$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa File: a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa (raw, json) Hash identifier: W7h5UvI/Rt3amkra79h8JzjlJ+dMBHFkYRzjxYfK5e0= Subject key identifier: 5A:D8:81:70:5C:0A:D2:83:0B:26:8C:E6:07:B3:8F:13:E7:A0:A7:8C Certificate issuer: /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Certificate serial: 010D0C9F4328584B5B074C4FBEE0582A4BF59F00 Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 13737 IP address blocks: 23.129.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4c:4f:be:e0:58:2a:4b:f5:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7cf94257-6d60-46c7-a59b-b6cfa8498dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:3a:c3:06:d8:0c:98:c5:0d:ba:f3:71:87: 78:fc:bf:58:ec:d7:9b:92:36:fa:9b:88:e6:7f:34: 74:f2:1f:e2:31:6b:70:c5:c8:38:c4:60:94:42:67: f7:a8:32:5b:67:09:9c:45:df:4c:87:29:d6:55:8c: 7d:c8:68:9f:45:a9:48:3e:26:ec:99:5b:27:57:30: 97:1d:7b:cc:1d:6a:33:83:60:88:3c:32:a8:d3:e1: 5a:58:67:d0:6c:8c:be:3c:39:bb:26:21:2f:de:f6: 5a:b6:44:8d:1b:58:6e:0c:a9:e5:c2:39:e2:fe:bb: fc:e0:e4:17:88:ed:34:19:ff:c1:19:d2:ab:45:29: c5:bb:4f:8d:ec:40:1b:5a:29:a2:66:58:bd:9c:8f: 6e:b3:39:b2:29:a7:75:46:cc:b9:c4:14:53:5b:2b: c9:35:4b:5f:17:32:37:35:89:0b:f5:96:cb:01:ce: 7f:06:b6:74:fb:38:cf:88:c0:64:0a:cb:9b:5d:5f: b0:f6:fd:5f:6b:59:e3:c2:44:ed:6b:8c:ca:6d:03: 57:38:2f:b2:ae:d0:9b:94:65:75:a7:fd:59:0d:29: 6f:bc:ab:e7:83:b4:c3:49:52:e4:b7:38:46:fe:cf: e0:e7:3b:e6:ce:7f:3c:2b:1b:30:6c:06:a2:63:56: 6a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:81:70:5C:0A:D2:83:0B:26:8C:E6:07:B3:8F:13:E7:A0:A7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl X509v3 Authority Key Identifier: keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer sbgp-ipAddrBlock: critical IPv4: 23.129.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:24:ce:fb:90:33:cf:b9:7a:7e:c9:f6:d1:5a:91:91:b1:38: 92:ca:cf:77:9d:cd:2d:53:08:6e:e7:b1:e0:11:3b:a9:a1:91: 53:9d:ee:d1:0f:61:e0:3f:c5:3b:12:a2:cc:ea:f8:7c:7a:cf: c0:4b:1b:4d:5a:e6:2c:95:b9:89:53:b8:c2:34:ac:d0:6a:1b: 37:36:12:f7:c0:4b:7d:a6:cc:4c:63:9f:ec:f6:fd:07:ed:0c: 88:5c:89:0e:6d:87:46:11:8e:14:18:85:ee:dd:39:61:46:67: 63:0f:20:59:8b:e2:a7:79:50:14:3e:51:95:40:98:c0:1f:92: 87:f1:f3:69:e0:51:27:dd:e3:94:b3:6b:0b:c7:21:6a:11:f3: 10:10:13:89:51:43:54:c0:f8:2f:08:a8:3d:4e:7b:79:c8:0d: 13:1f:ea:78:f4:c2:05:6f:6c:48:a0:8f:9e:6b:6f:8f:76:7a: 2b:51:a4:6f:2b:19:aa:e4:7b:09:25:03:6b:33:44:a6:0c:58: 5b:4d:fe:c1:fd:7f:88:7b:b5:c6:2d:c1:14:b2:91:e0:dd:fb: 91:cb:71:97:db:c2:81:6b:e6:2a:17:a5:19:c3:b8:74:8e:9b: 32:ba:b5:e2:6b:24:08:a3:0b:17:bc:59:6c:66:5a:5a:27:3b: 3d:83:00:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0xPvuBYKkv1nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNTNkODMtNWU2OC00M2U2LWI1ZmUtNzhhMmM0NTQ2 NTQ2MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2NmOTQyNTctNmQ2MC00NmM3LWE1OWItYjZjZmE4NDk4ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlk6wwbYDJjFDbrzcYd4/L9Y7Nebkjb6m4jm fzR08h/iMWtwxcg4xGCUQmf3qDJbZwmcRd9MhynWVYx9yGifRalIPibsmVsnVzCX HXvMHWozg2CIPDKo0+FaWGfQbIy+PDm7JiEv3vZatkSNG1huDKnlwjni/rv84OQX iO00Gf/BGdKrRSnFu0+N7EAbWimiZli9nI9uszmyKad1Rsy5xBRTWyvJNUtfFzI3 NYkL9ZbLAc5/BrZ0+zjPiMBkCsubXV+w9v1fa1njwkTta4zKbQNXOC+yrtCblGV1 p/1ZDSlvvKvng7TDSVLktzhG/s/g5zvmzn88KxswbAaiY1ZqfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrYgXBcCtKDCyaM5gezjxPnoKeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1 M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEyYzQ1NDY1NDYvYTZjZDM2M2EtOTU5YS0z YTZiLTk5ZmEtOGFhMmFjYTcxZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNiNTNkODMtNWU2OC00M2U2LWI1 ZmUtNzhhMmM0NTQ2NTQ2LzIzYjUzZDgzLTVlNjgtNDNlNi1iNWZlLTc4YTJjNDU0 NjU0Ni5jcmwwHwYDVR0jBBgwFoAU+v+87d2vk5tSjRwfpyf83ZKQ3iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEy YzQ1NDY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAkzvuQM8+5en7J9tFakZGxOJLKz3edzS1TCG7nseARO6mhkVOd7tEP YeA/xTsSoszq+Hx6z8BLG01a5iyVuYlTuMI0rNBqGzc2EvfAS32mzExjn+z2/Qft DIhciQ5th0YRjhQYhe7dOWFGZ2MPIFmL4qd5UBQ+UZVAmMAfkofx82ngUSfd45Sz awvHIWoR8xAQE4lRQ1TA+C8IqD1Oe3nIDRMf6nj0wgVvbEigj55rb492eitRpG8r GarkewklA2szRKYMWFtN/sH9f4h7tcYtwRSykeDd+5HLcZfbwoFr5ioXpRnDuHSO mzK6teJrJAijCxe8WWxmWlonOz2DACo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:37 2025 by rpki-client