$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa File: 13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa (raw, json) Hash identifier: AO6h4mXAzD9q7Zm6kDEn+hB4HRisCnnH98puhphCOeI= Subject key identifier: B5:62:23:53:82:D6:46:D4:B1:58:F7:60:0F:4F:CE:43:AC:25:46:44 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584B6D2CB7A6B6737F75A9717F40 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 53388 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b7:a6:b6:73:7f:75:a9:71:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=248e05ee-0f5e-4c2b-9e57-1745c6cb856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:f3:b4:3e:41:01:43:46:a2:8d:12:a1:fe: 8a:71:18:27:4f:3b:b1:47:69:36:57:9f:ee:3a:f3: 9f:8c:3b:5f:85:20:b4:6a:12:62:bd:5e:d8:01:19: f2:31:6f:cd:91:31:91:fc:09:94:bc:b0:6d:5d:bd: c1:69:77:94:fe:d7:43:d6:45:be:4b:f8:e6:30:f7: 53:62:f9:c5:8a:3b:01:6c:e6:96:21:95:eb:8a:77: cd:03:db:ee:b8:88:64:bf:92:b6:47:6d:7d:1f:72: 7b:2e:55:0b:aa:37:25:ff:66:29:e9:81:db:a4:47: 58:b1:cc:fa:5f:a0:9b:21:fd:81:bc:a4:47:23:b1: dc:b9:87:f2:47:fb:ae:44:78:ca:62:e4:81:b3:cf: 9a:98:87:8c:7d:9c:0f:21:4a:d1:77:56:4f:e7:cc: 49:a7:f3:27:b6:3e:b7:6e:92:97:e1:b1:11:a6:92: 98:f4:84:90:ac:5f:e2:19:ed:aa:34:db:52:74:d1: 64:6f:59:a4:f2:2f:5c:d2:6a:51:88:a2:ec:f7:0d: 0f:11:f8:37:e1:2c:c6:61:57:b5:47:13:85:31:87: 04:20:23:7e:30:c4:4c:3f:13:95:e7:63:fe:91:e1: 57:4f:b2:b3:92:54:a2:e3:67:85:ec:f0:eb:18:c7: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:23:53:82:D6:46:D4:B1:58:F7:60:0F:4F:CE:43:AC:25:46:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:52:2c:c8:4b:6d:81:9c:ad:e7:57:1e:6b:29:57:94:c3:8e: 5a:98:82:ec:39:7b:92:83:3c:62:6e:57:36:7a:b3:e7:b7:a8: 4e:2b:2d:c0:c9:2e:4d:b3:c1:11:5e:a8:f6:7b:a0:cd:70:a9: da:a1:46:e2:12:5b:6d:60:c9:87:c0:c4:63:fc:dc:73:0f:53: 7e:a7:e1:80:d1:bf:8b:0b:f3:30:93:6e:25:c1:08:f1:dd:e0: 11:c2:81:95:53:a1:12:df:ca:7a:fe:87:e6:43:b1:b6:c4:ac: 52:0b:8a:3f:36:a0:90:a3:ee:95:f8:54:75:06:c8:72:79:28: d7:74:3a:93:e0:b4:6f:11:19:7c:9d:73:d3:56:f9:ed:fc:9f: c7:76:3d:8a:fc:47:12:ee:09:de:64:f7:49:0d:ce:22:29:d8: 83:bc:f3:0b:3f:91:85:0e:20:d2:c5:6b:f5:1e:fc:61:fd:8c: 6e:07:dd:ca:b7:fb:37:2e:b9:e9:da:73:63:dc:df:1d:87:1d: d1:df:59:35:25:7c:f4:89:25:ed:91:3e:92:3f:17:08:ce:af: e2:b6:7f:ce:17:51:ca:a7:98:aa:43:fa:38:53:7c:a4:f5:97: 41:ae:d0:e5:1c:68:7f:0a:f1:2e:2f:f2:b1:c2:5e:31:99:43: 1f:31:2f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLemtnN/dalxf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjQ4ZTA1ZWUtMGY1ZS00YzJiLTllNTctMTc0NWM2Y2I4NTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9rztD5BAUNGoo0Sof6KcRgnTzuxR2k2V5/u OvOfjDtfhSC0ahJivV7YARnyMW/NkTGR/AmUvLBtXb3BaXeU/tdD1kW+S/jmMPdT YvnFijsBbOaWIZXrinfNA9vuuIhkv5K2R219H3J7LlULqjcl/2Yp6YHbpEdYscz6 X6CbIf2BvKRHI7HcuYfyR/uuRHjKYuSBs8+amIeMfZwPIUrRd1ZP58xJp/Mntj63 bpKX4bERppKY9ISQrF/iGe2qNNtSdNFkb1mk8i9c0mpRiKLs9w0PEfg34SzGYVe1 RxOFMYcEICN+MMRMPxOV52P+keFXT7KzklSi42eF7PDrGMdLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLViI1OC1kbUsVj3YA9PzkOsJUZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMTNiMDVhOTUtNTVkZC0z M2U4LWJhYWYtYmNjZGMwNDMyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItSLMhLbYGcredXHmspV5TDjlqYguw5e5KDPGJuVzZ6s+e3qE4rLcDJ Lk2zwRFeqPZ7oM1wqdqhRuISW21gyYfAxGP83HMPU36n4YDRv4sL8zCTbiXBCPHd 4BHCgZVToRLfynr+h+ZDsbbErFILij82oJCj7pX4VHUGyHJ5KNd0OpPgtG8RGXyd c9NW+e38n8d2PYr8RxLuCd5k90kNziIp2IO88ws/kYUOINLFa/Ue/GH9jG4H3cq3 +zcuuenac2Pc3x2HHdHfWTUlfPSJJe2RPpI/FwjOr+K2f84XUcqnmKpD+jhTfKT1 l0Gu0OUcaH8K8S4v8rHCXjGZQx8xL1E= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:02 2025 by rpki-client