$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa File: 8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json) Hash identifier: ZaQEBrUiaUHVOHQ2OkfWbxH834aq1SaHoCOQ2CWHe5M= Subject key identifier: 62:9D:0C:65:00:FF:75:9F:24:68:AD:99:0D:48:F4:98:1E:9C:59:BB Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584B64CCC13ED8736ED17CD74D80 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 11870 IP address blocks: 167.23.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c1:3e:d8:73:6e:d1:7c:d7:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e3291186-224b-4716-bd81-54060a11859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:f0:3e:6b:bd:f2:6a:f7:31:e6:f9:e5:cb: 58:bc:37:41:64:1e:58:74:d8:33:53:f9:60:97:12: d1:00:f8:1a:6b:ca:53:36:93:7b:81:01:ea:3b:f2: 11:f9:37:0c:69:6b:c9:d3:6c:ad:39:ed:a0:0a:db: 68:5e:34:01:29:f7:53:43:63:b2:10:3c:5c:82:8f: d8:ec:d8:70:26:6d:10:89:ac:eb:ef:10:67:9e:f9: ae:7d:63:ca:2f:3f:0b:64:86:8f:ce:63:42:9a:6e: 6c:5a:17:9b:f4:58:14:0d:0b:28:69:4c:b6:4d:b0: 8f:e4:32:b5:e4:06:59:36:c1:3c:b2:e3:71:24:a5: 2b:ff:99:a2:b4:85:a6:c4:c8:a0:05:89:0d:d1:5d: 0f:4d:c3:57:cf:fb:c9:38:e7:1f:6f:91:29:4e:d4: ce:73:d7:44:c4:1c:25:29:f8:ec:f1:0e:f5:78:97: 21:4a:02:3f:cd:2a:8d:1f:e7:5c:56:b3:ed:82:7c: 3e:90:14:bd:63:73:c6:bd:0b:ff:4f:45:10:c0:42: e1:ed:01:e5:01:74:e2:8d:e2:ca:13:e7:08:59:ce: 4a:fb:02:c0:77:95:8c:9b:0e:63:d9:76:34:7f:ec: c3:cd:a0:cb:d0:a7:86:ee:9e:78:a4:c1:f0:5e:e9: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:0C:65:00:FF:75:9F:24:68:AD:99:0D:48:F4:98:1E:9C:59:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:48:00:1d:14:36:2d:2f:27:38:c7:91:4e:ad:8d:07:38:ef: da:30:c7:b3:24:85:bf:a7:3a:4f:11:de:2d:ee:de:c5:21:1f: 7f:d0:8e:9f:5d:cd:c0:de:ff:10:78:18:98:3c:80:27:ba:9a: 16:0e:8e:59:96:7e:f6:8b:3e:7b:07:61:90:2a:6a:c7:c5:4f: 21:52:4f:02:d5:56:d9:16:95:dd:9d:43:e7:50:9d:f8:47:d2: 72:2d:10:43:57:bf:09:02:87:96:91:7c:bb:5e:fe:36:85:36: 3d:bb:44:c5:10:39:e7:59:58:7d:42:68:48:cc:1e:1c:55:86: 2d:80:df:04:84:7e:e2:4b:3d:3c:83:cb:c7:59:d7:e1:8d:38: f8:ce:29:72:15:05:35:0d:9c:d7:5f:0c:e9:50:d0:c4:ef:e8: 80:22:6b:d9:f7:c9:c1:a8:ed:fd:78:59:14:95:b2:6d:3c:93: 92:37:ec:1f:8f:b7:a7:f8:98:2d:8b:46:c4:ab:79:fc:2a:f4: 06:21:66:06:54:a0:7c:53:8e:e9:3b:fb:cf:47:59:b3:98:5d: 5c:dc:bd:a9:85:94:18:5a:da:f9:06:22:35:b5:06:6f:1e:b6: 4e:3e:0f:e3:51:32:aa:24:74:5e:1a:69:d7:f5:04:73:10:3a: 77:1d:93:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzME+2HNu0XzXTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTMyOTExODYtMjI0Yi00NzE2LWJkODEtNTQwNjBhMTE4NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vwPmu98mr3Meb55ctYvDdBZB5YdNgzU/lg lxLRAPgaa8pTNpN7gQHqO/IR+TcMaWvJ02ytOe2gCttoXjQBKfdTQ2OyEDxcgo/Y 7NhwJm0Qiazr7xBnnvmufWPKLz8LZIaPzmNCmm5sWheb9FgUDQsoaUy2TbCP5DK1 5AZZNsE8suNxJKUr/5mitIWmxMigBYkN0V0PTcNXz/vJOOcfb5EpTtTOc9dExBwl Kfjs8Q71eJchSgI/zSqNH+dcVrPtgnw+kBS9Y3PGvQv/T0UQwELh7QHlAXTijeLK E+cIWc5K+wLAd5WMmw5j2XY0f+zDzaDL0KeG7p54pMHwXukm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKdDGUA/3WfJGitmQ1I9JgenFm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGU1YWJlMjYtMzVjMS0z YjE2LTliOTYtMzIzYzE2NWY4NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNIAB0UNi0vJzjHkU6tjQc479owx7Mkhb+nOk8R3i3u3sUhH3/Qjp9d zcDe/xB4GJg8gCe6mhYOjlmWfvaLPnsHYZAqasfFTyFSTwLVVtkWld2dQ+dQnfhH 0nItEENXvwkCh5aRfLte/jaFNj27RMUQOedZWH1CaEjMHhxVhi2A3wSEfuJLPTyD y8dZ1+GNOPjOKXIVBTUNnNdfDOlQ0MTv6IAia9n3ycGo7f14WRSVsm08k5I37B+P t6f4mC2LRsSrefwq9AYhZgZUoHxTjuk7+89HWbOYXVzcvamFlBha2vkGIjW1Bm8e tk4+D+NRMqokdF4aadf1BHMQOncdk9M= -----END CERTIFICATE-----Generated at Tue Oct 21 05:43:41 2025 by rpki-client