$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa File: f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa (raw, json) Hash identifier: rtSwZqpp+9np/CmyyGP68QJ4iho7oHl8XxU+jm7lFbA= Subject key identifier: 69:11:56:D4:81:1B:7D:CE:DE:61:58:C3:C7:BF:DD:4C:A0:FB:9D:FC Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584EE0C20D7AAC7D787A21FF6E80 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 400773 IP address blocks: 23.157.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0d:7a:ac:7d:78:7a:21:ff:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=5b59ab1f-ecd7-4ac6-b8f7-bcce261e500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:73:a5:82:7f:00:af:99:7b:d8:36:52:f5: 31:b6:3e:f1:d6:77:ae:9e:e3:94:e3:98:42:da:52: dd:f8:39:af:96:a7:b8:ec:bd:7e:9a:30:7a:45:79: 5f:87:bc:58:7c:2c:22:49:d4:3f:36:88:4d:9f:9a: ee:c3:b9:61:53:7f:f9:ee:73:e5:a5:4d:92:b6:25: da:91:ac:c8:0d:05:83:4c:dc:73:96:50:11:b7:ff: 8e:b9:1f:67:08:7f:85:9f:b4:01:96:d2:20:62:bf: 46:99:d0:75:d7:4d:67:09:94:6c:32:fd:28:df:b7: 70:69:32:94:e6:28:b4:92:95:49:a2:bc:5c:dc:cb: 4e:61:5c:95:d4:b4:e1:10:9e:e7:ea:d1:d8:97:4e: 60:a1:09:f3:0f:2c:e8:16:0f:2e:97:96:e8:a7:04: 06:cd:49:f4:b1:a8:1f:73:78:5d:70:20:60:d3:49: fa:62:d4:90:da:31:c2:e1:dc:a9:7c:24:ad:23:93: 66:f6:69:ba:73:13:28:6c:1a:f4:21:8a:ed:29:10: 4f:27:4d:48:b5:9e:23:cf:1b:73:53:33:e8:48:e4: cc:1a:39:bd:3c:21:aa:40:65:78:c5:0e:ce:24:f6: e7:11:f2:03:ee:3d:9b:bb:45:0f:d1:e2:19:68:10: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:56:D4:81:1B:7D:CE:DE:61:58:C3:C7:BF:DD:4C:A0:FB:9D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 23.157.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:97:51:72:96:92:11:22:aa:33:e3:e4:aa:65:a2:f8:92:fd: 15:a6:2b:c4:2c:f9:b6:3c:a8:90:e5:f5:5c:71:39:c5:70:be: b3:96:a9:af:3e:92:28:b3:13:67:34:17:fb:88:60:03:59:45: 0d:a8:e3:5a:51:f0:53:fe:97:2c:f7:ef:be:3f:35:a8:ee:40: 68:3c:2b:1f:4e:ca:6a:58:cb:01:7a:82:e0:9e:af:46:92:e8: 1e:c7:5f:ad:9a:d9:0b:78:54:d3:d7:f7:4d:0a:59:cd:46:9b: 00:11:13:8d:9e:f9:91:02:ac:0d:57:77:98:e4:bf:87:2b:57: 26:2d:b5:69:0c:0b:0b:18:af:b4:e9:81:50:05:68:a3:b2:47: 68:a5:ed:77:41:96:37:ae:43:5a:6d:28:31:0d:8b:bf:64:61: 4f:51:79:94:6d:2b:66:ff:ca:40:01:a8:05:a9:52:15:39:d6: c0:f4:2c:16:5c:2b:04:b3:98:c4:2d:d1:8b:17:10:97:84:7e: f0:2d:0f:c6:f7:94:b9:d3:49:65:2c:8d:c9:bd:62:24:5b:ef: bf:24:04:b7:e7:11:da:87:1e:7b:69:f0:6b:fe:c6:19:74:09: 4a:ce:48:3e:b4:e2:1a:13:22:05:d0:59:71:97:a6:6a:b6:10: a6:85:c6:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg16rH14eiH/boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NWI1OWFiMWYtZWNkNy00YWM2LWI4ZjctYmNjZTI2MWU1MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZzpYJ/AK+Ze9g2UvUxtj7x1neunuOU45hC 2lLd+Dmvlqe47L1+mjB6RXlfh7xYfCwiSdQ/NohNn5ruw7lhU3/57nPlpU2StiXa kazIDQWDTNxzllARt/+OuR9nCH+Fn7QBltIgYr9GmdB1101nCZRsMv0o37dwaTKU 5ii0kpVJorxc3MtOYVyV1LThEJ7n6tHYl05goQnzDyzoFg8ul5bopwQGzUn0sagf c3hdcCBg00n6YtSQ2jHC4dypfCStI5Nm9mm6cxMobBr0IYrtKRBPJ01ItZ4jzxtz UzPoSOTMGjm9PCGqQGV4xQ7OJPbnEfID7j2bu0UP0eIZaBAd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkRVtSBG33O3mFYw8e/3Uyg+538MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZjg5YzNiMjUtZjg0ZS0z YTk5LWIyZjItM2JmYWVhMGIzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeXUXKWkhEiqjPj5KploviS/RWmK8Qs+bY8qJDl9VxxOcVwvrOWqa8+ kiizE2c0F/uIYANZRQ2o41pR8FP+lyz3774/NajuQGg8Kx9OympYywF6guCer0aS 6B7HX62a2Qt4VNPX900KWc1GmwARE42e+ZECrA1Xd5jkv4crVyYttWkMCwsYr7Tp gVAFaKOyR2il7XdBljeuQ1ptKDENi79kYU9ReZRtK2b/ykABqAWpUhU51sD0LBZc KwSzmMQt0YsXEJeEfvAtD8b3lLnTSWUsjcm9YiRb778kBLfnEdqHHntp8Gv+xhl0 CUrOSD604hoTIgXQWXGXpmq2EKaFxq4= -----END CERTIFICATE-----Generated at Sat Aug 22 08:16:10 2026 by rpki-client