$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa File: ff061e09-d341-38c4-8f9a-595215185617.roa (raw, json) Hash identifier: MMCOy7ScLOZ0n8nVmUh0ybvom+cRhGLzGAtx/mJ1bzw= Subject key identifier: 89:A6:F2:2C:A7:37:31:37:5B:B9:22:BE:19:AB:D4:25:36:09:B6:C5 Certificate issuer: /CN=2826e068-eb57-4472-b533-533d04280096 Certificate serial: 010D0C9F4328584B6D2C9884C0DBB8AD865B2A40 Authority key identifier: 39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 20367 IP address blocks: 23.158.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:98:84:c0:db:b8:ad:86:5b:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2826e068-eb57-4472-b533-533d04280096 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=dc0c2130-4c0d-4493-8dfc-664733ef22c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:76:fb:a0:23:eb:a3:47:c8:ff:1d:53:24: f0:3d:8a:ae:37:c0:ff:db:78:9f:a3:ca:06:f6:7d: a5:73:b5:75:ad:33:19:9f:44:d7:d6:f0:ab:ec:e7: 28:04:f3:4c:be:05:5a:56:30:09:b5:41:9d:92:51: 77:f9:63:9e:46:a8:8b:1a:42:2f:6e:ac:4e:60:d5: 7e:27:05:a9:8e:d7:81:8f:e3:5b:fd:8b:96:6c:bd: bc:7e:a5:79:ac:f7:02:24:ac:75:5c:4e:19:05:03: 5b:97:1d:30:f8:d0:35:a3:14:d8:2b:41:bd:b5:7a: 69:42:ce:37:50:b8:f6:6f:b1:e7:aa:6e:e3:d7:fe: a8:18:e6:6f:13:bb:77:d8:7f:69:0d:58:34:e4:92: e4:71:57:d8:0d:08:55:88:bd:66:fa:9d:3a:17:e2: 28:fd:8f:09:d6:5f:37:39:16:b6:c2:43:4d:2f:fe: 47:42:36:dc:c2:7c:e4:64:b2:a0:1b:c2:86:57:4a: e8:22:69:c6:da:fb:61:b6:92:36:8b:2e:10:f0:b0: 2b:04:ea:6b:5a:03:d2:a1:f8:74:4d:d7:3c:38:d8: c4:44:8c:34:ba:52:79:92:39:a4:b2:a9:db:2d:62: 2c:03:1f:04:e9:ec:2e:58:cd:ac:15:02:bb:17:23: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:F2:2C:A7:37:31:37:5B:B9:22:BE:19:AB:D4:25:36:09:B6:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl X509v3 Authority Key Identifier: keyid:39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer sbgp-ipAddrBlock: critical IPv4: 23.158.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:15:f5:b9:95:b5:e3:12:6c:fb:0a:42:08:7e:6e:cf:f7:ea: ab:67:ba:b6:c3:30:22:99:07:fb:a3:b0:1c:25:58:f3:bb:ee: fa:49:7d:56:34:7e:51:50:80:4d:30:90:9f:0c:8b:15:68:89: 4f:d8:be:73:4b:9f:3d:82:8e:25:ec:d6:5b:42:65:ec:f0:c0: bb:a0:2c:15:f6:f0:33:28:36:62:f9:0c:c1:aa:fe:3d:ce:bc: c6:ac:ce:a2:ed:c2:ae:de:18:17:af:68:5d:d6:15:57:4b:b8: 5c:0a:92:61:fb:55:d0:51:a9:47:58:98:e8:a6:3f:70:a0:54: b5:01:ca:3a:98:a6:ac:03:5b:12:36:9c:62:70:4c:23:f4:75: d0:be:d1:ec:c1:b8:fa:64:8f:18:7d:a6:16:ee:05:c9:58:1a: 53:fa:1f:e2:3d:c5:b5:f4:dd:49:6b:f1:3e:3b:7f:85:ae:69: 95:12:13:79:1b:49:29:c1:44:a2:be:3d:56:71:84:1f:ae:86: 01:dd:df:db:65:5c:f1:96:98:06:47:e8:45:e7:c3:df:a9:20: 40:9b:5c:dd:f5:65:4c:96:b4:7c:a2:7c:c4:0b:4c:03:02:f6: 56:f7:20:b3:82:f1:a7:b3:70:fd:b7:d2:39:40:98:41:dc:db: 1a:9c:b7:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJiEwNu4rYZbKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgyNmUwNjgtZWI1Ny00NDcyLWI1MzMtNTMzZDA0Mjgw MDk2MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGMwYzIxMzAtNGMwZC00NDkzLThkZmMtNjY0NzMzZWYyMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTZ2+6Aj66NHyP8dUyTwPYquN8D/23ifo8oG 9n2lc7V1rTMZn0TX1vCr7OcoBPNMvgVaVjAJtUGdklF3+WOeRqiLGkIvbqxOYNV+ JwWpjteBj+Nb/YuWbL28fqV5rPcCJKx1XE4ZBQNblx0w+NA1oxTYK0G9tXppQs43 ULj2b7Hnqm7j1/6oGOZvE7t32H9pDVg05JLkcVfYDQhViL1m+p06F+Io/Y8J1l83 ORa2wkNNL/5HQjbcwnzkZLKgG8KGV0roImnG2vthtpI2iy4Q8LArBOprWgPSofh0 Tdc8ONjERIw0ulJ5kjmksqnbLWIsAx8E6ewuWM2sFQK7FyOizwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImm8iynNzE3W7kivhmr1CU2CbbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yODI2 ZTA2OC1lYjU3LTQ0NzItYjUzMy01MzNkMDQyODAwOTYvZmYwNjFlMDktZDM0MS0z OGM0LThmOWEtNTk1MjE1MTg1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjgyNmUwNjgtZWI1Ny00NDcyLWI1 MzMtNTMzZDA0MjgwMDk2LzI4MjZlMDY4LWViNTctNDQ3Mi1iNTMzLTUzM2QwNDI4 MDA5Ni5jcmwwHwYDVR0jBBgwFoAUOc1EHJ8Ptc0S/wD86gAbvekSwG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yODI2ZTA2OC1lYjU3LTQ0NzItYjUzMy01MzNk MDQyODAwOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIV9bmVteMSbPsKQgh+bs/36qtnurbDMCKZB/ujsBwlWPO77vpJfVY0 flFQgE0wkJ8MixVoiU/YvnNLnz2CjiXs1ltCZezwwLugLBX28DMoNmL5DMGq/j3O vMaszqLtwq7eGBevaF3WFVdLuFwKkmH7VdBRqUdYmOimP3CgVLUByjqYpqwDWxI2 nGJwTCP0ddC+0ezBuPpkjxh9phbuBclYGlP6H+I9xbX03Ulr8T47f4WuaZUSE3kb SSnBRKK+PVZxhB+uhgHd39tlXPGWmAZH6EXnw9+pIECbXN31ZUyWtHyifMQLTAMC 9lb3ILOC8aezcP230jlAmEHc2xqct+U= -----END CERTIFICATE-----Generated at Mon Nov 3 14:48:32 2025 by rpki-client