$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/48e0bcf3-cc86-3d35-8969-d593005f4234.roa File: 48e0bcf3-cc86-3d35-8969-d593005f4234.roa (raw, json) Hash identifier: ElK93dd0p0p6G6R6fkc9UbtmIl0zzcb4hUJb8eGuz6k= Subject key identifier: 2A:C2:8B:0E:26:A9:85:AF:00:49:8A:A8:5D:12:6F:BD:DA:08:7A:A2 Certificate issuer: /CN=c3f4e155-f08b-44de-9ea6-bd39027398ef Certificate serial: 010D0C9F4328584B998F1A71C9FB5F060915C880 Authority key identifier: DE:E2:66:78:0C:37:EF:F3:F7:CA:E9:D3:68:11:C4:E6:A3:86:F6:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/48e0bcf3-cc86-3d35-8969-d593005f4234.roa Signing time: Tue 21 Oct 2025 22:34:43 +0000 ROA not before: Tue 21 Oct 2025 22:34:43 +0000 ROA not after: Mon 19 Jan 2026 23:34:43 +0000 asID: 400899 IP address blocks: 23.148.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/c3f4e155-f08b-44de-9ea6-bd39027398ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/c3f4e155-f08b-44de-9ea6-bd39027398ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:8f:1a:71:c9:fb:5f:06:09:15:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f4e155-f08b-44de-9ea6-bd39027398ef Validity Not Before: Oct 21 22:34:43 2025 GMT Not After : Jan 19 23:34:43 2026 GMT Subject: CN=ed3819cf-39f6-41d1-8e7b-f156d86d3b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:11:6f:0a:be:b1:8e:ac:8a:2a:cb:02:8b: 5a:ec:61:45:e3:bf:cc:5b:d7:7c:42:26:04:97:8b: 31:87:50:0c:50:5c:53:dd:97:37:98:0e:47:f3:bb: b2:70:8d:85:03:a0:a8:e8:b4:69:3b:ff:4f:04:2d: ab:00:e5:c8:9d:06:19:b6:12:a6:1d:71:fc:d2:68: 7c:cf:62:d4:0c:57:d3:41:d1:57:85:30:1f:20:f0: 96:2a:4f:50:cf:18:b0:b2:b6:44:18:4a:f6:3b:7e: 9b:04:8e:8c:86:24:97:b2:16:53:fc:5a:1a:81:88: 21:01:b5:9e:82:5f:ae:46:37:e3:83:a9:7a:e7:57: 13:c5:b2:78:8b:aa:84:12:7c:89:d6:b4:05:08:c9: fc:d4:63:76:9b:71:b7:6b:24:5b:49:d2:39:ff:32: b2:53:9c:24:a0:c5:15:e1:e5:64:fb:dd:08:09:06: 0a:06:4b:fa:f1:5c:02:b9:a4:93:54:7c:00:21:a4: 6c:8f:37:f3:07:cd:bd:53:95:67:01:da:04:a9:ac: 27:0f:1d:a6:22:01:0e:dc:e2:a5:11:cf:26:ac:4e: 88:05:43:99:b0:89:ac:9c:97:b8:eb:40:ba:50:82: d6:a6:f0:43:cd:93:2d:3f:b8:01:0c:01:f9:e8:3e: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:8B:0E:26:A9:85:AF:00:49:8A:A8:5D:12:6F:BD:DA:08:7A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/48e0bcf3-cc86-3d35-8969-d593005f4234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/c3f4e155-f08b-44de-9ea6-bd39027398ef.crl X509v3 Authority Key Identifier: keyid:DE:E2:66:78:0C:37:EF:F3:F7:CA:E9:D3:68:11:C4:E6:A3:86:F6:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef.cer sbgp-ipAddrBlock: critical IPv4: 23.148.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:18:5d:d7:b9:5d:8f:36:88:47:ad:35:a4:17:20:c2:5b:37: ab:02:be:e5:d3:56:4e:bb:12:0e:b1:2f:fb:74:27:8b:02:28: de:3b:ef:64:9b:0c:93:66:2f:66:f1:b4:c0:a5:da:a3:5b:b9: 50:98:0d:61:89:13:d8:50:02:ee:f1:03:e7:ef:05:15:f7:5c: f9:15:34:f8:e3:96:12:09:fc:4a:70:ed:03:a5:7c:c6:11:1b: e3:b1:12:59:af:0e:e2:86:06:33:3d:21:1a:0b:a4:84:d2:b0: 5e:68:34:bc:23:72:f1:e5:41:ba:f7:9f:bc:bd:91:2e:19:9d: 37:4b:58:e1:a0:b9:8b:e5:0a:83:90:b9:ce:1f:b7:c6:11:7f: b0:2e:89:c2:a4:e2:e0:cd:9a:0a:c0:12:2a:10:a8:d9:f3:50: 08:9d:c7:a1:46:fc:e6:de:29:1d:f4:bc:54:4b:1d:4d:15:03: 2d:78:20:57:54:16:d0:a5:5a:d1:ca:26:79:25:80:21:5f:f7: b8:f2:84:fd:4b:d4:9d:5b:c3:42:9e:7a:f3:08:b5:0d:bb:24: c6:7f:49:43:c9:97:e0:1c:f4:65:e1:0d:9b:e9:ba:78:0a:75: 25:7d:84:81:43:7f:3c:7a:0e:39:90:a1:51:97:02:81:24:0d: 27:d7:f4:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZjxpxyftfBgkVyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmNGUxNTUtZjA4Yi00NGRlLTllYTYtYmQzOTAyNzM5 OGVmMB4XDTI1MTAyMTIyMzQ0M1oXDTI2MDExOTIzMzQ0M1owLzEtMCsGA1UEAxMk ZWQzODE5Y2YtMzlmNi00MWQxLThlN2ItZjE1NmQ4NmQzYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVERbwq+sY6siirLAota7GFF47/MW9d8QiYE l4sxh1AMUFxT3Zc3mA5H87uycI2FA6Co6LRpO/9PBC2rAOXInQYZthKmHXH80mh8 z2LUDFfTQdFXhTAfIPCWKk9QzxiwsrZEGEr2O36bBI6MhiSXshZT/FoagYghAbWe gl+uRjfjg6l651cTxbJ4i6qEEnyJ1rQFCMn81GN2m3G3ayRbSdI5/zKyU5wkoMUV 4eVk+90ICQYKBkv68VwCuaSTVHwAIaRsjzfzB829U5VnAdoEqawnDx2mIgEO3OKl Ec8mrE6IBUOZsImsnJe460C6UILWpvBDzZMtP7gBDAH56D42PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrCiw4mqYWvAEmKqF0Sb73aCHqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jM2Y0 ZTE1NS1mMDhiLTQ0ZGUtOWVhNi1iZDM5MDI3Mzk4ZWYvNDhlMGJjZjMtY2M4Ni0z ZDM1LTg5NjktZDU5MzAwNWY0MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzNmNGUxNTUtZjA4Yi00NGRlLTll YTYtYmQzOTAyNzM5OGVmL2MzZjRlMTU1LWYwOGItNDRkZS05ZWE2LWJkMzkwMjcz OThlZi5jcmwwHwYDVR0jBBgwFoAU3uJmeAw37/P3yunTaBHE5qOG9j4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jM2Y0ZTE1NS1mMDhiLTQ0ZGUtOWVhNi1iZDM5 MDI3Mzk4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQYXde5XY82iEetNaQXIMJbN6sCvuXTVk67Eg6xL/t0J4sCKN4772Sb DJNmL2bxtMCl2qNbuVCYDWGJE9hQAu7xA+fvBRX3XPkVNPjjlhIJ/Epw7QOlfMYR G+OxElmvDuKGBjM9IRoLpITSsF5oNLwjcvHlQbr3n7y9kS4ZnTdLWOGguYvlCoOQ uc4ft8YRf7AuicKk4uDNmgrAEioQqNnzUAidx6FG/ObeKR30vFRLHU0VAy14IFdU FtClWtHKJnklgCFf97jyhP1L1J1bw0KeevMItQ27JMZ/SUPJl+Ac9GXhDZvpungK dSV9hIFDfzx6DjmQoVGXAoEkDSfX9AU= -----END CERTIFICATE-----Generated at Tue Oct 28 05:17:37 2025 by rpki-client