$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa File: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json) Hash identifier: t93rSacsNu46jF39cSSe/Bc+JRbPX1e+DWIIHclAuI8= Subject key identifier: CB:0D:61:89:89:04:6D:CB:61:E1:5C:00:5D:29:71:5F:53:0E:0A:23 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584B95A79FCFD513949A0B0C3140 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 40205 IP address blocks: 23.189.216.0/24 maxlen: 24 2620:cd:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9f:cf:d5:13:94:9a:0b:0c:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=13d02e6d-8379-483d-9e0d-5e71eb73d9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:bc:78:7a:a9:08:d3:83:d6:d6:6c:35:68: 8c:f3:76:6d:89:e1:91:74:88:d7:ad:5c:56:d6:47: 59:c9:91:ad:95:49:c7:72:fa:70:4e:ea:3e:50:00: 62:14:0e:f8:41:34:6f:36:57:09:3a:d1:b0:f6:2b: ad:00:76:ca:ce:94:4b:74:d9:b6:ad:2c:e5:ae:21: aa:fa:f9:52:91:a2:54:cc:f4:fd:43:f7:6e:93:0f: ef:93:58:1f:02:74:60:7f:1a:90:8c:fb:07:63:d5: 95:39:61:ce:f3:7b:1a:9d:20:f2:3c:59:56:6b:c8: fc:98:83:f0:ed:b5:46:ce:07:55:41:e3:64:a0:76: d4:4e:74:74:3b:0c:cf:49:88:1a:88:c3:e5:9f:e2: 37:70:47:25:57:05:61:b1:1f:0c:f2:68:25:af:05: a6:7c:8c:27:f3:e8:d0:8c:af:32:f5:3e:6c:bc:34: 16:aa:c1:c7:6a:5c:dc:4e:43:6f:92:05:0e:95:6d: 8a:cb:b5:a5:c1:17:f0:45:c5:e8:86:2d:6f:82:16: 77:47:2d:3e:44:ab:c1:00:d4:18:5a:e3:8b:4f:0a: c5:fd:1c:36:f2:d2:d7:4f:37:ff:93:b1:2e:bd:b3: 12:32:32:72:38:c9:8a:9c:6a:a4:94:77:da:f0:70: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:61:89:89:04:6D:CB:61:E1:5C:00:5D:29:71:5F:53:0E:0A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: 23.189.216.0/24 IPv6: 2620:cd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f7:dd:00:d6:af:ff:13:15:58:23:f1:7b:df:f5:da:1d:3e: 25:d5:20:d8:b2:50:5e:6b:9b:93:2c:6d:92:41:09:e5:f4:13: b9:3d:f1:c7:65:9d:a3:f4:e3:64:eb:77:0d:f1:0e:e0:4e:96: 95:23:fe:88:f5:7f:8f:da:76:df:e4:ee:ac:f2:ea:3d:30:10: 7d:18:c7:ca:71:c7:27:81:ec:00:ba:f0:23:3b:bd:a2:6d:66: d1:b0:e0:32:f7:c1:7b:78:70:4f:f2:73:f2:08:ea:0c:a5:87: 35:db:0f:98:16:36:f9:d6:4e:be:3f:a2:eb:3a:00:36:55:62: fb:42:0f:d6:fa:eb:72:5f:4d:45:2f:f7:ba:6d:48:35:31:74: a3:db:99:d0:84:f0:f5:06:d3:f5:50:dd:68:ee:98:23:02:b1: c8:b6:c2:1e:6f:7a:a0:74:3f:39:48:82:73:15:63:92:d5:09: 4b:5d:b1:77:d2:84:6c:0f:32:49:d2:6b:d6:00:1a:a5:33:e8: 84:b3:2b:a5:95:19:17:79:59:b1:0c:56:b7:60:2c:2e:76:0c: 3c:2d:58:0a:47:45:e0:b3:7d:18:9e:6b:3b:4b:50:41:a8:a0: 71:17:e0:d8:95:45:a2:f6:db:3d:1f:63:1d:86:2e:18:76:19: a6:89:38:cc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuVp5/P1ROUmgsMMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTNkMDJlNmQtODM3OS00ODNkLTllMGQtNWU3MWViNzNkOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzG8eHqpCNOD1tZsNWiM83ZtieGRdIjXrVxW 1kdZyZGtlUnHcvpwTuo+UABiFA74QTRvNlcJOtGw9iutAHbKzpRLdNm2rSzlriGq +vlSkaJUzPT9Q/dukw/vk1gfAnRgfxqQjPsHY9WVOWHO83sanSDyPFlWa8j8mIPw 7bVGzgdVQeNkoHbUTnR0OwzPSYgaiMPln+I3cEclVwVhsR8M8mglrwWmfIwn8+jQ jK8y9T5svDQWqsHHalzcTkNvkgUOlW2Ky7WlwRfwRcXohi1vghZ3Ry0+RKvBANQY WuOLTwrF/Rw28tLXTzf/k7EuvbMSMjJyOMmKnGqklHfa8HCWpQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMsNYYmJBG3LYeFcAF0pcV9TDgojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMDU0NWM4ZDgtMmJlNS0z ODcyLThmYTEtNTU2NjhkMWYxOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF73YMA8E AgACMAkDBwAmIADNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnffdANav/xMVWCPxe9/12h0+JdUg2LJQ XmubkyxtkkEJ5fQTuT3xx2Wdo/TjZOt3DfEO4E6WlSP+iPV/j9p23+TurPLqPTAQ fRjHynHHJ4HsALrwIzu9om1m0bDgMvfBe3hwT/Jz8gjqDKWHNdsPmBY2+dZOvj+i 6zoANlVi+0IP1vrrcl9NRS/3um1INTF0o9uZ0ITw9QbT9VDdaO6YIwKxyLbCHm96 oHQ/OUiCcxVjktUJS12xd9KEbA8ySdJr1gAapTPohLMrpZUZF3lZsQxWt2AsLnYM PC1YCkdF4LN9GJ5rO0tQQaigcRfg2JVFovbbPR9jHYYuGHYZpok4zA== -----END CERTIFICATE-----Generated at Fri Oct 24 06:59:29 2025 by rpki-client