$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa File: 142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa (raw, json) Hash identifier: ywXBwnbr16FwuWfgdthXh2DrXp//cJO5lj4xvWQ4WQo= Subject key identifier: 4A:EB:24:FC:60:6E:90:58:7E:A1:62:DD:0B:79:A5:53:0F:4B:6D:9E Certificate issuer: /CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Certificate serial: 010D0C9F4328584B4E77080A340E9957CF7A5F00 Authority key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 62668 IP address blocks: 23.160.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:08:0a:34:0e:99:57:cf:7a:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7e7c9b16-0dd5-4ca4-ba10-50039a02f0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:62:51:60:98:88:d2:fe:3a:42:04:b8:96: 4c:40:37:75:65:2d:3d:12:96:68:81:e7:33:7d:b6: 3c:32:84:a3:0f:5d:4f:49:30:ee:75:59:ee:b4:d8: a9:f1:37:c5:6c:c7:9a:a3:69:b3:e7:6c:b0:0f:db: d1:1c:df:81:c2:49:e3:19:6f:fc:15:0b:82:1b:85: b6:8e:ac:22:d4:5d:4e:ab:ca:40:85:c0:a2:70:08: ca:49:47:06:16:93:aa:d9:4b:0e:9d:c4:4c:3f:42: 15:fd:17:71:f6:fd:09:f8:20:9e:08:5a:8d:c2:78: c1:04:41:09:28:9c:88:ba:cf:0a:b4:3e:79:a7:74: ea:b6:bc:c4:28:60:8e:7f:e3:c7:58:7b:76:8a:54: e6:fa:91:36:42:43:63:25:a2:a8:c8:d8:22:82:9b: 14:a7:5e:6b:1b:d3:c8:ea:3c:3c:60:91:79:96:3e: 49:73:46:55:25:e3:a7:60:ca:5a:4e:6c:8d:0e:ba: 7f:48:b9:fd:f8:a2:98:b9:ac:cf:4d:cb:c6:39:88: e0:c1:6e:7e:5d:97:0c:05:2d:d7:08:71:cf:72:59: 10:71:df:83:8f:8e:52:a7:dc:82:23:e3:7e:81:b3: 4f:ea:a3:91:25:8f:ba:dd:d0:67:54:99:ce:d8:7a: 83:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EB:24:FC:60:6E:90:58:7E:A1:62:DD:0B:79:A5:53:0F:4B:6D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/142958a0-84bf-306b-98e6-8ed7f84f6b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.crl X509v3 Authority Key Identifier: keyid:CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer sbgp-ipAddrBlock: critical IPv4: 23.160.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:21:01:b1:1f:be:10:be:1a:e0:03:37:1e:a4:c4:be:b3:cb: 2f:13:9f:1b:28:ce:cc:d0:72:10:f1:db:14:87:d7:97:ec:4e: 99:73:78:9a:ff:77:84:2f:10:61:50:6e:c3:b4:ab:b7:37:5f: 45:ca:0f:6e:f8:2e:9b:44:b1:32:90:11:a2:9c:74:9e:13:14: 67:1d:08:9f:ed:a0:78:90:a6:49:5f:11:44:69:2c:db:87:7e: e3:b6:5e:70:46:6b:ce:2d:f6:0c:b6:de:57:be:50:cf:0c:57: fd:5b:89:24:7a:f1:01:83:5a:b0:ad:a4:c9:c1:3e:41:fb:bd: 70:3b:0f:9b:b8:fd:e0:68:d2:2e:e0:52:f8:3a:57:b4:fc:e7: d1:a9:19:e9:10:cd:64:47:c5:ec:98:64:a6:1e:7a:66:50:0f: d6:b8:c8:ef:b7:4f:d5:b8:eb:67:ca:f1:66:f6:c9:dc:13:16: a1:59:ae:10:b0:c9:1d:98:d5:6e:1c:97:8d:42:2c:82:a9:48: 0c:92:42:d2:b7:ea:20:43:99:05:45:14:e4:51:da:13:83:d0: f3:ed:4f:d4:d3:5c:78:bf:ca:59:f5:b1:79:91:9c:d2:1a:c6: ad:7d:51:36:8f:08:af:84:c4:3d:d9:eb:3b:99:01:ed:d6:df: 06:c4:d4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwgKNA6ZV896XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThi ZDgxMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk N2U3YzliMTYtMGRkNS00Y2E0LWJhMTAtNTAwMzlhMDJmMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2piUWCYiNL+OkIEuJZMQDd1ZS09EpZogecz fbY8MoSjD11PSTDudVnutNip8TfFbMeao2mz52ywD9vRHN+BwknjGW/8FQuCG4W2 jqwi1F1Oq8pAhcCicAjKSUcGFpOq2UsOncRMP0IV/Rdx9v0J+CCeCFqNwnjBBEEJ KJyIus8KtD55p3TqtrzEKGCOf+PHWHt2ilTm+pE2QkNjJaKoyNgigpsUp15rG9PI 6jw8YJF5lj5Jc0ZVJeOnYMpaTmyNDrp/SLn9+KKYuazPTcvGOYjgwW5+XZcMBS3X CHHPclkQcd+Dj45Sp9yCI+N+gbNP6qORJY+63dBnVJnO2HqDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErrJPxgbpBYfqFi3Qt5pVMPS22eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODU1 OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvMTQyOTU4YTAtODRiZi0z MDZiLTk4ZTYtOGVkN2Y4NGY2YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTg1NTkyYjktOGU3Yi00Y2NiLTg3 ZGMtZTFkZTJlOThiZDgxLzk4NTU5MmI5LThlN2ItNGNjYi04N2RjLWUxZGUyZTk4 YmQ4MS5jcmwwHwYDVR0jBBgwFoAUy0A2wcrf/oqJS/RLPYQLTYZ/2xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRl MmU5OGJkODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQhAbEfvhC+GuADNx6kxL6zyy8TnxsozszQchDx2xSH15fsTplzeJr/ d4QvEGFQbsO0q7c3X0XKD274LptEsTKQEaKcdJ4TFGcdCJ/toHiQpklfEURpLNuH fuO2XnBGa84t9gy23le+UM8MV/1biSR68QGDWrCtpMnBPkH7vXA7D5u4/eBo0i7g Uvg6V7T859GpGekQzWRHxeyYZKYeemZQD9a4yO+3T9W462fK8Wb2ydwTFqFZrhCw yR2Y1W4cl41CLIKpSAySQtK36iBDmQVFFORR2hOD0PPtT9TTXHi/yln1sXmRnNIa xq19UTaPCK+ExD3Z6zuZAe3W3wbE1J8= -----END CERTIFICATE-----Generated at Thu Oct 30 20:23:26 2025 by rpki-client