$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa File: d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa (raw, json) Hash identifier: +PzlxkqmUd+qJQrib1WeFyOQdIWm9+o0lvexTgIC7q4= Subject key identifier: D8:CF:CF:1F:71:B5:BA:B0:28:F5:7A:4A:95:3F:DB:E6:3F:D7:41:CD Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Certificate serial: 010D0C9F4328584B41E71E49CCD34FB7EC761B00 Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 400928 IP address blocks: 23.173.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:49:cc:d3:4f:b7:ec:76:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e4275488-9ba5-42f1-aaf4-a3a5acb020ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:92:95:21:a4:75:6f:02:cb:74:80:18:13: be:d3:76:1d:d1:d6:49:8a:38:93:4f:30:7e:11:42: 34:9b:bc:64:93:e6:9a:78:a5:b2:70:4a:38:63:13: 50:d4:29:77:fc:d2:4a:d6:c2:56:21:dc:aa:a4:8b: 57:7c:93:93:64:9c:29:5d:f2:35:74:6c:74:47:97: 20:49:cf:74:70:1b:44:1e:2a:95:40:66:73:e7:5a: e3:98:a5:fb:2f:34:c8:86:1b:e4:e9:e1:f6:da:e3: b7:3b:14:1b:97:67:97:89:12:c0:6d:5c:16:4b:55: fb:47:61:50:1b:d1:b2:a0:b9:ec:f9:53:b0:50:13: 69:45:4c:96:5b:3d:11:24:7c:07:9e:04:09:c7:14: 11:d9:87:e4:9d:45:ae:c9:7f:d1:cc:60:e3:8e:c6: bb:72:ce:85:7c:28:00:d6:be:e5:21:ee:ea:8f:5d: 42:28:6c:d2:07:b2:29:ad:43:a8:e3:68:3a:42:4b: ff:e0:42:58:32:a4:19:c4:de:85:db:1f:da:88:57: 8c:ce:b3:17:61:2e:af:0d:2f:e6:a4:eb:33:df:d5: 18:8c:f6:4e:7d:64:09:8e:90:20:82:57:bc:af:9d: 5e:88:da:1d:81:57:b9:48:b2:c0:bb:64:bb:19:1a: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CF:CF:1F:71:B5:BA:B0:28:F5:7A:4A:95:3F:DB:E6:3F:D7:41:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl X509v3 Authority Key Identifier: keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a5:5c:4d:c3:26:93:2e:81:84:1f:fe:a3:91:2c:d1:dd:d1: 33:f0:81:26:2a:a0:44:fc:e7:3e:d7:23:9a:a1:34:6f:60:81: eb:e6:f0:fb:42:9b:5a:d3:64:6f:d1:a4:5d:ea:a5:53:6a:0d: 6a:a9:0c:5e:76:07:20:86:15:b0:6f:65:f4:1d:f3:0e:d6:6e: 22:0c:81:90:b4:2d:6c:7b:bc:c4:f1:32:5a:fd:b9:90:41:5c: ca:0a:fe:58:40:c8:57:ec:e1:6b:78:13:60:3e:0b:ef:65:14: 23:6c:be:8b:5c:f4:0e:79:a9:51:45:96:af:42:6a:45:e8:4d: e1:4e:ae:fc:cc:e8:bc:60:60:84:23:3f:47:13:c1:d2:5d:54: 46:98:24:50:af:5f:d6:25:0f:3c:1b:98:5c:f9:48:99:44:13: 46:e5:8f:da:20:e7:18:98:eb:34:30:34:33:ae:c4:f9:5f:eb: df:a1:e6:f1:c6:93:7e:fa:c1:0b:b9:2b:01:c8:0e:2e:95:9e: 6d:d4:e5:ec:29:fd:e7:c9:82:bd:39:fa:c7:1e:93:33:c3:df: 7f:6f:ff:76:f3:5e:5b:fd:bd:35:8a:b8:01:8c:11:53:83:67: 0f:b8:87:7e:85:f5:52:fa:4e:16:36:d1:52:c9:4e:de:e1:e7: 60:1e:b4:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x5JzNNPt+x2GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi ZGMzMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTQyNzU0ODgtOWJhNS00MmYxLWFhZjQtYTNhNWFjYjAyMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTWSlSGkdW8Cy3SAGBO+03Yd0dZJijiTTzB+ EUI0m7xkk+aaeKWycEo4YxNQ1Cl3/NJK1sJWIdyqpItXfJOTZJwpXfI1dGx0R5cg Sc90cBtEHiqVQGZz51rjmKX7LzTIhhvk6eH22uO3OxQbl2eXiRLAbVwWS1X7R2FQ G9GyoLns+VOwUBNpRUyWWz0RJHwHngQJxxQR2YfknUWuyX/RzGDjjsa7cs6FfCgA 1r7lIe7qj11CKGzSB7IprUOo42g6Qkv/4EJYMqQZxN6F2x/aiFeMzrMXYS6vDS/m pOsz39UYjPZOfWQJjpAggle8r51eiNodgVe5SLLAu2S7GRowNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjPzx9xtbqwKPV6SpU/2+Y/10HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvZDRjYjdhMDctMzAxMy0z N2Y1LWFhOGMtYjA4NTc5ZmMwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF60YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+lXE3DJpMugYQf/qORLNHd0TPwgSYqoET85z7XI5qhNG9ggevm8PtC m1rTZG/RpF3qpVNqDWqpDF52ByCGFbBvZfQd8w7WbiIMgZC0LWx7vMTxMlr9uZBB XMoK/lhAyFfs4Wt4E2A+C+9lFCNsvotc9A55qVFFlq9CakXoTeFOrvzM6LxgYIQj P0cTwdJdVEaYJFCvX9YlDzwbmFz5SJlEE0blj9og5xiY6zQwNDOuxPlf69+h5vHG k376wQu5KwHIDi6Vnm3U5ewp/efJgr05+scekzPD339v/3bzXlv9vTWKuAGMEVOD Zw+4h36F9VL6ThY20VLJTt7h52AetGw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:19 2025 by rpki-client