$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa File: 30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa (raw, json) Hash identifier: +mtVD6LY6yGdwhs3BQ683Sn9jzp4JmTzjmC74huceoU= Subject key identifier: 5E:68:BB:A3:58:D0:CB:AC:8F:8B:CA:9B:7D:2D:66:11:C2:AF:94:A4 Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Certificate serial: 010D0C9F4328584B715CAA30194D98EAC1A4165B Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 133199 IP address blocks: 23.157.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:aa:30:19:4d:98:ea:c1:a4:16:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=01ad9e8d-af07-4bf3-a8cd-bd9efdce3f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:34:21:6a:68:f0:e0:33:82:ab:9b:d5:d5: 68:6b:60:89:2c:46:80:d6:74:05:b0:6f:69:13:f5: 2a:b4:a8:72:fa:27:4c:74:ee:10:6a:4d:46:7e:e8: 09:73:ef:5b:5f:87:f8:02:55:53:2a:b3:3d:57:eb: 52:9f:8e:b1:c3:4c:5a:6e:43:a3:30:5c:40:bd:44: f4:27:ef:9b:9b:01:13:dc:e5:74:4e:0e:21:a5:fd: a5:5b:b9:d5:69:55:40:b7:e0:fc:69:e4:82:1f:c5: 3c:37:8b:77:ca:a5:a9:cd:de:74:ab:1c:7e:ad:f6: e7:a0:d5:a1:ae:d1:d8:13:cf:b1:56:34:91:a6:f2: cd:bd:32:58:60:04:0a:ea:fe:2a:17:5c:a0:c3:32: 58:46:02:80:64:05:18:57:70:64:72:58:0c:78:f1: 63:61:32:6c:21:bb:c5:a0:b3:4c:26:73:79:51:a2: 5c:3b:03:e7:93:28:fe:3f:81:7c:65:ce:79:c2:79: d3:12:5c:71:39:c6:68:60:e4:3a:dc:35:70:36:b5: 7a:54:25:58:d6:94:24:a3:66:66:b4:5c:80:03:8b: 04:32:bb:de:9a:27:34:b2:98:3a:f4:87:d8:a1:15: 09:35:88:a8:e9:a2:d9:36:b1:d6:41:1c:d5:76:b4: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:BB:A3:58:D0:CB:AC:8F:8B:CA:9B:7D:2D:66:11:C2:AF:94:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl X509v3 Authority Key Identifier: keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c3:cd:d5:70:7d:c5:71:67:31:60:d3:4d:4e:36:9a:fb:b0: 95:ae:dd:f1:c1:f8:98:fa:26:6f:c4:1f:be:68:81:e9:d2:6d: 5e:8f:dc:52:f8:3d:a2:a9:b2:71:69:c3:1d:25:4a:ab:b3:5a: 4f:5d:d0:18:b1:16:bd:2c:1b:94:5f:99:8e:a4:63:59:0a:96: 40:0b:a0:77:19:98:6a:e6:59:eb:b9:a2:c5:ec:5a:da:5e:3b: 9f:9b:a4:9b:ec:9c:99:4b:5e:a7:a7:ee:ff:37:df:b3:2a:e8: 50:39:d1:bc:f8:2c:e5:6a:16:57:e2:84:da:55:f8:9d:5b:61: ec:31:f1:f4:52:4b:e3:c6:14:bb:9b:64:7c:bd:87:58:ab:31: 14:1c:8d:f9:f6:1f:b9:76:9e:81:da:03:97:70:b7:f2:70:af: 86:c5:02:aa:5e:1f:53:0a:17:29:e2:60:93:72:b2:65:cf:c6: 62:3b:62:21:08:c5:2e:e0:ad:20:4a:6d:e8:9c:62:42:b8:2d: 5b:44:03:df:4c:6e:ea:71:cd:97:f4:bb:98:c2:1b:eb:40:98: 91:77:7c:9a:94:3e:46:03:89:e7:cd:db:e7:bb:5a:d4:67:18: e9:9b:20:e1:39:15:59:6d:7f:bd:fa:36:28:02:f3:d3:f9:ff: 69:82:48:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKowGU2Y6sGkFlswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmYjdkNTctNzg3Ni00ZTNhLWIwNTUtMzUzNDAxMGZj NmE5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDFhZDllOGQtYWYwNy00YmYzLWE4Y2QtYmQ5ZWZkY2UzZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGc0IWpo8OAzgqub1dVoa2CJLEaA1nQFsG9p E/UqtKhy+idMdO4Qak1GfugJc+9bX4f4AlVTKrM9V+tSn46xw0xabkOjMFxAvUT0 J++bmwET3OV0Tg4hpf2lW7nVaVVAt+D8aeSCH8U8N4t3yqWpzd50qxx+rfbnoNWh rtHYE8+xVjSRpvLNvTJYYAQK6v4qF1ygwzJYRgKAZAUYV3BkclgMePFjYTJsIbvF oLNMJnN5UaJcOwPnkyj+P4F8Zc55wnnTElxxOcZoYOQ63DVwNrV6VCVY1pQko2Zm tFyAA4sEMrvemic0spg69IfYoRUJNYio6aLZNrHWQRzVdrTgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ou6NY0Musj4vKm30tZhHCr5SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZi N2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0MDEwZmM2YTkvMzA1MjhjODUtY2M1ZS0z YzAyLWI3NjQtMGUyZWMwNGY2OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDlmYjdkNTctNzg3Ni00ZTNhLWIw NTUtMzUzNDAxMGZjNmE5LzA5ZmI3ZDU3LTc4NzYtNGUzYS1iMDU1LTM1MzQwMTBm YzZhOS5jcmwwHwYDVR0jBBgwFoAUlnIacrGcuC5379T0HM3IoLzJrE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWZiN2Q1Ny03ODc2LTRlM2EtYjA1NS0zNTM0 MDEwZmM2YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrDzdVwfcVxZzFg001ONpr7sJWu3fHB+Jj6Jm/EH75ogenSbV6P3FL4 PaKpsnFpwx0lSquzWk9d0BixFr0sG5RfmY6kY1kKlkALoHcZmGrmWeu5osXsWtpe O5+bpJvsnJlLXqen7v8337Mq6FA50bz4LOVqFlfihNpV+J1bYewx8fRSS+PGFLub ZHy9h1irMRQcjfn2H7l2noHaA5dwt/Jwr4bFAqpeH1MKFyniYJNysmXPxmI7YiEI xS7grSBKbeicYkK4LVtEA99MbupxzZf0u5jCG+tAmJF3fJqUPkYDiefN2+e7WtRn GOmbIOE5FVltf736NigC89P5/2mCSFo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:38 2025 by rpki-client