$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa File: 1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa (raw, json) Hash identifier: tYuR7zDq1Qb0rUKWpz+/4ATxXhmGJEIqDH4x+p8vIPw= Subject key identifier: 23:40:C9:C4:53:A4:F5:60:5D:42:9F:B0:89:3B:06:55:1D:FD:A9:50 Certificate issuer: /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Certificate serial: 010D0C9F4328584B8917784010A2DF0794EAB4C0 Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 397472 IP address blocks: 23.132.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:78:40:10:a2:df:07:94:ea:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=2580d259-e03b-4364-8880-881bc065db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:91:e1:4f:10:35:c2:d0:e6:c0:78:ac:ae: 3a:52:e9:c8:1b:d8:b4:00:a9:8c:65:09:53:58:ba: 20:f5:33:27:0a:d5:de:70:95:db:8a:4a:3b:9f:56: d5:e4:f6:3b:d5:94:2c:d6:04:26:2e:81:fe:ef:0c: a8:41:97:28:bb:11:19:36:4e:33:be:40:da:f1:a2: a8:af:67:a4:91:aa:d8:4f:aa:21:44:6f:13:51:b0: 5b:ce:6b:77:c9:4e:73:2f:81:1a:3e:f6:48:08:10: 6c:32:da:c5:d7:d0:24:16:54:05:9c:da:e3:2c:f1: 27:dc:c4:6f:2c:9e:5d:07:93:35:e7:6b:c6:44:40: 0c:50:4e:fc:f0:01:f3:36:23:0a:03:b2:c8:69:ac: ed:ad:ce:70:67:21:42:22:ec:91:de:eb:dc:63:3b: 3a:b0:b6:4d:8b:6c:b9:2c:50:8e:09:8c:67:c1:50: 92:25:2f:14:a0:a6:85:35:bd:60:91:0f:ca:63:e2: 14:97:97:a5:84:0f:63:0d:08:dc:5e:4e:50:c5:3e: 7a:ea:4d:53:c9:7c:f6:80:24:06:b3:b0:bf:73:50: 1a:1d:68:5c:26:0c:18:9f:ca:b4:04:e2:09:b7:4f: 70:7d:48:ea:5f:d5:08:e2:d0:c2:35:4a:47:1b:9c: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:C9:C4:53:A4:F5:60:5D:42:9F:B0:89:3B:06:55:1D:FD:A9:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl X509v3 Authority Key Identifier: keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a9:11:24:91:e5:31:01:f6:7e:18:03:96:ae:22:d6:73:44: 86:c5:9e:c7:97:cb:5d:ee:a2:36:8e:c6:23:32:33:48:88:39: 7e:10:b2:d0:74:f5:c4:98:9e:76:c7:ad:b8:fa:c2:90:86:98: 6e:59:7e:69:7a:6a:5d:a3:ec:81:39:48:24:0e:48:dd:a1:26: 22:32:47:58:19:0e:2d:fc:c4:5c:e0:ae:4a:75:d0:e1:ac:88: b5:13:4a:c7:39:4b:16:42:a2:7d:ea:ce:78:f2:4d:d9:70:dd: 4e:d6:85:87:a5:19:55:71:1d:4e:e0:88:f0:11:b6:bc:2a:4e: 3b:83:a8:3c:a7:35:85:71:4d:4f:e8:88:d4:84:22:b5:ac:0c: 28:54:79:34:96:8a:32:f7:63:54:a1:13:9a:5b:e1:46:da:26: bd:16:58:34:c7:19:1f:9f:34:72:8c:22:2a:3c:cc:3a:4a:5a: 46:09:06:62:4a:dc:25:e9:37:61:5f:7a:ae:13:a9:0a:f6:3d: d8:2d:c3:8d:e4:17:0b:c7:e3:59:0c:b2:c7:7b:be:17:87:1a: 2e:4a:b1:8f:3d:7f:ca:63:a6:7f:14:3c:33:68:d7:92:09:82: be:0b:e2:a4:c5:2c:1c:f4:cd:18:23:ec:15:f0:60:f6:1b:50: a3:c2:ab:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3hAEKLfB5TqtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1 ZWE5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MjU4MGQyNTktZTAzYi00MzY0LTg4ODAtODgxYmMwNjVkYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7SR4U8QNcLQ5sB4rK46UunIG9i0AKmMZQlT WLog9TMnCtXecJXbiko7n1bV5PY71ZQs1gQmLoH+7wyoQZcouxEZNk4zvkDa8aKo r2ekkarYT6ohRG8TUbBbzmt3yU5zL4EaPvZICBBsMtrF19AkFlQFnNrjLPEn3MRv LJ5dB5M152vGREAMUE788AHzNiMKA7LIaaztrc5wZyFCIuyR3uvcYzs6sLZNi2y5 LFCOCYxnwVCSJS8UoKaFNb1gkQ/KY+IUl5elhA9jDQjcXk5QxT566k1TyXz2gCQG s7C/c1AaHWhcJgwYn8q0BOIJt09wfUjqX9UI4tDCNUpHG5xS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNAycRTpPVgXUKfsIk7BlUd/alQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MGJj YmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvMWExMTQyMzYtNTJkNS0z YTkyLThkZmEtOTVmZmJlOWJjMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzBiY2JkNjgtNDFkNi00YTVhLThk MjgtMWI5YTlhNGM1ZWE5LzcwYmNiZDY4LTQxZDYtNGE1YS04ZDI4LTFiOWE5YTRj NWVhOS5jcmwwHwYDVR0jBBgwFoAUqd9vVk8Se+zs7Vac35zUQ4hV9OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlh OWE0YzVlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqpESSR5TEB9n4YA5auItZzRIbFnseXy13uojaOxiMyM0iIOX4QstB0 9cSYnnbHrbj6wpCGmG5Zfml6al2j7IE5SCQOSN2hJiIyR1gZDi38xFzgrkp10OGs iLUTSsc5SxZCon3qznjyTdlw3U7WhYelGVVxHU7giPARtrwqTjuDqDynNYVxTU/o iNSEIrWsDChUeTSWijL3Y1ShE5pb4UbaJr0WWDTHGR+fNHKMIio8zDpKWkYJBmJK 3CXpN2Ffeq4TqQr2Pdgtw43kFwvH41kMssd7vheHGi5KsY89f8pjpn8UPDNo15IJ gr4L4qTFLBz0zRgj7BXwYPYbUKPCq+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:20 2025 by rpki-client