a2: 01:40:ba:4c:c5:f2:b0:e4:2a:12:26:51:fe:e8:e3: 0d:e3:fa:9d:b9:12:f5:f4:73:d7:48:ad:33:8d:04: 56:1a:3f:7e:95:33:b8:d3:0f:67:81:24:c7:d3:93: 05:38:8b:5f:76:39:1b:ff:ff:21:a5:d1:5c:65:e0: ba:98:fa:c6:12:44:5a:32:25:63:70:18:48:97:48: 5c:d5:23:31:e0:7d:ef:0d:cb:a1:0f:98:ec:bd:32: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:AC:87:FC:C0:F0:93:79:C7:54:BC:80:86:47:C3:67:7F:41:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/aed05680-7f44-3f44-8086-236e2e2c39d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: 23.142.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:65:12:9e:74:ff:2a:d7:9c:bc:7d:2c:1d:6d:d9:47:08:c8: d7:ee:bc:c6:ed:a3:26:1c:fa:32:39:1b:2a:10:da:d9:16:07: 79:9c:67:9b:4a:8b:3b:6b:6d:ac:2a:24:c9:1e:90:c6:34:c7: 51:d6:3d:1d:c4:14:e6:4d:c4:f1:e3:70:75:98:30:6c:0c:56: a5:83:44:b8:96:c2:bd:6d:99:13:a0:ca:20:e9:97:0f:92:92: 5c:b6:88:c0:8f:06:56:f4:ae:49:c7:54:29:47:6a:93:54:30: 59:78:61:d3:55:82:4c:93:d7:f8:b2:a9:f3:8e:cd:73:56:14: 07:77:9e:e5:57:98:3b:9c:43:98:2b:39:fd:81:05:01:02:e0: 12:c2:66:3f:a2:d8:a1:f3:b3:a4:92:79:a3:e8:99:b5:51:72: 45:4d:f2:53:cf:24:a9:cc:ec:35:6c:98:37:a5:99:5d:06:81: 5d:93:69:62:cb:fb:d4:3e:bf:b8:9a:df:df:6c:be:4e:3c:df: 9c:5b:a6:1d:f8:c5:6c:22:1d:92:e1:57:1d:3d:66:94:dd:6e: de:dc:fc:48:d6:74:02:b8:02:54:3e:a5:ad:56:52:0b:30:b9: 4e:db:5b:a1:ce:7c:25:36:9f:92:07:0b:92:b5:b4:47:0c:59: 43:49:46:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7yivv2SDfgDFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MzE3OTVmNjItMWM0ZC00ZDk0LThlYWQtNDdmNjQzODQ4M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdLyqwSg7RoKVw0XqUqTNN4NLGXTp/Msjbp ZwwY2vCPf1GjOjW+Gv5vLJb7VhoCLC0yw75qVztt0l7dNb+HO1jVHU6O4MUeC+zu d3VUjZx0RZyV0fYcV6+3DttequgXM63FKqpJ+YLDbfgKlOBcXqX+CSvGQ1Nx0r47 +TdG2fhwIB1bjHCldSwtliyIYN3MBDM83na/Qo8tr3qw7bHnS9Wul6IBQLpMxfKw 5CoSJlH+6OMN4/qduRL19HPXSK0zjQRWGj9+lTO40w9ngSTH05MFOItfdjkb//8h pdFcZeC6mPrGEkRaMiVjcBhIl0hc1SMx4H3vDcuhD5jsvTK+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVsrIf8wPCTecdUvICGR8Nnf0FuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvYWVkMDU2ODAtN2Y0NC0z ZjQ0LTgwODYtMjM2ZTJlMmMzOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1lEp50/yrXnLx9LB1t2UcIyNfuvMbtoyYc+jI5GyoQ2tkWB3mcZ5tK iztrbawqJMkekMY0x1HWPR3EFOZNxPHjcHWYMGwMVqWDRLiWwr1tmROgyiDplw+S kly2iMCPBlb0rknHVClHapNUMFl4YdNVgkyT1/iyqfOOzXNWFAd3nuVXmDucQ5gr Of2BBQEC4BLCZj+i2KHzs6SSeaPombVRckVN8lPPJKnM7DVsmDelmV0GgV2TaWLL +9Q+v7ia399svk4835xbph34xWwiHZLhVx09ZpTdbt7c/EjWdAK4AlQ+pa1WUgsw uU7bW6HOfCU2n5IHC5K1tEcMWUNJRnc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:18 2025 by rpki-client