$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa File: 4f328c30-9c44-33ba-ad3f-f36534bc620e.roa (raw, json) Hash identifier: sM3a7xFL/44wbtrHEFdqWhWixNXwRBbfzI24iqg07AI= Subject key identifier: FA:D7:FA:6E:D3:F2:68:35:9D:9B:55:EC:79:CE:E3:A2:2C:59:D3:76 Certificate issuer: /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Certificate serial: 010D0C9F4328584B970CF0E6A5B29B0194172680 Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30671 IP address blocks: 23.160.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f0:e6:a5:b2:9b:01:94:17:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=3dca229f-2520-44da-a8f1-091a76d51f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:6e:6f:fc:1c:a6:e0:c6:22:12:22:83:da: 05:4c:83:02:82:2f:d6:ee:74:0a:e7:74:81:0c:82: 90:ff:25:ef:4e:38:1d:17:21:e6:a0:f9:2c:de:e5: be:ce:4d:55:ba:b5:e0:14:55:c5:d8:86:94:e5:82: 13:6a:89:f7:e7:83:97:87:fe:87:2f:bf:a8:91:6e: 4f:01:e3:75:ef:07:a9:8c:14:53:41:fa:4b:0e:ec: cb:36:9e:ac:de:1f:cf:ef:1b:f9:a7:5f:0a:6c:96: 6b:4d:a6:fb:cd:d1:e7:e5:6c:c1:8b:b0:8a:2c:86: d6:2f:e1:71:c3:91:26:7e:ad:e7:83:a5:f1:63:a0: 97:b9:53:f1:fc:5a:ec:79:fe:2b:00:12:dd:f0:25: b0:71:03:e0:4f:38:4c:2c:84:5c:99:87:c5:f2:c6: 9d:d9:29:27:7c:73:2d:a8:99:c8:91:3f:59:7e:c7: a3:1b:32:d2:0c:b8:32:61:54:8d:84:2c:1a:f5:a7: f8:d6:6e:e9:1d:bb:bb:6f:aa:a4:a2:76:f5:48:4a: 67:d3:91:58:f5:bd:07:9c:0f:b3:51:e6:6e:58:8b: 01:87:25:7d:43:16:2f:13:f2:11:68:ff:b1:0b:f6: fe:61:bc:fc:14:71:8e:e2:c7:67:e5:2a:29:08:0e: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D7:FA:6E:D3:F2:68:35:9D:9B:55:EC:79:CE:E3:A2:2C:59:D3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/4f328c30-9c44-33ba-ad3f-f36534bc620e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl X509v3 Authority Key Identifier: keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer sbgp-ipAddrBlock: critical IPv4: 23.160.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:82:26:df:28:89:03:27:32:90:c3:24:d4:a7:b0:8f:aa:6b: fd:c6:0b:dd:99:f6:9a:a4:d6:63:59:71:df:6a:44:05:4b:2c: b0:a8:26:75:08:46:93:d8:6d:40:ab:b1:ef:2d:78:bb:d8:ca: 03:7f:90:bf:01:9f:0c:d8:50:6e:6b:20:40:06:f1:2c:9c:bd: d7:f7:f2:e2:67:35:f6:5e:c7:20:51:85:19:46:3a:a5:41:cf: c1:de:3a:30:97:31:86:28:86:2b:b3:2a:c8:2e:f9:61:0d:8d: 02:36:0d:9e:3f:3d:90:6b:89:d9:73:1c:ba:b0:82:78:b8:eb: 0d:68:fe:3a:32:e7:9a:10:e5:17:bf:ab:13:eb:8b:68:e1:b3: 29:d4:4c:12:9b:29:50:e2:87:43:4d:fe:cd:95:92:08:aa:13: 3b:98:1d:6c:53:b5:fb:0a:04:48:17:38:18:86:65:f6:31:67: b0:6d:bb:db:9c:f0:a5:9a:d1:d8:04:55:4e:eb:16:4b:49:74: 16:a3:3c:26:f3:1c:94:be:d0:01:8b:15:f5:47:83:98:04:30: 8e:ed:f2:99:e7:63:61:69:a5:fe:f1:eb:ef:9f:8c:d4:24:19: cd:f4:db:da:35:65:80:b5:66:c5:ac:a1:29:dd:19:27:cc:61: c5:ba:74:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPDmpbKbAZQXJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY4ZDhhNTUtOTlkMS00YzVhLWI0MjYtOTYzMjk0NGVl NGM1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk M2RjYTIyOWYtMjUyMC00NGRhLWE4ZjEtMDkxYTc2ZDUxZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUxub/wcpuDGIhIig9oFTIMCgi/W7nQK53SB DIKQ/yXvTjgdFyHmoPks3uW+zk1VurXgFFXF2IaU5YITaon354OXh/6HL7+okW5P AeN17wepjBRTQfpLDuzLNp6s3h/P7xv5p18KbJZrTab7zdHn5WzBi7CKLIbWL+Fx w5Emfq3ng6XxY6CXuVPx/Frsef4rABLd8CWwcQPgTzhMLIRcmYfF8sad2SknfHMt qJnIkT9ZfsejGzLSDLgyYVSNhCwa9af41m7pHbu7b6qkonb1SEpn05FY9b0HnA+z UeZuWIsBhyV9QxYvE/IRaP+xC/b+Ybz8FHGO4sdn5SopCA5yKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrX+m7T8mg1nZtV7HnO46IsWdN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNjhk OGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0ZWU0YzUvNGYzMjhjMzAtOWM0NC0z M2JhLWFkM2YtZjM2NTM0YmM2MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjY4ZDhhNTUtOTlkMS00YzVhLWI0 MjYtOTYzMjk0NGVlNGM1L2I2OGQ4YTU1LTk5ZDEtNGM1YS1iNDI2LTk2MzI5NDRl ZTRjNS5jcmwwHwYDVR0jBBgwFoAUTbltyRVOpD12t+gch8Xx8Hehc9UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMy OTQ0ZWU0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6AYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmCJt8oiQMnMpDDJNSnsI+qa/3GC92Z9pqk1mNZcd9qRAVLLLCoJnUI RpPYbUCrse8teLvYygN/kL8BnwzYUG5rIEAG8Sycvdf38uJnNfZexyBRhRlGOqVB z8HeOjCXMYYohiuzKsgu+WENjQI2DZ4/PZBridlzHLqwgni46w1o/joy55oQ5Re/ qxPri2jhsynUTBKbKVDih0NN/s2VkgiqEzuYHWxTtfsKBEgXOBiGZfYxZ7Btu9uc 8KWa0dgEVU7rFktJdBajPCbzHJS+0AGLFfVHg5gEMI7t8pnnY2Fppf7x6++fjNQk Gc3029o1ZYC1ZsWsoSndGSfMYcW6dM0= -----END CERTIFICATE-----Generated at Tue Oct 21 04:37:36 2025 by rpki-client