$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa File: 65c13d7b-acee-30f4-a5da-46152c1b5e65.roa (raw, json) Hash identifier: ZwJsMIwV7pfFpt9GtasIqu2/ZAY1+Ma65BMbZmUjVXo= Subject key identifier: BB:A7:09:57:EF:25:B4:60:D7:FD:70:E9:C1:FA:7F:F3:A2:1F:19:DF Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Certificate serial: 010D0C9F4328584B328C3252FA4C95C84568B568 Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 21527 IP address blocks: 23.157.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:32:52:fa:4c:95:c8:45:68:b5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=c48e8a78-35fb-4b2f-a4de-443644b1ed5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:d6:ba:87:fb:6f:5d:35:d7:e4:59:7f:a9: 32:b5:3e:ce:8e:20:71:14:98:03:d4:d4:38:b7:29: 7f:c6:7c:bb:2d:bf:eb:12:bd:c4:7d:31:1f:1d:0f: 90:25:c0:f7:1f:fa:8c:e1:9b:4c:cb:f9:b7:4f:e6: 05:4f:b6:d8:bc:15:04:ca:a0:a7:de:7e:bb:c7:ee: e3:11:3c:ce:14:64:cb:13:40:65:af:54:4a:36:47: 1d:1c:00:ac:3f:92:b2:dc:4f:cb:3b:47:6e:a7:ca: 04:7a:69:3d:98:34:32:3b:2a:10:fd:5b:ad:1c:60: fc:97:29:9e:ae:17:40:2e:3f:1f:18:9f:02:95:5f: 18:91:92:a6:b2:a4:5a:4a:2d:26:76:25:6e:54:79: 57:ad:f3:21:67:79:02:f7:f6:9a:08:89:1e:a2:35: 2e:d2:e5:94:a6:80:de:c5:24:07:c4:06:bb:a4:95: 31:5f:50:50:b1:cd:7d:22:ac:6f:03:a5:4d:eb:3e: 53:45:1e:1a:de:d8:4b:71:99:58:fb:ce:f3:7f:c9: bf:1c:58:8b:d2:27:ea:bc:b3:71:30:74:2a:7b:20: 13:ae:79:02:d0:9b:42:e2:68:b2:1c:81:63:32:d9: 92:53:b4:a9:ef:dc:ab:fe:65:f2:ec:49:dc:96:0f: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A7:09:57:EF:25:B4:60:D7:FD:70:E9:C1:FA:7F:F3:A2:1F:19:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl X509v3 Authority Key Identifier: keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1a:3e:70:54:09:0d:af:8f:b7:7b:5b:2f:87:3d:91:e0:58: ce:c3:42:7e:82:20:ca:ec:50:74:f1:19:5c:9b:5e:a7:bf:35: 85:a7:b0:bd:d1:b6:b9:b3:5a:b4:09:b2:17:e9:69:e3:e5:db: 87:ea:91:74:6b:c3:41:c8:e9:04:69:96:68:bb:85:2b:3c:60: ed:f7:dd:88:48:fb:1e:74:d3:e3:b8:8e:dc:bb:07:06:96:21: 97:2f:12:25:75:a1:cc:5b:75:44:ef:7f:be:6b:75:41:c9:23: b3:a3:e4:27:7f:e0:d4:44:c5:50:ec:4b:93:db:1a:14:52:2a: ce:ac:7e:5d:54:82:8e:01:a6:a1:56:77:ad:1f:30:4a:41:b3: dd:de:31:f2:e6:8b:aa:21:b1:fa:5b:d9:70:f6:95:87:72:e3: 41:67:2e:4c:5c:5b:55:5c:38:2f:9d:6a:d0:67:91:08:97:99: e6:31:84:05:e5:52:d1:fd:de:0c:23:20:6d:4e:fc:d9:56:6e: 5f:19:df:66:fd:11:cf:2c:c4:ab:4b:00:34:e5:e9:d1:83:ad: 8e:a1:68:da:bc:59:8f:ec:68:3f:8f:58:1c:28:71:6b:e8:4b: 9f:fa:da:99:33:d9:9f:8a:b7:f3:82:a8:da:3c:65:a9:87:8e: e4:36:8c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDJS+kyVyEVotWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4 YTNlMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YzQ4ZThhNzgtMzVmYi00YjJmLWE0ZGUtNDQzNjQ0YjFlZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLnWuof7b1011+RZf6kytT7OjiBxFJgD1NQ4 tyl/xny7Lb/rEr3EfTEfHQ+QJcD3H/qM4ZtMy/m3T+YFT7bYvBUEyqCn3n67x+7j ETzOFGTLE0Blr1RKNkcdHACsP5Ky3E/LO0dup8oEemk9mDQyOyoQ/VutHGD8lyme rhdALj8fGJ8ClV8YkZKmsqRaSi0mdiVuVHlXrfMhZ3kC9/aaCIkeojUu0uWUpoDe xSQHxAa7pJUxX1BQsc19IqxvA6VN6z5TRR4a3thLcZlY+87zf8m/HFiL0ifqvLNx MHQqeyATrnkC0JtC4miyHIFjMtmSU7Sp79yr/mXy7Enclg+NaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLunCVfvJbRg1/1w6cH6f/OiHxnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvNjVjMTNkN2ItYWNlZS0z MGY0LWE1ZGEtNDYxNTJjMWI1ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1 NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4 OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMaPnBUCQ2vj7d7Wy+HPZHgWM7DQn6CIMrsUHTxGVybXqe/NYWnsL3R trmzWrQJshfpaePl24fqkXRrw0HI6QRplmi7hSs8YO333YhI+x500+O4jty7BwaW IZcvEiV1ocxbdUTvf75rdUHJI7Oj5Cd/4NRExVDsS5PbGhRSKs6sfl1Ugo4BpqFW d60fMEpBs93eMfLmi6ohsfpb2XD2lYdy40FnLkxcW1VcOC+datBnkQiXmeYxhAXl UtH93gwjIG1O/NlWbl8Z32b9Ec8sxKtLADTl6dGDrY6haNq8WY/saD+PWBwocWvo S5/62pkz2Z+Kt/OCqNo8ZamHjuQ2jAs= -----END CERTIFICATE-----Generated at Sat Oct 11 04:26:40 2025 by rpki-client