$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa File: ec69835c-0929-34da-8360-1c7309443e7a.roa (raw, json) Hash identifier: BpOheb/iqMBH/CmiSy7wdYT/9b0K2T5T3II03omIzcw= Subject key identifier: 8B:F8:F0:D6:AA:03:CF:A9:DF:5D:01:40:42:92:9E:3B:72:BB:36:63 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F4328584B52A751534B3C0B7E23222F80 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 55134 IP address blocks: 23.173.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:51:53:4b:3c:0b:7e:23:22:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1afa40f3-eb16-444b-aaa2-e49eeaad9ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:13:1e:18:94:f3:86:6f:81:69:d4:ca:fb: d2:ba:5b:a9:6a:23:f0:ae:9b:58:da:95:e5:08:88: 0a:ee:25:dc:1f:07:f5:6c:c1:57:3c:e7:c2:c0:a6: 6b:c6:f3:fb:c0:f0:03:ec:69:4d:ce:81:e4:57:bb: 2d:41:11:fa:2e:93:b5:1e:cd:2c:3e:3b:ca:d2:c5: 3a:6f:fc:78:49:4c:e5:50:6d:73:82:7e:53:c6:41: da:e9:55:58:be:a0:de:05:e7:5e:96:dd:b1:02:e2: a6:1c:4a:11:c1:1c:52:08:18:21:f3:c3:f5:4e:d8: c1:fc:10:e1:53:62:14:4d:05:4f:24:80:b5:02:1f: c2:9e:bc:16:5f:0e:40:c3:a4:0c:26:c7:ab:e3:02: 69:b4:bf:f2:85:3e:a5:29:7b:39:08:72:64:a4:31: 72:89:58:03:3d:6d:67:5b:d9:3a:70:ff:9a:42:2f: 8a:77:43:78:81:20:bb:aa:1d:f9:8b:f5:02:1e:c4: a3:b4:66:06:e0:24:c6:72:0a:83:40:86:f8:39:e3: 47:fb:5d:2b:61:90:7b:24:a2:ea:a5:26:92:79:41: a4:d6:da:9a:c9:27:c1:cd:b8:84:3a:42:c4:13:41: 25:61:ed:7b:f9:9d:5e:63:c5:ad:f6:7a:c1:c8:ac: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F8:F0:D6:AA:03:CF:A9:DF:5D:01:40:42:92:9E:3B:72:BB:36:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ec69835c-0929-34da-8360-1c7309443e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:97:71:ad:b9:c7:39:46:0e:71:7f:12:56:60:8e:f3:b9:3e: 17:c0:71:53:ce:88:6f:44:22:41:3c:0f:3a:6c:be:9d:cc:c0: 96:72:3e:1e:d0:f2:df:9f:2e:52:e4:cc:10:f6:d3:ad:d8:5b: 73:f5:fa:74:3f:0d:ce:99:5c:a2:59:2c:00:11:e9:92:09:75: 25:08:b6:a1:6d:d0:b1:f5:05:23:a1:92:03:0e:04:fb:0c:88: 08:0d:b1:f8:8c:66:e2:b2:5f:3e:1a:14:97:32:2e:d7:68:d4: 78:ab:29:60:2d:01:73:1b:58:64:f0:0b:da:93:22:63:14:5b: 31:f8:ab:47:cb:86:bf:f4:9b:92:ae:06:be:1d:d5:8f:e7:d8: 5d:3d:32:bb:f8:a2:b6:0e:2a:de:6d:26:39:95:a1:33:be:3e: 7b:5c:be:23:3d:53:77:16:d2:87:bb:78:d3:85:07:de:90:71: 9a:29:97:f2:fd:d7:d6:a9:79:f0:8c:0c:6d:65:60:b2:11:64: 7b:67:0b:ae:8d:45:d9:9d:e3:c3:3e:16:79:92:fd:9c:1b:ec: ad:77:fa:b5:7c:73:7a:8c:4f:8a:9a:3e:b9:c4:03:9e:9f:44: 9d:86:f3:c4:02:95:ca:99:8a:49:83:7f:87:6d:8f:4c:23:f8: fc:7b:61:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1FTSzwLfiMiL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWFmYTQwZjMtZWIxNi00NDRiLWFhYTItZTQ5ZWVhYWQ5YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl78THhiU84ZvgWnUyvvSulupaiPwrptY2pXl CIgK7iXcHwf1bMFXPOfCwKZrxvP7wPAD7GlNzoHkV7stQRH6LpO1Hs0sPjvK0sU6 b/x4SUzlUG1zgn5TxkHa6VVYvqDeBedelt2xAuKmHEoRwRxSCBgh88P1TtjB/BDh U2IUTQVPJIC1Ah/CnrwWXw5Aw6QMJser4wJptL/yhT6lKXs5CHJkpDFyiVgDPW1n W9k6cP+aQi+Kd0N4gSC7qh35i/UCHsSjtGYG4CTGcgqDQIb4OeNH+10rYZB7JKLq pSaSeUGk1tqaySfBzbiEOkLEE0ElYe17+Z1eY8Wt9nrByKyC3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv48NaqA8+p310BQEKSnjtyuzZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvZWM2OTgzNWMtMDkyOS0z NGRhLTgzNjAtMWM3MzA5NDQzZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiXca25xzlGDnF/ElZgjvO5PhfAcVPOiG9EIkE8Dzpsvp3MwJZyPh7Q 8t+fLlLkzBD2063YW3P1+nQ/Dc6ZXKJZLAAR6ZIJdSUItqFt0LH1BSOhkgMOBPsM iAgNsfiMZuKyXz4aFJcyLtdo1HirKWAtAXMbWGTwC9qTImMUWzH4q0fLhr/0m5Ku Br4d1Y/n2F09Mrv4orYOKt5tJjmVoTO+PntcviM9U3cW0oe7eNOFB96QcZopl/L9 19apefCMDG1lYLIRZHtnC66NRdmd48M+FnmS/Zwb7K13+rV8c3qMT4qaPrnEA56f RJ2G88QClcqZikmDf4dtj0wj+Px7YQs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:23 2025 by rpki-client