$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa File: 309a5caa-046a-3bc2-989c-7828235320bf.roa (raw, json) Hash identifier: JUHrcIluyp/aI/Gr47bmYaGetOlCAFLcH92rflFWndQ= Subject key identifier: 67:8C:95:E0:35:A0:E6:AE:F1:A4:D8:DE:84:5D:B7:FB:45:0A:53:C6 Certificate issuer: /CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Certificate serial: 010D0C9F4328584B84E76E2034972D2AA9F77400 Authority key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396507 IP address blocks: 23.129.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:20:34:97:2d:2a:a9:f7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9ce1db0c-e277-4819-96b6-a33535e798ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:20:c2:8a:5d:89:e7:3a:54:5e:81:7b:ab: c0:e6:0d:6c:4d:f5:6e:22:ed:99:d0:dd:7f:8f:d1: 85:3b:d5:9c:65:7b:71:b0:7c:1f:69:48:f5:41:20: 2d:c9:ed:79:ae:92:63:bd:96:ac:00:1c:fd:fe:7c: f8:f8:38:c6:b7:1a:76:d4:58:7a:84:9d:13:9e:17: 30:61:81:d8:63:54:ae:68:10:bc:d8:93:da:68:0a: e0:8e:33:a2:a3:39:b8:55:c8:8e:b8:0d:e6:60:39: ac:85:c2:59:bc:aa:5f:68:3d:8a:1f:dd:2c:c0:f7: 1d:10:c2:6c:0c:97:29:0e:9b:52:81:97:70:ce:d7: d1:f1:e7:f2:f8:49:11:eb:c1:d6:cc:ad:37:fa:9d: a4:0d:71:67:20:03:4a:d2:13:48:33:7a:a9:f1:a0: ac:5f:85:06:a6:0a:67:d2:8b:ee:93:9b:1c:4a:61: 9d:18:a2:4e:98:8e:f9:7c:b7:b7:5e:2e:94:fb:7b: c2:b5:49:41:5d:8b:d7:8f:cd:4d:b3:c8:3b:f7:46: 5f:2a:ed:c6:5b:06:97:01:19:ed:9a:6c:a3:55:74: 4b:45:1e:81:42:83:19:d4:25:31:fb:5d:09:3b:68: 02:73:7c:0e:c5:47:07:f1:3e:84:bf:91:50:d1:c8: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:95:E0:35:A0:E6:AE:F1:A4:D8:DE:84:5D:B7:FB:45:0A:53:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/309a5caa-046a-3bc2-989c-7828235320bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.crl X509v3 Authority Key Identifier: keyid:72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer sbgp-ipAddrBlock: critical IPv4: 23.129.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6e:e5:68:10:4b:26:f2:2c:10:d1:3b:bd:c4:ab:5d:eb:9e: 25:e9:bb:8d:90:d1:f5:81:bb:62:15:13:3f:ab:2f:64:87:9c: 47:ed:b9:53:ac:db:4d:ca:c7:ff:64:29:56:4c:eb:6b:a0:bc: 7f:44:25:68:02:a8:87:54:1e:82:8f:71:b7:91:52:25:3d:db: c5:aa:f2:8e:a5:63:56:7b:a6:84:1f:c2:b3:84:97:4c:32:e1: 8b:ea:3b:c1:9f:ba:02:df:65:10:1a:ed:5e:86:71:f8:4f:4d: 15:8a:14:75:2d:8d:9b:ba:6a:ac:76:ea:a0:74:3b:b2:c3:cc: a1:25:a9:94:41:48:36:79:40:f9:55:e3:2c:6d:f4:62:aa:ed: 39:ec:0c:a6:e5:61:39:8e:99:3e:e2:c4:9a:39:ef:a8:b0:81: 60:fc:69:ab:5e:fc:cf:bb:e1:a1:16:0a:ca:2b:68:47:bf:f9: fd:2b:29:70:e3:3b:90:01:0d:d0:85:6b:54:a8:d6:ce:c8:e1: 9c:b8:be:9e:5f:0a:31:45:0b:49:f1:da:b6:2e:c5:09:90:3d: e5:00:c4:eb:3b:f0:19:11:40:a9:96:bf:21:01:b3:b4:4f:5a: 09:8a:fe:b6:ff:17:cf:50:f3:10:e7:db:b0:5c:0f:b3:3c:0d: de:bd:e0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE524gNJctKqn3dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU2YjdhM2YtYjIwNS00YzZiLWEwMGYtN2RmYzIwODNi NzhkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWNlMWRiMGMtZTI3Ny00ODE5LTk2YjYtYTMzNTM1ZTc5OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKwgwopdiec6VF6Be6vA5g1sTfVuIu2Z0N1/ j9GFO9WcZXtxsHwfaUj1QSAtye15rpJjvZasABz9/nz4+DjGtxp21Fh6hJ0Tnhcw YYHYY1SuaBC82JPaaArgjjOiozm4VciOuA3mYDmshcJZvKpfaD2KH90swPcdEMJs DJcpDptSgZdwztfR8efy+EkR68HWzK03+p2kDXFnIANK0hNIM3qp8aCsX4UGpgpn 0ovuk5scSmGdGKJOmI75fLe3Xi6U+3vCtUlBXYvXj81Ns8g790ZfKu3GWwaXARnt mmyjVXRLRR6BQoMZ1CUx+10JO2gCc3wOxUcH8T6Ev5FQ0cib5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeMleA1oOau8aTY3oRdt/tFClPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZTZi N2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4M2I3OGQvMzA5YTVjYWEtMDQ2YS0z YmMyLTk4OWMtNzgyODIzNTMyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGU2YjdhM2YtYjIwNS00YzZiLWEw MGYtN2RmYzIwODNiNzhkLzBlNmI3YTNmLWIyMDUtNGM2Yi1hMDBmLTdkZmMyMDgz Yjc4ZC5jcmwwHwYDVR0jBBgwFoAUcgaukRceTtagOl7WkmPzz3GNRL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZj MjA4M2I3OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdu5WgQSybyLBDRO73Eq13rniXpu42Q0fWBu2IVEz+rL2SHnEftuVOs 203Kx/9kKVZM62ugvH9EJWgCqIdUHoKPcbeRUiU928Wq8o6lY1Z7poQfwrOEl0wy 4YvqO8GfugLfZRAa7V6GcfhPTRWKFHUtjZu6aqx26qB0O7LDzKElqZRBSDZ5QPlV 4yxt9GKq7TnsDKblYTmOmT7ixJo576iwgWD8aate/M+74aEWCsoraEe/+f0rKXDj O5ABDdCFa1So1s7I4Zy4vp5fCjFFC0nx2rYuxQmQPeUAxOs78BkRQKmWvyEBs7RP WgmK/rb/F89Q8xDn27BcD7M8Dd694EQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:43 2025 by rpki-client