$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json) Hash identifier: U2dLoL0h5pWtB/Rq1IXPdhUNRZWTGhN/YBy8cXVG1Og= Subject key identifier: 41:D4:2F:E5:69:BC:CC:C6:11:C9:BA:56:A3:02:81:93:0C:21:59:D5 Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Certificate serial: 010D0C9F4328584B5C6C7B305A410CC395D26400 Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 401489 IP address blocks: 23.191.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7b:30:5a:41:0c:c3:95:d2:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=18defcdd-b06e-45d2-ada6-0fcf06f908f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f1:b1:db:7b:41:ac:02:29:9d:c4:55:a3:3d: 71:13:08:1a:68:0c:6a:e3:03:67:fc:8b:45:36:1a: c4:21:eb:81:a6:7c:0a:25:66:29:12:cd:b1:d1:88: 7e:89:a9:56:a0:fa:f4:1b:14:53:29:8f:66:f1:dd: 06:1d:ef:c5:02:46:35:6b:7e:98:87:ae:cd:9f:ed: 92:62:58:e1:09:da:e4:87:bf:32:92:05:b2:5c:bc: b0:70:f0:04:4e:b7:a3:ad:49:dd:bc:09:5c:7c:10: e5:8a:cd:70:b2:bf:73:94:10:fd:32:34:d6:a0:ca: d0:73:6c:70:f5:69:a1:3a:c4:ed:28:2b:aa:45:01: 9d:6e:4b:8a:d4:aa:d0:f7:ed:cb:94:72:96:d8:ad: b7:b2:0d:ea:c2:35:ae:a8:29:ef:3a:6c:ed:28:f3: 47:d8:1a:1e:48:aa:0d:cd:37:42:c2:99:d3:16:c0: c7:95:b0:07:23:b9:9d:68:61:38:0a:71:d6:73:41: e1:7f:58:10:22:2b:d3:7e:45:cd:9c:a2:a8:f9:e3: af:bd:78:fb:4b:7a:60:2e:bf:24:51:86:98:dc:9d: df:81:43:97:79:e0:1d:7c:52:9f:ec:77:20:30:bf: 5b:d9:9f:d3:fc:dd:b7:19:e5:97:62:6b:74:ad:b8: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:2F:E5:69:BC:CC:C6:11:C9:BA:56:A3:02:81:93:0C:21:59:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl X509v3 Authority Key Identifier: keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer sbgp-ipAddrBlock: critical IPv4: 23.191.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fa:a7:e9:f4:d2:ff:a8:d1:c6:e4:b9:85:0f:44:20:3e:58: 58:c9:1a:10:cf:b5:5a:14:d5:ea:27:28:69:62:e5:32:94:61: 3f:39:e8:fa:18:6a:1e:a7:07:b3:7c:04:91:c5:47:25:20:6c: 95:43:12:e0:a7:16:d8:3f:08:a0:1e:5c:38:d9:e9:b2:04:55: 30:78:83:d6:bf:c7:cb:4e:74:21:1c:54:cf:7e:46:92:54:78: 2d:3d:ec:06:56:82:d8:3a:7d:bc:e9:3a:bf:8e:f9:08:d5:29: 51:d1:e6:82:44:95:fd:25:a5:f3:ad:9e:0c:02:11:00:bc:eb: 43:e3:e7:7b:b6:c9:18:66:ac:5a:c6:93:b7:50:cc:8b:e8:34: 8d:19:83:15:b3:6a:6c:05:66:19:a9:0c:de:d6:04:71:20:13: 4d:97:31:ed:64:d1:ba:52:ab:e0:a0:58:eb:1e:2f:55:ee:62: ec:b4:99:8b:29:f8:2b:de:94:12:dd:5d:49:8e:f8:aa:b1:73: 06:c1:6c:58:f4:86:4c:8a:a1:29:3c:33:82:c5:79:63:82:03: 95:c0:36:8d:f1:ec:c9:67:4d:50:9c:69:14:75:55:66:bb:9b: 4a:93:5d:47:d2:69:23:80:0e:5a:0e:e3:90:4c:b0:96:d2:90: 30:a4:ed:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHswWkEMw5XSZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODEx YjE4MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MThkZWZjZGQtYjA2ZS00NWQyLWFkYTYtMGZjZjA2ZjkwOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfGx23tBrAIpncRVoz1xEwgaaAxq4wNn/ItF NhrEIeuBpnwKJWYpEs2x0Yh+ialWoPr0GxRTKY9m8d0GHe/FAkY1a36Yh67Nn+2S YljhCdrkh78ykgWyXLywcPAETrejrUndvAlcfBDlis1wsr9zlBD9MjTWoMrQc2xw 9WmhOsTtKCuqRQGdbkuK1KrQ9+3LlHKW2K23sg3qwjWuqCnvOmztKPNH2BoeSKoN zTdCwpnTFsDHlbAHI7mdaGE4CnHWc0Hhf1gQIivTfkXNnKKo+eOvvXj7S3pgLr8k UYaY3J3fgUOXeeAdfFKf7HcgML9b2Z/T/N23GeWXYmt0rbhJGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHUL+VpvMzGEcm6VqMCgZMMIVnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0 MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvNTI1Y2I4Y2MtYTE5ZS0z NjJjLTgzNGItNjY0ZjFiYTliNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5 ODYtOGNkOWQwODExYjE4L2RhOTQyYTJlLWEyOGUtNGRkNy04OTg2LThjZDlkMDgx MWIxOC5jcmwwHwYDVR0jBBgwFoAUjx/K5tPSLHj+6uRZ9KttEgf4C/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5 ZDA4MTFiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz6p+n00v+o0cbkuYUPRCA+WFjJGhDPtVoU1eonKGli5TKUYT856PoY ah6nB7N8BJHFRyUgbJVDEuCnFtg/CKAeXDjZ6bIEVTB4g9a/x8tOdCEcVM9+RpJU eC097AZWgtg6fbzpOr+O+QjVKVHR5oJElf0lpfOtngwCEQC860Pj53u2yRhmrFrG k7dQzIvoNI0ZgxWzamwFZhmpDN7WBHEgE02XMe1k0bpSq+CgWOseL1XuYuy0mYsp +CvelBLdXUmO+KqxcwbBbFj0hkyKoSk8M4LFeWOCA5XANo3x7MlnTVCcaRR1VWa7 m0qTXUfSaSOADloO45BMsJbSkDCk7aM= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:41 2025 by rpki-client