$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/596e1340-11e0-3198-8cfa-8f9daabdf7fe.roa File: 596e1340-11e0-3198-8cfa-8f9daabdf7fe.roa (raw, json) Hash identifier: aNLsOS7JYdCKKJaLDMrULEgU+YLoUafzOVtGwBMtT2g= Subject key identifier: D0:A9:4E:91:D2:11:D4:96:E8:8E:01:87:FA:90:96:8B:A8:BA:18:3C Certificate issuer: /CN=8b56caea-2136-4342-baff-6f31268d4cc4 Certificate serial: 010D0C9F4328584B6631ECEE8938CD55CBE43900 Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/596e1340-11e0-3198-8cfa-8f9daabdf7fe.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 49585 IP address blocks: 23.146.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ec:ee:89:38:cd:55:cb:e4:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=a21603a0-189a-416e-9428-f45462d81bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:a2:cc:7d:72:05:8c:8a:93:a0:4c:08:a4: 0d:ae:30:c3:f8:f1:2c:89:f9:7b:d9:1d:b5:2c:58: 47:e2:85:df:4a:33:74:09:57:ad:4a:fb:ad:4a:e3: 43:13:25:5e:58:c9:05:78:6a:55:eb:05:bf:68:b9: ae:96:d6:e7:1c:9b:08:14:17:79:ac:8e:f7:4e:b0: 00:70:4e:b5:cc:65:03:be:c9:b4:95:bb:51:3a:1b: a4:0d:6c:ed:2d:26:f0:31:31:af:1c:83:90:1e:55: 49:a3:de:be:49:d7:c8:d9:c1:d9:01:d0:a9:6d:0c: 14:05:bb:eb:c7:54:22:ef:61:a4:56:fc:87:30:5d: 28:7a:d7:14:ec:99:bb:f3:da:66:bc:eb:f4:ef:76: 18:d9:5c:3e:27:e0:24:ce:73:89:43:58:25:3a:dd: 99:6d:7f:b7:09:a6:4c:19:19:a2:11:e8:03:06:a8: d3:94:57:2d:61:d4:17:f6:d4:c3:4b:ec:fb:8d:c0: 13:de:dd:68:97:86:98:9e:71:31:86:4e:00:9b:6e: 98:32:d9:b8:b9:f0:c9:93:3f:63:49:cc:ae:24:5d: ff:ac:60:de:54:65:f9:ff:1e:73:2b:28:3c:a1:ed: 47:c9:3e:12:53:b5:1b:2d:8f:bf:0f:03:a5:e9:29: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:4E:91:D2:11:D4:96:E8:8E:01:87:FA:90:96:8B:A8:BA:18:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/596e1340-11e0-3198-8cfa-8f9daabdf7fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl X509v3 Authority Key Identifier: keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer sbgp-ipAddrBlock: critical IPv4: 23.146.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d6:ac:a2:9a:76:4c:98:6c:86:60:be:7a:8a:29:4a:b3:39: e1:1b:31:22:1b:9b:93:0e:3e:05:63:f1:4b:99:f2:e1:bd:5b: 3c:5d:ce:b9:ae:f1:18:88:44:8d:d0:fd:24:c1:cb:47:22:46: d8:2e:20:1e:d6:81:a1:08:98:eb:8e:19:c1:31:7b:36:56:ad: f7:fa:d7:19:89:45:bd:12:e0:15:29:23:3e:be:e6:b9:39:a6: 5f:ae:9e:d0:4c:5c:8f:d1:0c:da:84:46:9e:b3:51:d3:3a:55: 95:65:86:2d:4a:18:77:23:fa:30:c1:ec:af:09:a3:72:38:1a: 86:96:f7:58:f7:44:f4:a8:4a:cc:8f:c3:4d:d2:09:d5:ee:84: 81:64:d1:92:d2:af:e3:52:7a:b0:00:e8:81:65:1b:23:3f:76: 43:44:d0:f9:ee:d3:d6:6b:ab:0b:18:14:e1:f7:1a:b6:e9:35: b0:ba:b2:08:f5:82:19:83:9f:bc:22:4e:fc:8b:9a:9d:09:9f: 2e:62:14:a1:4f:5d:d8:f3:e7:16:b0:7e:c0:63:c8:39:3a:02: 45:29:26:cb:9b:78:f1:ac:68:1a:41:52:18:07:3f:90:aa:71: a7:fd:f0:9d:30:0e:ff:d7:02:2d:52:68:b6:bd:61:16:f2:0a: c7:c3:7e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMezuiTjNVcvkOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0 Y2M0MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YTIxNjAzYTAtMTg5YS00MTZlLTk0MjgtZjQ1NDYyZDgxYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/iizH1yBYyKk6BMCKQNrjDD+PEsifl72R21 LFhH4oXfSjN0CVetSvutSuNDEyVeWMkFeGpV6wW/aLmultbnHJsIFBd5rI73TrAA cE61zGUDvsm0lbtROhukDWztLSbwMTGvHIOQHlVJo96+SdfI2cHZAdCpbQwUBbvr x1Qi72GkVvyHMF0oetcU7Jm789pmvOv073YY2Vw+J+AkznOJQ1glOt2ZbX+3CaZM GRmiEegDBqjTlFctYdQX9tTDS+z7jcAT3t1ol4aYnnExhk4Am26YMtm4ufDJkz9j ScyuJF3/rGDeVGX5/x5zKyg8oe1HyT4SU7UbLY+/DwOl6Sm0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCpTpHSEdSW6I4Bh/qQlououhg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjU2 Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvNTk2ZTEzNDAtMTFlMC0z MTk4LThjZmEtOGY5ZGFhYmRmN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGI1NmNhZWEtMjEzNi00MzQyLWJh ZmYtNmYzMTI2OGQ0Y2M0LzhiNTZjYWVhLTIxMzYtNDM0Mi1iYWZmLTZmMzEyNjhk NGNjNC5jcmwwHwYDVR0jBBgwFoAUW5RpPQjOSIIV5jmWcSEjDZCow90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMx MjY4ZDRjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnWrKKadkyYbIZgvnqKKUqzOeEbMSIbm5MOPgVj8UuZ8uG9Wzxdzrmu 8RiIRI3Q/STBy0ciRtguIB7WgaEImOuOGcExezZWrff61xmJRb0S4BUpIz6+5rk5 pl+untBMXI/RDNqERp6zUdM6VZVlhi1KGHcj+jDB7K8Jo3I4GoaW91j3RPSoSsyP w03SCdXuhIFk0ZLSr+NSerAA6IFlGyM/dkNE0Pnu09ZrqwsYFOH3GrbpNbC6sgj1 ghmDn7wiTvyLmp0Jny5iFKFPXdjz5xawfsBjyDk6AkUpJsubePGsaBpBUhgHP5Cq caf98J0wDv/XAi1SaLa9YRbyCsfDfos= -----END CERTIFICATE-----Generated at Mon Oct 27 10:01:01 2025 by rpki-client