$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa File: d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa (raw, json) Hash identifier: DYvaKgh6sQE1PFzYg7rse09CJlm4lmIGGQGTk27fBxE= Subject key identifier: A9:0B:4C:1C:8C:CD:45:EC:53:2D:69:A0:D0:F9:E8:F4:0E:6A:DB:D7 Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584BB88D2181893FF3A2909CDFC0 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 40081 IP address blocks: 23.175.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:21:81:89:3f:f3:a2:90:9c:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=38bdb67a-7743-466e-a933-4e9fb6a3a34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:05:aa:f1:25:e3:ec:3a:8b:b4:a9:b9:a3: 78:61:ba:ea:8f:2c:95:df:4c:08:05:52:47:e3:24: 5e:24:b8:50:35:78:30:09:77:7b:ae:ad:b6:e4:25: 03:ae:e5:5e:de:5d:1c:45:11:72:60:b1:a1:b4:f0: c6:73:3a:36:ca:4c:59:d7:dc:3a:0f:ac:52:d1:14: 90:e9:b6:3c:ee:e6:de:c7:05:8f:66:eb:55:1d:80: dc:65:b3:56:80:9e:70:43:98:d7:bc:72:43:52:80: f4:cc:ca:3f:c7:88:fb:25:dc:6d:be:d1:8e:4f:dc: 8d:50:c4:b4:fa:b8:4f:2f:b7:67:59:37:4b:cf:ae: df:6a:de:27:25:aa:d7:a0:33:39:ff:68:00:fc:87: 03:70:5a:f0:d4:10:bb:b1:15:29:df:81:d8:4e:1a: 12:fe:54:f7:4f:8d:27:3e:bf:da:02:b0:af:0d:68: 6d:bd:97:e7:e8:fd:1e:19:28:82:5f:8c:1b:b3:22: c6:25:18:b0:68:de:8c:cc:6e:3b:ab:2a:2e:e2:56: c8:c5:c2:15:aa:aa:21:1c:68:ca:70:72:e3:3d:ef: 84:36:87:ee:23:db:06:e8:93:5d:63:e9:25:6f:4a: dd:92:9b:69:d0:c6:ae:a4:ff:38:3f:55:63:0b:93: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:4C:1C:8C:CD:45:EC:53:2D:69:A0:D0:F9:E8:F4:0E:6A:DB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/d689e1d4-a55e-371e-ba9a-4a12ad4be096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv4: 23.175.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:28:b1:11:75:14:d6:c3:a1:37:29:b5:b1:b3:d3:58:b3:7f: 08:7f:7a:f0:99:bd:c2:da:18:78:9a:bf:d2:e1:41:fd:d3:87: 97:7c:7f:da:e7:4c:43:17:e8:ff:47:c2:ea:50:bd:df:38:f9: 5e:4b:e9:f3:5b:96:45:93:5a:b4:a8:55:7b:42:e6:d1:70:5a: 6f:d6:9a:18:04:40:0f:db:35:c9:de:e5:3a:30:13:2f:87:31: 72:d3:7b:47:4e:18:58:d1:87:b8:aa:a6:fa:8d:cc:fb:93:85: 89:a7:61:d5:0c:27:96:7e:22:fa:2b:da:47:e3:fc:26:b2:70: 3b:10:e6:93:3d:3b:ae:08:75:80:88:c9:da:c4:28:21:97:25: aa:b8:61:2d:7c:ce:66:ca:2c:49:a9:ce:5e:85:f7:34:bd:4b: e6:29:54:48:0b:80:c8:df:c0:b5:86:36:54:d9:ab:f2:53:6e: ae:1b:f3:3d:85:08:ec:58:a3:8d:40:73:ed:10:07:95:d1:3d: 14:f9:96:4a:d0:04:05:9a:e9:41:dc:4f:e2:d4:8e:16:cb:1b: 10:0a:c5:ef:01:c3:97:67:bf:78:49:14:ad:3f:44:de:60:8b: 72:60:8b:55:8b:66:bd:0c:54:ca:cf:84:fb:c5:75:e1:df:06: 5c:7b:0f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSGBiT/zopCc38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzhiZGI2N2EtNzc0My00NjZlLWE5MzMtNGU5ZmI2YTNhMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokwFqvEl4+w6i7SpuaN4YbrqjyyV30wIBVJH 4yReJLhQNXgwCXd7rq225CUDruVe3l0cRRFyYLGhtPDGczo2ykxZ19w6D6xS0RSQ 6bY87ubexwWPZutVHYDcZbNWgJ5wQ5jXvHJDUoD0zMo/x4j7JdxtvtGOT9yNUMS0 +rhPL7dnWTdLz67fat4nJarXoDM5/2gA/IcDcFrw1BC7sRUp34HYThoS/lT3T40n Pr/aArCvDWhtvZfn6P0eGSiCX4wbsyLGJRiwaN6MzG47qyou4lbIxcIVqqohHGjK cHLjPe+ENofuI9sG6JNdY+klb0rdkptp0MaupP84P1VjC5P7lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkLTByMzUXsUy1poND56PQOatvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZDY4OWUxZDQtYTU1ZS0z NzFlLWJhOWEtNGExMmFkNGJlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgosRF1FNbDoTcptbGz01izfwh/evCZvcLaGHiav9LhQf3Th5d8f9rn TEMX6P9HwupQvd84+V5L6fNblkWTWrSoVXtC5tFwWm/WmhgEQA/bNcne5TowEy+H MXLTe0dOGFjRh7iqpvqNzPuThYmnYdUMJ5Z+Ivor2kfj/CaycDsQ5pM9O64IdYCI ydrEKCGXJaq4YS18zmbKLEmpzl6F9zS9S+YpVEgLgMjfwLWGNlTZq/JTbq4b8z2F COxYo41Ac+0QB5XRPRT5lkrQBAWa6UHcT+LUjhbLGxAKxe8Bw5dnv3hJFK0/RN5g i3Jgi1WLZr0MVMrPhPvFdeHfBlx7D+g= -----END CERTIFICATE-----Generated at Mon Nov 3 08:27:20 2025 by rpki-client