$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa File: d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa (raw, json) Hash identifier: kSQPTaM9F4mBBMM8Y29872FfxzEv8F+sXFvF+x+VGas= Subject key identifier: 32:EE:F3:E4:E0:5C:88:26:77:80:ED:CB:7C:E4:7C:9E:3C:D0:F0:27 Certificate issuer: /CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Certificate serial: 010D0C9F4328584B5141BF9736FF3DA9978B0380 Authority key identifier: 1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 395898 IP address blocks: 23.186.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bf:97:36:ff:3d:a9:97:8b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89b2137-fc39-48ca-9b75-2b8574c1a143 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0fda2a7c-0412-4935-9418-e0393632ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:e9:7e:11:2c:6d:03:de:9c:c5:5e:ec:f3: a2:75:78:91:64:54:bb:c0:8a:b3:bd:e8:e6:38:7d: 0e:56:1a:72:3f:f9:7c:99:22:06:e3:c4:0b:0d:bd: d7:04:16:4e:4b:97:b8:ad:4c:3e:de:3b:05:2b:1d: aa:d2:5c:7d:11:f0:c1:9f:6c:b3:37:81:44:34:4f: 67:00:8c:86:93:f6:5b:a1:b7:49:8b:e0:7e:d2:15: 38:fc:88:ab:d8:07:9d:a9:c2:a8:7d:99:66:99:a6: c4:7e:fb:8a:e3:08:d2:11:60:45:a5:a1:45:d3:c9: 96:67:d2:44:8e:81:5f:18:ce:fb:31:03:60:89:b0: e0:9a:f2:40:00:44:47:5a:1b:21:62:e9:8a:4a:dd: cd:24:67:b7:9d:d9:38:eb:ff:e6:0e:98:26:fe:67: e1:72:ce:db:c4:74:ed:32:d7:3e:96:7d:e7:14:f0: 0e:1c:88:27:07:79:40:02:51:88:a3:65:13:71:51: be:d7:9a:8e:91:d1:96:c2:9d:ff:7c:0f:8a:c5:9a: 4b:ff:89:3d:af:eb:38:70:99:17:be:ab:63:0d:55: e4:ca:45:94:e8:04:03:29:ef:3a:6d:51:fa:ed:2d: 41:91:de:51:78:d8:c4:5d:e4:09:68:9d:62:29:82: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EE:F3:E4:E0:5C:88:26:77:80:ED:CB:7C:E4:7C:9E:3C:D0:F0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/d960457e-2ea4-3166-b8a3-8fdc7d7edc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143/f89b2137-fc39-48ca-9b75-2b8574c1a143.crl X509v3 Authority Key Identifier: keyid:1B:14:BC:5E:3F:CB:F4:B5:05:60:EB:59:1F:0B:4C:01:76:E4:8A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f89b2137-fc39-48ca-9b75-2b8574c1a143.cer sbgp-ipAddrBlock: critical IPv4: 23.186.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ff:e5:5d:ad:82:b5:81:66:42:f1:08:d7:46:60:0f:42:75: 74:d9:d0:35:5a:86:8a:e0:70:8d:7b:de:e7:6b:e1:f3:47:f9: 60:02:67:20:e5:46:cd:d9:48:aa:53:61:92:80:55:f5:6d:f1: 07:6b:cc:61:40:09:5d:d2:d2:a6:68:cd:21:e6:8b:51:92:46: 65:bd:a7:40:63:e5:7c:27:ba:af:c2:12:32:c8:c3:e6:f4:ad: 40:4a:b5:ad:4d:7f:3d:20:c1:1d:8a:fe:6d:48:14:54:dc:d0: 3a:cb:90:c0:55:80:bf:c5:ca:9a:95:37:2b:e1:7d:99:30:da: 29:44:88:40:c5:ce:9e:4a:04:00:4c:3a:e2:f7:8d:69:d2:1f: 48:82:f4:eb:91:3f:43:92:d7:48:b7:ae:bd:96:46:24:98:e5: cc:3e:72:d2:f6:b1:4f:da:e4:c6:04:29:1a:7b:95:50:71:fb: ce:17:52:9c:f0:9d:fe:c0:4e:a3:8f:6b:2a:cf:e2:36:ae:d1: c7:ea:b6:24:8f:97:a5:39:0b:cb:45:03:24:b4:fb:ab:0c:6a: 06:51:27:42:08:43:81:ca:a2:42:1d:5e:70:c4:4e:cc:9a:6a: 56:59:38:d8:9e:c3:ed:ac:1e:0f:00:c0:1d:3d:50:82:f2:66: 42:c6:71:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb+XNv89qZeLA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg5YjIxMzctZmMzOS00OGNhLTliNzUtMmI4NTc0YzFh MTQzMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MGZkYTJhN2MtMDQxMi00OTM1LTk0MTgtZTAzOTM2MzJhZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLzpfhEsbQPenMVe7POidXiRZFS7wIqzvejm OH0OVhpyP/l8mSIG48QLDb3XBBZOS5e4rUw+3jsFKx2q0lx9EfDBn2yzN4FENE9n AIyGk/ZbobdJi+B+0hU4/Iir2AedqcKofZlmmabEfvuK4wjSEWBFpaFF08mWZ9JE joFfGM77MQNgibDgmvJAAERHWhshYumKSt3NJGe3ndk46//mDpgm/mfhcs7bxHTt Mtc+ln3nFPAOHIgnB3lAAlGIo2UTcVG+15qOkdGWwp3/fA+KxZpL/4k9r+s4cJkX vqtjDVXkykWU6AQDKe86bVH67S1Bkd5ReNjEXeQJaJ1iKYKUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLu8+TgXIgmd4Dty3zkfJ480PAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mODli MjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1NzRjMWExNDMvZDk2MDQ1N2UtMmVhNC0z MTY2LWI4YTMtOGZkYzdkN2VkYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjg5YjIxMzctZmMzOS00OGNhLTli NzUtMmI4NTc0YzFhMTQzL2Y4OWIyMTM3LWZjMzktNDhjYS05Yjc1LTJiODU3NGMx YTE0My5jcmwwHwYDVR0jBBgwFoAUGxS8Xj/L9LUFYOtZHwtMAXbkit4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mODliMjEzNy1mYzM5LTQ4Y2EtOWI3NS0yYjg1 NzRjMWExNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf/5V2tgrWBZkLxCNdGYA9CdXTZ0DVahorgcI173udr4fNH+WACZyDl Rs3ZSKpTYZKAVfVt8QdrzGFACV3S0qZozSHmi1GSRmW9p0Bj5Xwnuq/CEjLIw+b0 rUBKta1Nfz0gwR2K/m1IFFTc0DrLkMBVgL/FypqVNyvhfZkw2ilEiEDFzp5KBABM OuL3jWnSH0iC9OuRP0OS10i3rr2WRiSY5cw+ctL2sU/a5MYEKRp7lVBx+84XUpzw nf7ATqOPayrP4jau0cfqtiSPl6U5C8tFAyS0+6sMagZRJ0IIQ4HKokIdXnDETsya alZZONiew+2sHg8AwB09UILyZkLGcUI= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:04 2025 by rpki-client