$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa File: eb082195-7fc4-3717-9a4e-cf41f2a75416.roa (raw, json) Hash identifier: DFSFit7MnUfSerAql583aPAi0TZ1HX1UViRgQI0dsPo= Subject key identifier: D7:53:31:C0:6C:2A:A7:6F:A8:D3:F4:A3:B4:44:2D:DA:28:5A:8E:F6 Certificate issuer: /CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4 Certificate serial: 010D0C9F4328584BA6679B289B7DB56564990480 Authority key identifier: 69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 63023 IP address blocks: 23.138.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9b:28:9b:7d:b5:65:64:99:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=9ecce59f-fa8a-44f4-89da-f80849fc3bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:47:ce:a4:74:d1:43:90:f3:8e:a2:b4:5d: 8c:70:75:1d:a5:8a:42:8d:d0:4b:ea:80:d5:40:e4: 05:81:04:17:1f:f1:dd:e7:1f:5d:8d:1d:64:6f:b7: 5d:1a:37:96:ee:74:48:1b:6f:c3:92:1a:34:b0:54: ab:7d:5c:ab:4a:48:ea:20:fe:b3:33:b8:84:bf:03: c3:51:3d:5e:b6:4f:ba:d1:d3:1e:42:11:bc:8d:78: 25:97:cc:9e:f7:9a:2a:54:55:01:e6:14:cb:8d:b8: ef:82:2c:ce:97:4d:0d:c2:c3:53:4f:ee:4b:8f:c6: 34:9f:90:d7:48:fc:82:a2:a0:5d:53:49:41:ca:86: 89:d6:bd:2b:18:80:20:9e:18:2f:fb:09:e6:e6:62: 8b:c4:48:1b:5f:c0:4b:1f:61:f4:ae:b3:be:44:13: 51:68:90:03:9a:4b:51:ef:9a:27:7e:2a:b0:2b:83: d3:9d:d3:87:ac:68:a3:33:e3:50:5d:33:e8:74:ba: 8a:e9:a1:3d:2d:f6:06:23:bf:4f:78:12:86:81:de: 51:e8:41:4f:7b:ae:69:bd:7f:51:45:cc:92:2f:f7: 7f:3b:80:4d:06:75:a7:3b:9f:bd:99:6d:a6:a5:0c: a7:89:8c:b7:55:9f:46:e6:ed:66:27:0a:97:58:4e: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:31:C0:6C:2A:A7:6F:A8:D3:F4:A3:B4:44:2D:DA:28:5A:8E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl X509v3 Authority Key Identifier: keyid:69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer sbgp-ipAddrBlock: critical IPv4: 23.138.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:52:0e:9e:70:d6:a8:13:2e:ec:70:7a:27:78:a4:4f:9b:40: a6:f4:0f:e9:73:d4:9f:c5:81:af:5a:8d:95:c1:1d:14:86:bf: 78:8d:dc:3c:7d:f7:cd:86:82:62:86:37:a4:33:6e:ac:61:54: c2:3a:10:3e:72:d5:82:cb:d7:77:bf:9f:e6:1c:f0:f3:9c:ba: 1c:8f:15:ec:6f:34:2c:93:a7:08:6b:89:e4:f3:d3:06:24:c7: 20:17:81:a7:70:3a:f7:5f:52:a8:f4:c0:07:70:38:0e:bd:49: 44:f4:4b:df:d1:0f:50:13:00:fc:ea:50:bb:d1:ab:37:3c:d5: 0d:76:61:4f:29:08:07:cc:cb:87:bd:79:04:32:ae:26:4a:48: c5:a2:4e:0b:d7:8b:fb:0b:e4:31:d6:f0:b4:cc:b2:99:ac:fa: b2:67:02:b5:cf:3a:6a:0a:bb:67:99:bb:9e:f1:60:a5:06:2a: 96:cd:b2:8d:eb:79:23:3f:0a:66:b9:39:ce:c3:21:ad:ff:b6: 91:b2:fd:56:29:0c:f3:31:b4:1c:ec:77:2e:d1:aa:3f:39:2e: 72:00:ed:60:de:db:28:ac:80:90:91:b9:36:0e:82:eb:b6:e3: 9b:9a:c0:da:09:0f:62:b0:a2:dc:d5:90:b6:5c:25:f9:ba:35: cc:a0:fb:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ5som321ZWSZBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxZjAzNDktMzA5MC00N2U4LThlYTEtNGVkY2MyZTU3 MGQ0MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OWVjY2U1OWYtZmE4YS00NGY0LTg5ZGEtZjgwODQ5ZmMzYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HBHzqR00UOQ846itF2McHUdpYpCjdBL6oDV QOQFgQQXH/Hd5x9djR1kb7ddGjeW7nRIG2/Dkho0sFSrfVyrSkjqIP6zM7iEvwPD UT1etk+60dMeQhG8jXgll8ye95oqVFUB5hTLjbjvgizOl00NwsNTT+5Lj8Y0n5DX SPyCoqBdU0lByoaJ1r0rGIAgnhgv+wnm5mKLxEgbX8BLH2H0rrO+RBNRaJADmktR 75onfiqwK4PTndOHrGijM+NQXTPodLqK6aE9LfYGI79PeBKGgd5R6EFPe65pvX9R RcySL/d/O4BNBnWnO5+9mW2mpQyniYy3VZ9G5u1mJwqXWE7ouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdTMcBsKqdvqNP0o7RELdooWo72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZTFm MDM0OS0zMDkwLTQ3ZTgtOGVhMS00ZWRjYzJlNTcwZDQvZWIwODIxOTUtN2ZjNC0z NzE3LTlhNGUtY2Y0MWYyYTc1NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2UxZjAzNDktMzA5MC00N2U4LThl YTEtNGVkY2MyZTU3MGQ0L2NlMWYwMzQ5LTMwOTAtNDdlOC04ZWExLTRlZGNjMmU1 NzBkNC5jcmwwHwYDVR0jBBgwFoAUaeMwyJUjR/hekTmKd1o4bR76sg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZTFmMDM0OS0zMDkwLTQ3ZTgtOGVhMS00ZWRj YzJlNTcwZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4rkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5SDp5w1qgTLuxweid4pE+bQKb0D+lz1J/Fga9ajZXBHRSGv3iN3Dx9 982GgmKGN6QzbqxhVMI6ED5y1YLL13e/n+Yc8POcuhyPFexvNCyTpwhrieTz0wYk xyAXgadwOvdfUqj0wAdwOA69SUT0S9/RD1ATAPzqULvRqzc81Q12YU8pCAfMy4e9 eQQyriZKSMWiTgvXi/sL5DHW8LTMspms+rJnArXPOmoKu2eZu57xYKUGKpbNso3r eSM/Cma5Oc7DIa3/tpGy/VYpDPMxtBzsdy7Rqj85LnIA7WDe2yisgJCRuTYOguu2 45uawNoJD2KwotzVkLZcJfm6Ncyg+1g= -----END CERTIFICATE-----Generated at Tue Oct 28 13:15:09 2025 by rpki-client