$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa File: f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa (raw, json) Hash identifier: 7sFDM7205a1IzZZs6HdssPF6h78bhz9E75GcOJg5D9M= Subject key identifier: FF:87:8A:5C:59:1E:C4:AD:1B:3E:FB:05:40:1E:D4:30:3E:D0:09:EF Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584D5E1A6E17639E6DE06394D878 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 400773 IP address blocks: 23.157.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6e:17:63:9e:6d:e0:63:94:d8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=58166477-9cd3-4940-8e07-f60dab7b7fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:76:bc:af:41:65:34:b2:e7:a3:39:ff:f4: b6:9f:56:c2:25:ff:42:9b:47:cd:2a:d9:ae:0d:d4: eb:2d:a4:47:a4:c0:5b:2f:bd:ad:1f:6d:1f:1c:c4: 88:47:29:71:06:da:fc:b5:3c:9b:f7:7c:32:0d:64: b2:67:aa:4a:e5:b2:08:c5:22:71:a8:00:99:41:cb: 39:5e:de:39:58:09:84:d9:db:92:53:52:18:2e:12: 0f:63:57:4b:1a:42:2b:ae:0b:4c:d6:71:61:67:94: d9:48:a6:b2:55:61:a5:3a:57:af:f2:e9:6a:cc:a7: e1:91:c3:c7:81:58:73:f4:95:b0:4f:43:19:c0:1d: 3f:09:9d:8e:47:7d:4d:83:8d:70:7a:ad:11:25:a7: 30:20:26:d0:73:6d:3d:5a:4d:db:4a:ee:7c:d3:31: 80:21:e0:54:ed:36:d9:5e:1a:f7:ce:f5:5b:08:63: 71:c5:5f:04:19:8e:7c:70:8d:ec:f6:08:e0:5b:3c: 7a:08:e8:a3:47:66:3f:09:1e:ff:44:45:f8:35:e4: 47:58:47:99:9c:98:d0:4d:25:fd:a7:13:f3:13:80: 8f:4a:31:6d:75:a2:24:e5:b0:50:5a:98:21:e8:2e: b5:df:32:ba:e6:59:ce:cd:58:f6:60:77:32:5a:3e: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:87:8A:5C:59:1E:C4:AD:1B:3E:FB:05:40:1E:D4:30:3E:D0:09:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 23.157.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d5:83:d6:ac:7a:83:dc:3f:f0:3b:cb:b8:d3:cc:f8:e0:0c: 04:22:03:7d:01:d1:34:66:67:d6:9e:af:02:c7:74:e5:ca:31: dd:95:76:54:5a:d6:db:3a:e0:72:9f:c3:bb:01:4a:89:88:e3: c7:0d:19:73:af:6d:ef:c4:bc:33:b9:9a:0a:9d:ec:dd:ba:b5: 26:5c:a2:39:fc:fd:30:7e:a5:04:e7:d6:df:94:63:66:8b:5a: 83:3a:89:09:eb:26:69:4d:d0:dd:8c:51:67:2e:9b:6f:fe:ca: 15:df:06:33:dd:8f:47:16:fe:7a:57:98:c8:ba:42:68:ce:65: 1e:c9:30:d4:94:47:89:64:54:d5:50:6b:9f:8f:d8:9b:82:de: a7:f9:b4:80:0d:f0:05:2a:8e:3d:5b:18:99:29:e5:9e:02:0b: 72:91:fb:5f:39:8e:ba:13:b3:03:42:52:a6:9a:57:f4:e5:80: 9e:c9:7f:dc:ce:35:23:38:3c:c6:ef:71:ae:29:e6:a8:bd:f2: 22:5f:a7:0c:47:8e:22:1d:7e:de:e3:85:51:f8:27:65:7c:af: 22:97:27:8f:ec:00:5e:47:eb:a6:44:0e:79:79:90:fd:a5:ba: 4e:08:c3:29:05:1f:80:70:4b:d6:d7:a7:57:38:51:77:54:31: 73:44:7f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm4XY55t4GOU2HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NTgxNjY0NzctOWNkMy00OTQwLThlMDctZjYwZGFiN2I3ZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1t2vK9BZTSy56M5//S2n1bCJf9Cm0fNKtmu DdTrLaRHpMBbL72tH20fHMSIRylxBtr8tTyb93wyDWSyZ6pK5bIIxSJxqACZQcs5 Xt45WAmE2duSU1IYLhIPY1dLGkIrrgtM1nFhZ5TZSKayVWGlOlev8ulqzKfhkcPH gVhz9JWwT0MZwB0/CZ2OR31Ng41weq0RJacwICbQc209Wk3bSu580zGAIeBU7TbZ Xhr3zvVbCGNxxV8EGY58cI3s9gjgWzx6COijR2Y/CR7/REX4NeRHWEeZnJjQTSX9 pxPzE4CPSjFtdaIk5bBQWpgh6C613zK65lnOzVj2YHcyWj7n3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+HilxZHsStGz77BUAe1DA+0AnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZjg5YzNiMjUtZjg0ZS0z YTk5LWIyZjItM2JmYWVhMGIzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvVg9aseoPcP/A7y7jTzPjgDAQiA30B0TRmZ9aerwLHdOXKMd2VdlRa 1ts64HKfw7sBSomI48cNGXOvbe/EvDO5mgqd7N26tSZcojn8/TB+pQTn1t+UY2aL WoM6iQnrJmlN0N2MUWcum2/+yhXfBjPdj0cW/npXmMi6QmjOZR7JMNSUR4lkVNVQ a5+P2JuC3qf5tIAN8AUqjj1bGJkp5Z4CC3KR+185jroTswNCUqaaV/TlgJ7Jf9zO NSM4PMbvca4p5qi98iJfpwxHjiIdft7jhVH4J2V8ryKXJ4/sAF5H66ZEDnl5kP2l uk4IwykFH4BwS9bXp1c4UXdUMXNEfwk= -----END CERTIFICATE-----Generated at Fri Apr 3 14:23:07 2026 by rpki-client