$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa File: 3d653275-34fd-30d1-9fbd-3fc5704add6a.roa (raw, json) Hash identifier: cqex4n38qUCm8DDzi/hknIFLUFv7dx4TMUF/jGs5kSA= Subject key identifier: 56:19:B9:60:7F:26:5C:CF:B7:26:EB:80:65:41:54:47:17:D9:AF:9B Certificate issuer: /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Certificate serial: 010D0C9F4328584BB2F7D09941800B0425DDA840 Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 400930 IP address blocks: 23.175.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d0:99:41:80:0b:04:25:dd:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d445fffc-6ffc-409e-abb4-9b0f40b20d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:9a:13:5e:ed:e3:c7:29:90:dc:dc:51:60: c6:13:cf:5e:58:87:81:01:c1:64:d3:38:29:8e:17: dc:da:0a:20:3a:4b:c5:f1:15:60:a2:11:e2:b2:18: 30:22:3c:e2:e3:7c:26:1a:3b:14:1b:83:5c:84:a0: dc:dd:db:78:5b:32:7a:cd:9a:3b:c1:40:5f:2b:4c: 7f:a5:55:c6:f9:f2:91:1e:7d:38:e7:74:cd:0f:b4: 96:fa:28:95:2f:00:b6:f2:8d:43:d6:be:8e:d8:c3: 66:07:1d:36:ef:ca:4a:5f:e2:69:33:b8:34:e0:a5: 75:90:7b:70:44:23:e1:44:05:c1:12:70:ae:f1:3e: 67:25:12:09:65:15:80:f8:37:04:4d:af:8c:42:ee: 13:3e:7e:70:2d:3c:e2:09:2e:3d:0f:5d:7d:58:3c: 98:9a:0c:6c:78:30:d9:c9:a9:f8:27:58:65:82:15: 23:47:e0:8d:b8:a1:fe:34:fa:5f:98:0a:9a:fa:14: f7:cc:b4:07:8e:ff:54:65:60:3a:43:24:b6:e4:b5: ad:80:86:f2:09:d0:fa:23:42:2c:d9:2e:ea:ef:66: 5c:ab:8c:e6:b2:d5:ff:80:61:3d:a1:7a:5b:86:ee: ae:71:5b:4d:18:f3:27:04:bc:0c:14:b7:32:4e:a8: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:19:B9:60:7F:26:5C:CF:B7:26:EB:80:65:41:54:47:17:D9:AF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl X509v3 Authority Key Identifier: keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer sbgp-ipAddrBlock: critical IPv4: 23.175.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f0:de:b8:ab:ed:15:32:83:96:34:6a:c4:33:14:63:33:ec: 74:14:0c:4a:b0:2b:89:2a:25:0f:c3:63:06:96:f5:5c:1a:1c: 52:8a:05:43:cd:c4:e7:83:bd:63:8d:df:bb:3d:3a:8c:9a:63: 81:5f:fb:63:f8:c1:4c:b6:de:e5:0e:59:2f:30:b1:3c:a3:e2: ab:18:d8:5d:46:a3:03:79:e9:69:0f:9c:64:75:11:de:5e:34: 90:3a:10:80:e2:36:7e:81:e8:f6:e3:88:75:2f:00:80:c0:4c: e3:5c:62:9e:4a:04:59:c3:f1:1a:a6:07:48:b5:35:f8:cd:07: 46:a6:a8:71:95:77:49:98:4a:c6:fe:73:8b:9d:8c:56:51:a3: 28:49:ce:b4:f3:de:53:0a:b6:0d:9f:7f:9c:17:68:dd:60:28: 88:3a:57:38:51:c3:14:0f:72:c4:56:e1:18:94:e6:ac:47:e9: ba:21:29:36:de:69:51:21:ce:72:97:33:de:5f:a8:d7:48:98: 76:e2:38:7a:ab:08:c5:c5:af:b7:02:1f:58:b6:d7:7e:86:9b: 8e:cc:72:ad:2f:11:1b:e4:c7:4a:14:de:fb:1b:7b:90:24:d4: c3:53:a9:25:07:16:da:de:b6:38:6a:cc:c2:a1:b7:c4:a3:03: 00:c6:15:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99CZQYALBCXdqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIyNGEwZjMtZWQwZS00ZjUyLWE3ZDQtNWYyYjUwNDhi ZWY4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDQ0NWZmZmMtNmZmYy00MDllLWFiYjQtOWIwZjQwYjIwZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklSaE17t48cpkNzcUWDGE89eWIeBAcFk0zgp jhfc2gogOkvF8RVgohHishgwIjzi43wmGjsUG4NchKDc3dt4WzJ6zZo7wUBfK0x/ pVXG+fKRHn0453TND7SW+iiVLwC28o1D1r6O2MNmBx0278pKX+JpM7g04KV1kHtw RCPhRAXBEnCu8T5nJRIJZRWA+DcETa+MQu4TPn5wLTziCS49D119WDyYmgxseDDZ yan4J1hlghUjR+CNuKH+NPpfmAqa+hT3zLQHjv9UZWA6QyS25LWtgIbyCdD6I0Is 2S7q72Zcq4zmstX/gGE9oXpbhu6ucVtNGPMnBLwMFLcyTqgzQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYZuWB/JlzPtybrgGVBVEcX2a+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMjI0 YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJiNTA0OGJlZjgvM2Q2NTMyNzUtMzRmZC0z MGQxLTlmYmQtM2ZjNTcwNGFkZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjIyNGEwZjMtZWQwZS00ZjUyLWE3 ZDQtNWYyYjUwNDhiZWY4LzIyMjRhMGYzLWVkMGUtNGY1Mi1hN2Q0LTVmMmI1MDQ4 YmVmOC5jcmwwHwYDVR0jBBgwFoAUl1Nt1yQVObJUhvIlN/tifcqtQpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMjI0YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJi NTA0OGJlZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF684MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7w3rir7RUyg5Y0asQzFGMz7HQUDEqwK4kqJQ/DYwaW9VwaHFKKBUPN xOeDvWON37s9OoyaY4Ff+2P4wUy23uUOWS8wsTyj4qsY2F1GowN56WkPnGR1Ed5e NJA6EIDiNn6B6PbjiHUvAIDATONcYp5KBFnD8RqmB0i1NfjNB0amqHGVd0mYSsb+ c4udjFZRoyhJzrTz3lMKtg2ff5wXaN1gKIg6VzhRwxQPcsRW4RiU5qxH6bohKTbe aVEhznKXM95fqNdImHbiOHqrCMXFr7cCH1i2136Gm47Mcq0vERvkx0oU3vsbe5Ak 1MNTqSUHFtretjhqzMKht8SjAwDGFag= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:26 2025 by rpki-client