$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa File: 832cfaf4-5d90-3073-8f3f-5764acbc529b.roa (raw, json) Hash identifier: NlzqVCzboSepMxxxPgr2o5d8mWblGbx0T7mkQZTs6ns= Subject key identifier: E9:DF:A1:4C:93:30:36:EF:68:C6:AB:A0:FF:35:77:EC:86:EE:5C:24 Certificate issuer: /CN=791130fd-44cf-4486-92b3-7838b38e49ea Certificate serial: 010D0C9F4328584B9442240D26231B9982833380 Authority key identifier: F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401541 IP address blocks: 23.157.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:24:0d:26:23:1b:99:82:83:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=791130fd-44cf-4486-92b3-7838b38e49ea Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=def9332a-d364-4942-8ac7-511d401a7e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:46:50:59:ce:a4:23:8e:b5:ef:f3:f9:ff: d1:53:b6:9d:cb:11:ce:39:62:4c:0e:9e:05:c7:9f: bb:69:88:20:ea:ad:5f:f2:1f:e7:f8:e9:14:e0:b9: a2:df:8e:fc:e2:82:21:02:6b:f6:b4:28:c9:40:9c: 25:f4:ea:ae:bb:f4:06:50:10:bb:85:49:53:bd:b0: 79:fe:73:2c:97:e5:88:3f:55:ec:ff:4d:fd:98:69: e4:9d:8b:2f:c0:bc:4a:f0:b4:37:6a:fa:fe:c1:77: 5d:50:96:35:c7:01:23:f1:b5:cf:d7:a0:6a:2d:bf: 99:8d:6e:43:9f:2d:ba:38:52:85:79:c8:5f:5e:12: d5:15:ec:7a:50:12:48:b0:36:6a:90:df:ad:00:93: 5c:a0:22:e5:79:a8:5d:12:83:ff:48:e6:8d:e3:5f: d7:df:93:4c:82:e7:cf:8e:cd:e6:25:a8:72:7e:36: 16:40:c0:bb:fd:21:77:a3:81:93:16:92:95:6b:55: a9:33:95:18:8c:6c:9c:9c:b2:84:3e:9b:e5:d5:03: ee:c7:8d:3d:00:bb:8f:ef:a5:7e:1b:f2:41:5b:04: 8b:bf:a0:4b:92:80:19:02:6b:c1:f7:f1:09:6b:6a: 5b:31:ac:d4:47:80:10:30:e2:b2:69:c4:12:fb:00: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:A1:4C:93:30:36:EF:68:C6:AB:A0:FF:35:77:EC:86:EE:5C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/832cfaf4-5d90-3073-8f3f-5764acbc529b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea/791130fd-44cf-4486-92b3-7838b38e49ea.crl X509v3 Authority Key Identifier: keyid:F4:0F:25:D4:C4:B7:2D:A3:55:8D:66:06:95:9E:F1:E9:CF:98:04:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/791130fd-44cf-4486-92b3-7838b38e49ea.cer sbgp-ipAddrBlock: critical IPv4: 23.157.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d9:c0:72:5b:4d:ee:8f:ac:4f:6c:28:39:4f:1e:74:1d:9f: 25:97:c0:7c:37:52:ef:d2:21:79:d2:21:8e:4b:0f:bf:97:83: 34:55:ec:03:20:91:a4:06:79:c3:10:3c:45:eb:bc:1d:ae:71: d4:f4:d4:7d:c2:e4:8b:ff:03:eb:bb:58:bb:d2:2e:76:e0:58: c0:26:67:d1:af:3f:99:e9:48:88:84:cf:13:da:c3:37:a0:76: b0:62:9e:a3:a6:68:d8:91:74:f5:75:46:dd:e1:0f:02:da:45: 90:e9:29:10:52:b0:aa:ff:08:b7:df:1d:1e:37:3a:f0:59:40: 45:6f:59:56:6f:ad:57:61:1e:0c:7b:be:12:c4:e1:67:52:c1: 34:bb:db:e5:71:45:92:b1:c1:87:2e:d5:a5:bc:d5:e5:86:29: 43:87:9e:90:23:75:da:bf:fb:1a:32:4d:c0:85:0c:60:8c:76: 71:f5:9b:49:96:b3:f6:26:d5:9d:67:a2:65:36:6b:ae:2c:c8: bb:0d:3b:db:1f:8c:73:05:ac:83:d8:f0:48:07:7e:2b:3d:80: 53:92:ec:2c:3c:2e:78:bb:0b:03:94:c4:c2:b7:e6:6f:f4:cc: 9f:9e:3a:62:12:16:3f:24:e9:59:e3:b4:fd:2b:c0:ba:24:51: 04:91:02:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiQNJiMbmYKDM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkxMTMwZmQtNDRjZi00NDg2LTkyYjMtNzgzOGIzOGU0 OWVhMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZGVmOTMzMmEtZDM2NC00OTQyLThhYzctNTExZDQwMWE3ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolxGUFnOpCOOte/z+f/RU7adyxHOOWJMDp4F x5+7aYgg6q1f8h/n+OkU4Lmi34784oIhAmv2tCjJQJwl9Oquu/QGUBC7hUlTvbB5 /nMsl+WIP1Xs/039mGnknYsvwLxK8LQ3avr+wXddUJY1xwEj8bXP16BqLb+ZjW5D ny26OFKFechfXhLVFex6UBJIsDZqkN+tAJNcoCLleahdEoP/SOaN41/X35NMgufP js3mJahyfjYWQMC7/SF3o4GTFpKVa1WpM5UYjGycnLKEPpvl1QPux409ALuP76V+ G/JBWwSLv6BLkoAZAmvB9/EJa2pbMazUR4AQMOKyacQS+wB23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnfoUyTMDbvaMaroP81d+yG7lwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTEx MzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4YjM4ZTQ5ZWEvODMyY2ZhZjQtNWQ5MC0z MDczLThmM2YtNTc2NGFjYmM1MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzkxMTMwZmQtNDRjZi00NDg2LTky YjMtNzgzOGIzOGU0OWVhLzc5MTEzMGZkLTQ0Y2YtNDQ4Ni05MmIzLTc4MzhiMzhl NDllYS5jcmwwHwYDVR0jBBgwFoAU9A8l1MS3LaNVjWYGlZ7x6c+YBM8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTExMzBmZC00NGNmLTQ0ODYtOTJiMy03ODM4 YjM4ZTQ5ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXZwHJbTe6PrE9sKDlPHnQdnyWXwHw3Uu/SIXnSIY5LD7+XgzRV7AMg kaQGecMQPEXrvB2ucdT01H3C5Iv/A+u7WLvSLnbgWMAmZ9GvP5npSIiEzxPawzeg drBinqOmaNiRdPV1Rt3hDwLaRZDpKRBSsKr/CLffHR43OvBZQEVvWVZvrVdhHgx7 vhLE4WdSwTS72+VxRZKxwYcu1aW81eWGKUOHnpAjddq/+xoyTcCFDGCMdnH1m0mW s/Ym1Z1nomU2a64syLsNO9sfjHMFrIPY8EgHfis9gFOS7Cw8Lni7CwOUxMK35m/0 zJ+eOmISFj8k6VnjtP0rwLokUQSRAqc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:40 2025 by rpki-client