$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa File: 1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa (raw, json) Hash identifier: xrblkhtpnBpdjkHHIZGQ1VkBl2+5v3CPzmipNzrT4cY= Subject key identifier: F8:42:E3:8A:2E:F7:F1:59:40:9D:19:26:95:B3:17:3D:B8:46:84:2B Certificate issuer: /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Certificate serial: 010D0C9F4328584AA85BB5D0418EF915452FAF80 Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 397472 IP address blocks: 23.132.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b5:d0:41:8e:f9:15:45:2f:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=85bf4e3e-4a19-4ee4-8586-e06be981290a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:36:8a:b8:a6:e9:ba:ef:bb:f0:4e:2c:55: 9a:5d:a2:4a:f6:90:70:70:1f:c2:72:b7:dd:f8:90: c2:e1:41:49:f4:63:47:11:86:f4:98:73:99:1b:e2: d6:79:2c:e1:9f:25:d2:d4:c8:b9:b7:df:9d:2c:17: 6a:ee:c7:6a:3a:d1:6f:52:8c:3e:e7:29:20:56:d3: 19:e5:39:65:f2:e6:88:b1:22:93:7f:c9:e8:a6:00: 27:0e:15:1d:fc:85:73:4a:94:09:dd:f0:c2:72:6c: 7f:09:41:f3:fe:dc:39:c6:a3:99:4e:2a:bd:ad:d9: 8f:b4:9e:f3:3d:9c:bd:e6:a7:26:00:69:c8:7a:d8: c8:0f:5b:f5:f9:19:df:7c:6a:69:83:24:30:c1:ac: 48:ce:53:24:65:10:ad:d9:03:07:d4:d2:36:4d:b5: 67:97:3b:ea:73:8c:40:36:78:1d:3b:30:bc:0c:f3: cb:64:09:63:60:ff:a0:a7:da:60:38:c3:f7:5e:86: ee:a8:22:65:71:ed:4a:df:8d:87:78:9f:8b:ae:7b: 95:61:cb:a0:15:6e:a7:56:b7:cc:fe:d6:96:c7:63: 85:f3:61:10:32:c7:6a:73:1d:f3:40:13:8a:b8:c1: 77:2b:43:fa:07:5a:1e:23:7f:f2:82:84:33:4e:c3: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:42:E3:8A:2E:F7:F1:59:40:9D:19:26:95:B3:17:3D:B8:46:84:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl X509v3 Authority Key Identifier: keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5e:46:51:8e:fd:38:dc:e6:19:e2:45:79:1c:33:18:15:43: 0b:9c:c5:75:23:b3:61:38:64:97:e6:8f:6d:6a:01:f4:29:0b: ec:5d:26:35:84:3a:b2:58:38:5c:72:20:35:26:85:f3:38:0d: 44:29:74:08:bb:37:d2:86:57:bc:e0:ee:e2:3b:3e:cc:bb:fb: ff:c2:8c:26:01:32:74:37:6e:d1:a8:23:99:52:15:3e:58:82: 9a:c9:43:70:3c:a1:16:6b:89:ea:25:9c:0a:bd:e2:6a:84:6a: ce:16:0f:dd:44:b9:38:53:c0:4c:14:6a:af:1f:7f:19:0b:c3: 4f:a7:40:1b:02:5f:d9:6d:ee:cc:6e:d4:82:6c:de:b8:fa:3a: c8:0e:61:12:5a:6f:e6:1e:7d:7c:3d:26:17:f5:bd:ee:2d:59: 11:62:2d:54:5f:51:54:75:dd:ca:84:3f:4c:18:4e:54:11:10: 7f:74:04:f0:c1:48:e9:df:96:5b:54:8f:71:3c:a9:5f:9f:a8: 45:f4:25:5d:cd:1a:37:a4:26:21:83:40:19:13:04:eb:44:64: a3:44:df:80:57:4f:cc:57:f1:12:e1:e9:48:5f:08:fb:0b:4d: a3:50:e6:2c:3c:b9:07:9f:95:e3:ed:1b:e4:fe:61:62:1b:df: 92:60:f7:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7XQQY75FUUvr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1 ZWE5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ODViZjRlM2UtNGExOS00ZWU0LTg1ODYtZTA2YmU5ODEyOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9I2irim6brvu/BOLFWaXaJK9pBwcB/Ccrfd +JDC4UFJ9GNHEYb0mHOZG+LWeSzhnyXS1Mi5t9+dLBdq7sdqOtFvUow+5ykgVtMZ 5Tll8uaIsSKTf8nopgAnDhUd/IVzSpQJ3fDCcmx/CUHz/tw5xqOZTiq9rdmPtJ7z PZy95qcmAGnIetjID1v1+RnffGppgyQwwaxIzlMkZRCt2QMH1NI2TbVnlzvqc4xA NngdOzC8DPPLZAljYP+gp9pgOMP3XobuqCJlce1K342HeJ+LrnuVYcugFW6nVrfM /taWx2OF82EQMsdqcx3zQBOKuMF3K0P6B1oeI3/ygoQzTsOB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhC44ou9/FZQJ0ZJpWzFz24RoQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MGJj YmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvMWExMTQyMzYtNTJkNS0z YTkyLThkZmEtOTVmZmJlOWJjMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzBiY2JkNjgtNDFkNi00YTVhLThk MjgtMWI5YTlhNGM1ZWE5LzcwYmNiZDY4LTQxZDYtNGE1YS04ZDI4LTFiOWE5YTRj NWVhOS5jcmwwHwYDVR0jBBgwFoAUqd9vVk8Se+zs7Vac35zUQ4hV9OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlh OWE0YzVlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAheRlGO/Tjc5hniRXkcMxgVQwucxXUjs2E4ZJfmj21qAfQpC+xdJjWE OrJYOFxyIDUmhfM4DUQpdAi7N9KGV7zg7uI7Psy7+//CjCYBMnQ3btGoI5lSFT5Y gprJQ3A8oRZrieolnAq94mqEas4WD91EuThTwEwUaq8ffxkLw0+nQBsCX9lt7sxu 1IJs3rj6OsgOYRJab+YefXw9Jhf1ve4tWRFiLVRfUVR13cqEP0wYTlQREH90BPDB SOnflltUj3E8qV+fqEX0JV3NGjekJiGDQBkTBOtEZKNE34BXT8xX8RLh6UhfCPsL TaNQ5iw8uQeflePtG+T+YWIb35Jg92Y= -----END CERTIFICATE-----Generated at Sun Aug 24 03:32:27 2025 by rpki-client