$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/8770fcb0-8012-33fa-8b5d-baf6f5989058.roa File: 8770fcb0-8012-33fa-8b5d-baf6f5989058.roa (raw, json) Hash identifier: Jk/kk8zaUtKejfcsVRP3m3H7kPlJ9b6wfkWoRHieBgw= Subject key identifier: 96:60:B3:E6:9D:3A:5C:8F:CA:AA:D1:2C:5E:ED:EB:C2:92:CA:76:F3 Certificate issuer: /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Certificate serial: 010D0C9F4328584B80B759FA10479702433C6780 Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/8770fcb0-8012-33fa-8b5d-baf6f5989058.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 40216 IP address blocks: 23.179.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:59:fa:10:47:97:02:43:3c:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=f8cbe408-7a50-4d38-8990-6c8f52d8b8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:87:e8:c0:d6:ee:97:e2:b9:1e:76:4c:3f:ed: ff:f2:35:17:57:98:26:a7:57:1e:dd:64:da:db:b3: 51:a4:c8:19:60:6e:73:9c:00:98:b8:d9:c3:80:be: 6f:75:16:22:f8:c5:4d:45:b0:3d:1a:35:77:3b:8d: bc:56:36:ab:fa:45:7f:5c:f4:9b:d3:51:16:a4:16: 37:29:c5:5c:d6:b2:a3:0e:e0:7a:9b:25:74:a8:62: 06:67:56:e2:ac:75:8d:26:82:25:24:f7:75:98:f1: a9:60:4f:34:58:b5:a4:ba:24:1c:47:49:30:bd:8f: 2a:7e:38:1f:c3:47:d5:05:9e:c2:82:34:ee:24:17: 89:f4:a0:5e:e7:00:10:bf:fc:8d:11:22:25:30:c0: 82:f6:51:1b:75:29:1d:18:14:79:29:73:9d:38:b1: af:9c:e7:f7:e8:16:a4:3e:ae:42:dc:dc:81:4c:5c: 3d:a4:29:74:ad:74:6c:aa:90:a6:3a:3f:6c:bd:05: 0e:76:06:e1:34:f1:76:3d:13:4b:de:b6:93:1a:77: 81:e5:65:44:25:2a:64:9a:19:ce:fa:eb:c8:ef:2a: 9b:e3:9a:3f:40:10:f2:d4:60:11:63:11:69:94:85: 2e:bd:6c:a1:5c:24:fb:96:18:8b:32:d0:c6:95:89: 37:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:B3:E6:9D:3A:5C:8F:CA:AA:D1:2C:5E:ED:EB:C2:92:CA:76:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/8770fcb0-8012-33fa-8b5d-baf6f5989058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl X509v3 Authority Key Identifier: keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer sbgp-ipAddrBlock: critical IPv4: 23.179.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:94:54:27:53:fe:b7:f1:b7:36:fc:3c:30:f1:0c:b3:6f: 55:f7:30:6c:0f:af:99:bf:36:17:a2:0c:dd:9d:d7:4a:00:f3: 4c:fc:26:47:79:e0:7b:9a:2f:b5:ad:5b:be:de:dc:d1:44:60: be:a3:22:97:08:b2:88:3c:3f:6b:5d:92:2a:e0:ed:00:6c:32: 88:15:48:ec:bd:35:bf:64:49:8b:a8:7c:88:34:ea:1a:48:05: 5d:6d:6e:ac:1b:7c:45:cf:e7:27:fe:86:3f:74:f1:27:dd:23: d6:ce:48:89:72:57:b7:db:3c:0e:ca:88:59:1d:87:96:31:f1: fd:bb:82:7f:b3:5f:bc:c0:23:82:2f:68:1a:63:51:9e:b8:aa: d4:ea:5d:fd:d9:27:4b:fc:59:d6:3e:85:ef:72:b3:8d:1a:fc: 7b:e1:c5:19:89:24:4f:ab:d9:c0:41:65:73:fc:be:4a:c1:3f: b3:d8:32:cb:45:6e:49:72:22:36:09:2a:6b:75:e3:7f:6a:ab: 95:d0:83:a2:a4:ce:9c:f0:15:84:6a:b7:5a:52:eb:5e:d5:88: 3e:a2:f9:25:e8:8a:32:98:e4:be:1a:90:07:01:b7:18:69:74: f9:4a:1e:f4:e7:a9:aa:06:c7:f3:a7:57:29:a5:c5:43:a2:3d: 96:78:e4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1n6EEeXAkM8Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFiNmVjN2QtY2EyZC00Y2RiLTllMGItOWZjNGE2YjYz MDQ3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZjhjYmU0MDgtN2E1MC00ZDM4LTg5OTAtNmM4ZjUyZDhiOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIfowNbul+K5HnZMP+3/8jUXV5gmp1ce3WTa 27NRpMgZYG5znACYuNnDgL5vdRYi+MVNRbA9GjV3O428Vjar+kV/XPSb01EWpBY3 KcVc1rKjDuB6myV0qGIGZ1birHWNJoIlJPd1mPGpYE80WLWkuiQcR0kwvY8qfjgf w0fVBZ7CgjTuJBeJ9KBe5wAQv/yNESIlMMCC9lEbdSkdGBR5KXOdOLGvnOf36Bak Pq5C3NyBTFw9pCl0rXRsqpCmOj9svQUOdgbhNPF2PRNL3raTGneB5WVEJSpkmhnO +uvI7yqb45o/QBDy1GARYxFplIUuvWyhXCT7lhiLMtDGlYk3PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZgs+adOlyPyqrRLF7t68KSynbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2 ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0YTZiNjMwNDcvODc3MGZjYjAtODAxMi0z M2ZhLThiNWQtYmFmNmY1OTg5MDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzFiNmVjN2QtY2EyZC00Y2RiLTll MGItOWZjNGE2YjYzMDQ3LzMxYjZlYzdkLWNhMmQtNGNkYi05ZTBiLTlmYzRhNmI2 MzA0Ny5jcmwwHwYDVR0jBBgwFoAUtdECXlWBNDCKtbOUa/RkFl4E+lYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0 YTZiNjMwNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdflFQnU/638bc2/Dww8Qyzb1X3MGwPr5m/NheiDN2d10oA80z8Jkd5 4HuaL7WtW77e3NFEYL6jIpcIsog8P2tdkirg7QBsMogVSOy9Nb9kSYuofIg06hpI BV1tbqwbfEXP5yf+hj908SfdI9bOSIlyV7fbPA7KiFkdh5Yx8f27gn+zX7zAI4Iv aBpjUZ64qtTqXf3ZJ0v8WdY+he9ys40a/HvhxRmJJE+r2cBBZXP8vkrBP7PYMstF bklyIjYJKmt1439qq5XQg6KkzpzwFYRqt1pS617ViD6i+SXoijKY5L4akAcBtxhp dPlKHvTnqaoGx/OnVymlxUOiPZZ45Ic= -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:49 2025 by rpki-client