$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa File: bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa (raw, json) Hash identifier: 3scdkfPB/oUbVLH6K49wI9AOsO1s89PIiCjxb6ssp90= Subject key identifier: 90:BF:F6:2F:A6:C2:0C:E9:3A:B1:CD:8E:0C:C9:45:6F:0C:70:85:32 Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Certificate serial: 010D0C9F4328584BA9EC219B3E13E9942445C3C0 Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa Signing time: Mon 27 Oct 2025 19:15:05 +0000 ROA not before: Mon 27 Oct 2025 19:15:05 +0000 ROA not after: Sun 25 Jan 2026 20:15:05 +0000 asID: 46687 IP address blocks: 23.226.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:ec:21:9b:3e:13:e9:94:24:45:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Validity Not Before: Oct 27 19:15:05 2025 GMT Not After : Jan 25 20:15:05 2026 GMT Subject: CN=4d21edb7-c6f0-4b7f-9f5d-69dd06010a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:89:fd:9e:70:9f:a3:82:3b:8d:ba:6f:01: 06:36:5e:12:53:e1:7f:f1:7a:69:84:3f:67:03:05: 66:6c:03:43:3d:5d:37:8a:44:f4:fd:84:70:11:68: f7:20:77:5a:aa:12:36:78:6a:b6:c4:ce:3b:c2:d9: fc:7a:13:3f:fe:6f:92:7e:72:a2:63:a6:21:9c:57: 97:3b:4a:48:63:92:ec:f6:3b:2d:1a:67:c7:7f:59: f1:92:90:2d:85:27:9a:d1:83:6c:09:f1:b0:81:98: 6c:da:78:f8:6d:cc:ac:a9:6e:76:fd:d7:eb:9e:c1: 31:24:64:e5:24:a2:d2:73:49:69:70:eb:c9:2a:bf: 7a:38:34:f0:76:86:e2:e2:0b:80:da:2d:5d:8a:2f: ef:af:75:8f:a9:dd:21:cf:a9:80:6a:c5:50:dc:cb: a8:43:64:ba:70:61:17:03:b1:36:8c:91:e4:ba:a2: 56:1b:3f:bc:74:7d:69:a8:20:f9:d6:06:89:de:92: 46:dc:2f:49:fe:bc:ea:08:b1:2a:16:73:dc:81:1d: 92:24:7b:e2:73:f0:1f:99:9a:68:38:0f:79:f3:ed: 3c:43:b1:a1:fa:79:59:47:6d:85:85:41:a0:ea:00: db:e9:b3:ac:fc:e5:f3:bd:4b:0c:35:b7:c4:b5:90: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:F6:2F:A6:C2:0C:E9:3A:B1:CD:8E:0C:C9:45:6F:0C:70:85:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/bab89f15-2fa6-34ec-bee7-40c71dbd99b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl X509v3 Authority Key Identifier: keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer sbgp-ipAddrBlock: critical IPv4: 23.226.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8b:b8:86:c0:3a:33:97:f7:73:e1:0a:0c:e5:a9:9d:d4:57: ea:b3:64:61:cb:49:75:7f:2a:df:ab:45:21:cb:12:ce:2c:03: 4f:de:dd:7f:fd:38:c0:1d:21:87:14:35:2d:76:90:69:ea:0e: 61:49:cb:61:99:f4:01:7c:77:31:e0:c1:13:d6:54:6f:d2:15: 38:e1:c9:ab:11:ce:57:49:e2:89:7a:6c:dd:0b:e5:1f:cb:93: 80:1b:8a:dc:33:09:93:e5:6f:3a:df:13:d1:62:71:ab:19:86: b7:f9:8e:13:bc:0f:1f:bd:b3:c1:a9:19:11:70:c1:06:ea:0b: 16:a0:a6:05:89:2f:8f:7c:c0:0d:93:8c:e8:3a:88:b4:00:70: 59:f0:be:fe:6e:e3:8f:bd:44:66:80:4e:8d:e7:b0:55:01:40: 2d:00:b6:e3:44:7f:60:05:32:d3:db:b3:1e:1a:c9:23:2c:bf: e1:aa:ca:cb:e6:34:56:89:14:6f:ba:96:e2:c3:4f:cf:82:b7: 9a:f9:49:bd:ca:24:96:ea:09:f9:4c:e6:3b:66:ae:c6:56:ea: a7:5f:84:d7:a8:64:49:bb:00:94:d5:04:00:d0:19:26:1b:8a: f3:49:b1:2a:c9:a8:44:04:28:7c:d8:10:c0:b4:fc:10:8f:19: 4e:9f:9d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEup7CGbPhPplCRFw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm YTg0MB4XDTI1MTAyNzE5MTUwNVoXDTI2MDEyNTIwMTUwNVowLzEtMCsGA1UEAxMk NGQyMWVkYjctYzZmMC00YjdmLTlmNWQtNjlkZDA2MDEwYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SWJ/Z5wn6OCO426bwEGNl4SU+F/8XpphD9n AwVmbANDPV03ikT0/YRwEWj3IHdaqhI2eGq2xM47wtn8ehM//m+SfnKiY6YhnFeX O0pIY5Ls9jstGmfHf1nxkpAthSea0YNsCfGwgZhs2nj4bcysqW52/dfrnsExJGTl JKLSc0lpcOvJKr96ODTwdobi4guA2i1dii/vr3WPqd0hz6mAasVQ3MuoQ2S6cGEX A7E2jJHkuqJWGz+8dH1pqCD51gaJ3pJG3C9J/rzqCLEqFnPcgR2SJHvic/AfmZpo OA958+08Q7Gh+nlZR22FhUGg6gDb6bOs/OXzvUsMNbfEtZAAOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC/9i+mwgzpOrHNjgzJRW8McIUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvYmFiODlmMTUtMmZhNi0z NGVjLWJlZTctNDBjNzFkYmQ5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi NDI1MGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+JgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCLuIbAOjOX93PhCgzlqZ3UV+qzZGHLSXV/Kt+rRSHLEs4sA0/e3X/9 OMAdIYcUNS12kGnqDmFJy2GZ9AF8dzHgwRPWVG/SFTjhyasRzldJ4ol6bN0L5R/L k4AbitwzCZPlbzrfE9FicasZhrf5jhO8Dx+9s8GpGRFwwQbqCxagpgWJL498wA2T jOg6iLQAcFnwvv5u44+9RGaATo3nsFUBQC0AtuNEf2AFMtPbsx4aySMsv+Gqysvm NFaJFG+6luLDT8+Ct5r5Sb3KJJbqCflM5jtmrsZW6qdfhNeoZEm7AJTVBADQGSYb ivNJsSrJqEQEKHzYEMC0/BCPGU6fnfU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:14:05 2025 by rpki-client