$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa File: f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa (raw, json) Hash identifier: WSWpJTVELuauug5nhW3ht/Yd0nkUKXAzK7Iw8JHIix4= Subject key identifier: CC:CE:D2:19:78:56:FF:E5:2E:4E:F4:01:8C:58:6B:AC:94:BC:B6:6A Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584B9E07BFF035A220C0FC4BD580 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 400773 IP address blocks: 23.157.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bf:f0:35:a2:20:c0:fc:4b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=dd0e5f11-8c99-4257-a819-979105ad7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:44:24:86:ee:7f:5d:24:34:9f:9f:a5:69: b0:6a:83:0d:7b:a0:5d:93:ec:6b:b5:23:52:ae:32: 6e:2a:2b:45:2b:a0:33:a3:14:c6:12:12:a8:27:bc: 94:86:8a:79:85:2a:52:d5:bb:fc:b1:ff:57:93:f8: a9:fe:c4:09:85:04:df:84:92:fe:3f:ac:88:76:3a: ca:c2:dd:3e:27:3a:ca:e7:f5:66:9f:5a:e2:c7:0e: 60:16:43:ba:27:ef:c0:24:e7:76:7e:b0:83:26:e0: 74:40:51:43:c5:8c:36:dc:26:63:02:e5:2b:bb:00: 98:96:f6:2e:90:1d:b4:83:c3:3a:d1:3e:7d:47:0a: 00:24:de:6f:98:bb:10:8c:fd:58:46:4c:2e:ce:b7: 15:62:0b:4e:22:7a:fc:5f:f4:2b:2e:42:a2:ef:ac: f2:6c:3a:0f:9b:a1:c7:90:83:07:69:31:04:36:81: 94:d4:aa:c7:54:ca:0d:72:1b:ef:a5:60:68:6b:52: c1:98:13:7e:32:2b:22:07:8b:e9:4f:7b:d8:80:e5: 14:e5:bc:50:36:0f:b2:70:3b:c7:65:f2:d9:80:43: 21:ab:b9:4e:c3:11:d8:9f:fe:4e:48:ec:c1:f5:06: b5:7f:e9:5d:f3:e5:70:fc:c7:de:7a:4d:78:a5:e2: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CE:D2:19:78:56:FF:E5:2E:4E:F4:01:8C:58:6B:AC:94:BC:B6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/f89c3b25-f84e-3a99-b2f2-3bfaea0b30a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 23.157.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:71:b5:87:7a:e1:d5:e2:88:d6:e3:35:77:46:4f:0a:a6:da: 35:9c:ba:4d:4f:78:a2:65:9b:dd:61:a4:a6:b8:57:11:5c:07: ba:0e:4a:f7:ee:25:6d:9e:68:89:1a:8a:16:09:0d:b8:bc:00: 18:65:f0:6a:77:4c:73:b6:0c:3d:d9:c0:35:fc:b7:a4:7c:36: 5f:87:68:19:87:fd:79:04:4a:e5:a3:9a:19:f7:5a:80:18:da: 63:73:1e:97:e4:f9:35:fe:25:4b:ff:ab:0f:f5:74:7c:c5:b3: c0:2f:a9:f0:6d:87:17:6a:de:4f:43:e8:e2:60:0b:35:d2:e2: 2d:14:27:e9:ae:0e:b5:67:8b:3c:0d:cd:ff:d1:fb:2f:b2:50: 0e:63:6b:40:6d:c9:7d:72:03:a9:85:56:a9:1e:0a:34:cd:16: c1:be:5e:40:e7:70:98:a2:67:6a:91:64:53:48:7c:20:93:3b: a2:32:e5:6e:dd:a5:ba:d3:13:5b:d8:3d:8d:e2:32:e2:dc:58: 08:c7:c2:d0:1b:6f:04:7d:6a:ad:7d:81:19:c7:ea:cc:8d:ba: 03:d1:f4:b1:40:dd:29:f4:c5:55:24:2d:6e:6c:a0:cb:3e:77: cb:09:d2:8a:70:dd:5d:ca:dc:51:e9:09:c5:77:b4:35:5a:ca: ce:8b:2b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7/wNaIgwPxL1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGQwZTVmMTEtOGM5OS00MjU3LWE4MTktOTc5MTA1YWQ3OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEBEJIbuf10kNJ+fpWmwaoMNe6Bdk+xrtSNS rjJuKitFK6AzoxTGEhKoJ7yUhop5hSpS1bv8sf9Xk/ip/sQJhQTfhJL+P6yIdjrK wt0+JzrK5/Vmn1rixw5gFkO6J+/AJOd2frCDJuB0QFFDxYw23CZjAuUruwCYlvYu kB20g8M60T59RwoAJN5vmLsQjP1YRkwuzrcVYgtOInr8X/QrLkKi76zybDoPm6HH kIMHaTEENoGU1KrHVMoNchvvpWBoa1LBmBN+MisiB4vpT3vYgOUU5bxQNg+ycDvH ZfLZgEMhq7lOwxHYn/5OSOzB9Qa1f+ld8+Vw/Mfeek14peK22QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzO0hl4Vv/lLk70AYxYa6yUvLZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZjg5YzNiMjUtZjg0ZS0z YTk5LWIyZjItM2JmYWVhMGIzMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJxtYd64dXiiNbjNXdGTwqm2jWcuk1PeKJlm91hpKa4VxFcB7oOSvfu JW2eaIkaihYJDbi8ABhl8Gp3THO2DD3ZwDX8t6R8Nl+HaBmH/XkESuWjmhn3WoAY 2mNzHpfk+TX+JUv/qw/1dHzFs8AvqfBthxdq3k9D6OJgCzXS4i0UJ+muDrVnizwN zf/R+y+yUA5ja0BtyX1yA6mFVqkeCjTNFsG+XkDncJiiZ2qRZFNIfCCTO6Iy5W7d pbrTE1vYPY3iMuLcWAjHwtAbbwR9aq19gRnH6syNugPR9LFA3Sn0xVUkLW5soMs+ d8sJ0opw3V3K3FHpCcV3tDVays6LK7Q= -----END CERTIFICATE-----Generated at Tue Nov 4 09:43:29 2025 by rpki-client