$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa File: ceff734c-bba1-3dfd-9781-8d001c957177.roa (raw, json) Hash identifier: AQbTUpU+aK1dfvL7e1eWK5PJS5LfWdJl7BWHOHw+z14= Subject key identifier: AB:33:F2:EB:22:0F:E0:A4:61:C2:A3:BC:AE:95:76:88:23:BE:D6:C3 Certificate issuer: /CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Certificate serial: 010D0C9F4328584B52A764D2EE7CD9D6C9B9DF50 Authority key identifier: 7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 394838 IP address blocks: 23.142.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:64:d2:ee:7c:d9:d6:c9:b9:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d3c4d145-6df6-477a-bf37-83614cf8f1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:b2:a5:f7:4f:4f:60:72:fa:95:ae:64:39: af:f8:49:ab:01:5b:f4:c9:72:c0:29:70:6e:e7:f8: fa:e9:55:3e:4d:b3:42:10:48:d8:33:c9:52:08:18: fe:70:42:06:fa:b1:fd:d8:02:a7:ce:c3:d3:7b:e4: c1:18:0c:84:99:72:18:46:2b:67:a2:9d:83:35:11: db:2b:3f:dc:66:a5:0c:f6:79:c2:d3:df:2a:80:8a: 09:f0:7f:0c:a8:9b:56:47:0d:3b:91:45:c8:43:c3: f1:db:0e:be:73:56:b7:52:ef:0c:58:b1:81:83:10: 96:9e:a0:47:39:a7:f3:c0:ac:42:01:2d:b9:ee:16: c6:4c:80:ef:c5:f4:b9:2c:a9:32:93:f6:87:b9:29: 00:4f:0b:d2:09:f2:38:6d:70:ec:2e:bd:05:84:84: d8:78:19:90:80:b1:96:82:8d:d9:0a:d4:02:4f:2f: 0c:b0:94:f2:1d:9c:ea:65:ff:67:b2:85:d3:f9:a0: e3:5c:86:ee:f1:c9:65:6d:25:a8:0c:93:65:ed:61: 6c:de:03:fa:dc:be:db:29:f2:29:8e:eb:f1:77:fd: 73:4b:16:cf:ec:71:80:22:e5:e8:0a:9a:a2:3e:37: e1:0b:69:d6:4d:b3:9c:17:9c:c7:42:37:b8:34:af: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:F2:EB:22:0F:E0:A4:61:C2:A3:BC:AE:95:76:88:23:BE:D6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl X509v3 Authority Key Identifier: keyid:7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer sbgp-ipAddrBlock: critical IPv4: 23.142.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c7:d1:e8:38:92:74:c8:eb:88:5e:ef:e5:94:0b:66:fe:62: 1d:2b:da:97:ec:48:c1:96:eb:21:85:37:af:13:f6:a7:ae:54: 00:cc:90:bb:44:21:51:dc:ef:f2:7a:8c:5c:b1:31:46:05:e7: 8b:80:87:33:88:e1:77:ec:a5:c9:a5:42:77:af:eb:ba:c9:bf: 5e:77:d3:c2:b9:ce:b3:d8:96:e8:fe:9c:36:6e:6c:2f:31:ca: 87:ae:03:cf:d9:42:17:60:9e:a6:f4:11:e5:07:aa:3e:75:2b: 67:09:9c:4d:fb:61:bb:51:4c:b5:de:b9:0f:1d:be:84:c5:48: e5:c6:ca:3a:c4:89:23:30:a1:98:e7:24:51:66:70:ad:a7:04: dc:9f:61:db:d5:7f:20:5a:73:4a:86:81:03:29:2d:c4:04:c8: b1:ae:4b:c3:e6:33:bf:9a:f4:63:b9:43:0a:63:4d:32:ba:fd: b2:1b:9a:c5:7b:27:9f:92:7e:80:a4:ff:c2:c6:c3:39:08:07: 7d:28:68:b4:97:46:5c:34:2d:aa:cf:b1:e0:58:3f:a2:f2:21: 39:b2:27:a1:d3:e7:fe:b2:0d:b7:a3:8e:e4:34:a6:86:b5:6e: 0d:d9:f5:02:4e:90:35:05:79:36:d2:f5:26:16:d7:ce:80:96: 5f:84:70:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2TS7nzZ1sm531AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiNDQzNTUtZjYwNS00NmQyLThmYTYtZDljYWIwZWZi NGMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDNjNGQxNDUtNmRmNi00NzdhLWJmMzctODM2MTRjZjhmMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0iypfdPT2By+pWuZDmv+EmrAVv0yXLAKXBu 5/j66VU+TbNCEEjYM8lSCBj+cEIG+rH92AKnzsPTe+TBGAyEmXIYRitnop2DNRHb Kz/cZqUM9nnC098qgIoJ8H8MqJtWRw07kUXIQ8Px2w6+c1a3Uu8MWLGBgxCWnqBH OafzwKxCAS257hbGTIDvxfS5LKkyk/aHuSkATwvSCfI4bXDsLr0FhITYeBmQgLGW go3ZCtQCTy8MsJTyHZzqZf9nsoXT+aDjXIbu8cllbSWoDJNl7WFs3gP63L7bKfIp juvxd/1zSxbP7HGAIuXoCpqiPjfhC2nWTbOcF5zHQje4NK+qyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsz8usiD+CkYcKjvK6VdogjvtbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmI0 NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNhYjBlZmI0YzIvY2VmZjczNGMtYmJhMS0z ZGZkLTk3ODEtOGQwMDFjOTU3MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZiNDQzNTUtZjYwNS00NmQyLThm YTYtZDljYWIwZWZiNGMyLzg2YjQ0MzU1LWY2MDUtNDZkMi04ZmE2LWQ5Y2FiMGVm YjRjMi5jcmwwHwYDVR0jBBgwFoAUe+ir3LZRv1KiBJ51wUi0RBMNmgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmI0NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNh YjBlZmI0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrH0eg4knTI64he7+WUC2b+Yh0r2pfsSMGW6yGFN68T9qeuVADMkLtE IVHc7/J6jFyxMUYF54uAhzOI4XfspcmlQnev67rJv15308K5zrPYluj+nDZubC8x yoeuA8/ZQhdgnqb0EeUHqj51K2cJnE37YbtRTLXeuQ8dvoTFSOXGyjrEiSMwoZjn JFFmcK2nBNyfYdvVfyBac0qGgQMpLcQEyLGuS8PmM7+a9GO5QwpjTTK6/bIbmsV7 J5+SfoCk/8LGwzkIB30oaLSXRlw0LarPseBYP6LyITmyJ6HT5/6yDbejjuQ0poa1 bg3Z9QJOkDUFeTbS9SYW186All+EcE4= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:15 2025 by rpki-client