$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81bbbe35-ae27-3c6b-bff4-96991d32257e.roa File: 81bbbe35-ae27-3c6b-bff4-96991d32257e.roa (raw, json) Hash identifier: Y2DfD7g1hgQA64gU3Hfo6GB9cdmggXTOXeLtaRKRdSI= Subject key identifier: F5:44:1A:3D:70:0C:49:7E:7E:43:08:23:DA:3A:5F:B9:32:45:04:66 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584B8A2682EACDFAAA54446D9500 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81bbbe35-ae27-3c6b-bff4-96991d32257e.roa Signing time: Thu 16 Oct 2025 10:06:51 +0000 ROA not before: Thu 16 Oct 2025 10:06:51 +0000 ROA not after: Wed 14 Jan 2026 11:06:51 +0000 asID: 14555 IP address blocks: 198.23.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:26:82:ea:cd:fa:aa:54:44:6d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Oct 16 10:06:51 2025 GMT Not After : Jan 14 11:06:51 2026 GMT Subject: CN=4063ea25-8600-4c9b-bb66-1bcc4520efe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:f3:6c:57:5a:90:8b:86:09:3f:a7:5e:46: 14:ca:68:af:d5:13:00:d5:01:ae:c8:8b:b8:9c:6d: 63:2c:9d:e9:18:df:24:fd:22:35:b4:a1:04:06:11: 77:f0:e6:84:cd:cf:2f:c5:dc:ad:3b:2d:34:08:a3: af:a5:09:14:39:3d:d5:61:58:60:94:06:a9:58:30: 19:dc:12:f1:a2:20:d8:c7:fd:24:40:e3:d3:67:7b: 6b:a3:a0:d3:7d:cc:9b:e2:30:d7:00:ed:0e:10:9e: 61:5a:fc:31:0c:de:c5:14:2b:a8:9a:66:aa:c4:37: 7f:79:75:7c:e1:aa:d9:cc:c4:cd:26:f6:8e:48:6c: 9a:1c:f3:2c:3e:64:e3:11:75:2f:58:53:76:0a:a2: 34:60:5c:ba:5a:9d:c7:6f:7c:d6:fe:50:eb:79:00: e3:46:5a:5a:02:a3:46:c1:88:f4:72:b5:45:11:7d: 31:41:c3:02:c9:92:6f:a2:b2:48:53:12:ef:a0:a8: 35:73:60:b3:76:0d:e1:78:9a:90:55:1f:bd:0e:70: 0c:6f:05:84:7f:8e:89:75:33:c8:bd:53:20:58:c7: 7a:fe:25:30:be:87:74:89:47:6b:ae:fa:41:7e:c5: 88:7a:6b:06:6d:4a:bd:8d:9f:e8:77:8f:67:ff:77: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:44:1A:3D:70:0C:49:7E:7E:43:08:23:DA:3A:5F:B9:32:45:04:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81bbbe35-ae27-3c6b-bff4-96991d32257e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:95:dd:3c:7c:bd:f4:c7:ce:b2:b9:9f:5a:8b:fe:88:3e:19: 1b:7b:c6:72:5a:26:3d:70:8f:66:cc:74:84:79:ff:af:9d:a0: 90:ab:e2:ae:d3:e9:4b:1e:ad:95:50:35:be:e1:6a:92:93:ea: c7:98:00:92:27:f9:a4:91:6e:ed:72:e6:ce:3b:71:76:b1:51: 47:ee:4f:28:e6:62:3c:a5:4b:e3:65:b4:9a:06:a8:cc:94:90: e3:a1:b9:cd:10:89:88:df:2e:b1:45:00:70:cb:d5:6d:3b:a2: e4:1a:84:95:d0:e8:ff:ba:8c:10:b1:17:70:1f:a1:79:04:4b: 5b:73:7c:65:dc:e0:ef:1c:67:6f:28:81:65:f8:8a:73:c3:c6: f0:82:3f:55:97:a0:d9:1b:75:15:46:e9:07:fb:e3:e8:89:46: 94:3b:df:d8:6f:1b:d8:27:c5:e7:b9:42:59:7d:f2:58:44:1e: 62:84:bb:ae:10:d4:29:ff:61:e9:8b:17:78:06:5b:df:84:84: c4:f6:d5:ce:9c:c4:97:1e:7f:43:22:7e:43:1e:88:86:29:1a: 73:c0:ef:a8:b4:e2:e7:69:9d:eb:87:9f:45:c9:71:94:43:7d: ee:22:c2:26:92:44:a8:21:4d:d9:9f:e3:cc:72:51:cd:37:96: 27:df:4d:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKJoLqzfqqVERtlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI1MTAxNjEwMDY1MVoXDTI2MDExNDExMDY1MVowLzEtMCsGA1UEAxMk NDA2M2VhMjUtODYwMC00YzliLWJiNjYtMWJjYzQ1MjBlZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3zbFdakIuGCT+nXkYUymiv1RMA1QGuyIu4 nG1jLJ3pGN8k/SI1tKEEBhF38OaEzc8vxdytOy00CKOvpQkUOT3VYVhglAapWDAZ 3BLxoiDYx/0kQOPTZ3tro6DTfcyb4jDXAO0OEJ5hWvwxDN7FFCuommaqxDd/eXV8 4arZzMTNJvaOSGyaHPMsPmTjEXUvWFN2CqI0YFy6Wp3Hb3zW/lDreQDjRlpaAqNG wYj0crVFEX0xQcMCyZJvorJIUxLvoKg1c2Czdg3heJqQVR+9DnAMbwWEf46JdTPI vVMgWMd6/iUwvod0iUdrrvpBfsWIemsGbUq9jZ/od49n/3evfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVEGj1wDEl+fkMII9o6X7kyRQRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvODFiYmJlMzUtYWUyNy0z YzZiLWJmZjQtOTY5OTFkMzIyNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaV3Tx8vfTHzrK5n1qL/og+GRt7xnJaJj1wj2bMdIR5/6+doJCr4q7T 6UserZVQNb7hapKT6seYAJIn+aSRbu1y5s47cXaxUUfuTyjmYjylS+NltJoGqMyU kOOhuc0QiYjfLrFFAHDL1W07ouQahJXQ6P+6jBCxF3AfoXkES1tzfGXc4O8cZ28o gWX4inPDxvCCP1WXoNkbdRVG6Qf74+iJRpQ739hvG9gnxee5Qll98lhEHmKEu64Q 1Cn/YemLF3gGW9+EhMT21c6cxJcef0MifkMeiIYpGnPA76i04udpneuHn0XJcZRD fe4iwiaSRKghTdmf48xyUc03liffTT4= -----END CERTIFICATE-----Generated at Fri Oct 24 13:47:36 2025 by rpki-client